7201 Adware On Install ?

Page 1 of 2 12 LastLast

  1. Posts : 66
    W7 Build 7201 / Vista Home SP2 ( Both x86)
       #1

    7201 Adware On Install ?


    I just did a clean install of 7201 and am going through the process of setting up my toys just the way i like them .

    Unfortunately after running a Malwarebytes scan i have found 6 reg keys infected with ad-ware , So after deleting them i ran a scan with Spy-Bot and found another item of ad-ware on my w7 partition.

    See attachments below for full details.

    Seems very odd that i should have them on my notebook as its a "clean install". I did use IE8 briefly to set it up the way i like but all my security was inplace before hand.

    Do you think these could be false positives/possible bug Ive inherited from the the shortcuts i transfered from 7137 ? Seems unlikely because i do regular scans and i always get a clean bill of health. (Hence why its so odd to me)
    Any help/suggestions much appreciated as I'm curious as to whats happened please ?

    Malwarebytes log :

    Malwarebytes' Anti-Malware 1.37
    Database version: 2227
    Windows 6.1.7201
    04/06/2009 04:34:25
    mbam-log-2009-06-04 (04-34-25).txt
    Scan type: Quick Scan
    Objects scanned: 68661
    Time elapsed: 2 minute(s), 50 second(s)
    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 6
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0
    Memory Processes Infected:
    (No malicious items detected)
    Memory Modules Infected:
    (No malicious items detected)
    Registry Keys Infected:
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History\bfast.com (Adware.BHO) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History\commission-junction.com (Adware.BHO) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History\fastclick.com (Adware.BHO) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History\fastclick.net (Adware.BHO) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History\kqzyfj.com (Adware.BHO) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History\linksynergy.com (Adware.BHO) -> Quarantined and deleted successfully.
    Registry Values Infected:
    (No malicious items detected)
    Registry Data Items Infected:
    (No malicious items detected)
    Folders Infected:
    (No malicious items detected)
    Files Infected:
    (No malicious items detected)
    Attached Thumbnails Attached Thumbnails 7201 Adware On Install ?-spybot-scan.jpg  
    7201 Adware On Install ? Attached Files
      My Computer


  2. Posts : 990
    Windows 7 Home Premium x64
       #2

    That's not on the 7201 build. You got nailed running IE somehow. Confirmed using a fresh x64 build.
      My Computer


  3. Posts : 66
    W7 Build 7201 / Vista Home SP2 ( Both x86)
    Thread Starter
       #3

    Wasnt suggesting its in the build , just wondering how i got 7 lots of adware setting up IE 8 ?
      My Computer


  4. Posts : 990
    Windows 7 Home Premium x64
       #4

    IE was your first mistake. Sorry, run Firefox and use AdBlock Plus.
      My Computer


  5. Posts : 66
    W7 Build 7201 / Vista Home SP2 ( Both x86)
    Thread Starter
       #5

    Thanks for the advice lol.
      My Computer


  6. Posts : 83
    windows 7 rc 64bit and vista 32bit
       #6

    that a good idea cap zero i'll use the advice too
      My Computer


  7. Posts : 18,404
    Windows 7 Ultimate x64 SP1
       #7

    Hi detoxa,



    I have these too on a clean 7201 x64 install. I confirmed my hashes. Do you perhaps have Spywareblaster installed as well? I don't think it's from setting up IE8, and there's nothing wrong with running IE . I'm thinking it might be false positives from some recent Malwarebytes updates and Spywareblaster entries. I'm running further scans with other scanners, I'll post back if I find anything more. This is the first build I've encountered this with.
      My Computer


  8. Posts : 5,941
    Linux CENTOS 7 / various Windows OS'es and servers
       #8

    Hi all
    Sorry to disappoint you -- it's not so much the browser itself as to what you run in it.

    Also NEVER EVER run those programs that offer to scan your registry or fix your drivers from a Browser.

    This is the EASIEST way ever of getting an infected system. If you must run these wretched type of programs (they are usually sneakware -- you get things like problems found but you need to "upgrade" to a PRO (i.e PAY) version to use the feature you want) run then stand alone first (i.e from an .EXE file having scanned it carefully first).

    Switch off all things like accelerators etc etc in Browsers -- ideally have as few plugins as possible -- with the speed of the Internet these days it doesn't take much longer to download a file such as a PDF / HTML or wahtever and run it in stand alone mode on your PC in a dedicated application.

    Same (or especially true) for multi media files -- run these also from within a dedicated application and not within a browser.

    Cheers
    jimbo
      My Computer


  9. Posts : 990
    Windows 7 Home Premium x64
       #9

    These entries don't appear in my reg. But... I also haven't run IE, not once, since a clean install. My point earlier is that it doesn't appear to have come with the OS unless it's something that's installed on first-run or something that's loaded from MSN.com when it loads. No other ideas on this one.
      My Computer


  10. Posts : 805
    XP Pro SP3 x86/Vista SP2 x64/Win7 x64 Triple-boot
       #10

    Someone from MajorGeeks forums claims they are false-positives. Apparently if you check the reg keys and they have the data value of 5 then everythings ok.

    Block-Checker [Archive] - MajorGeeks Support Forums
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 17:27.
Find Us