Solved (PUP.Datamngr) how can i get rid of this

[iceman087]

While you're in the hands of the very best attempting to clean up the infection, keep in mind that many of these serious infections never completely clean up so you might want to be backing up your data to quarantine for thorough scanning, gathering your program installers, and studying these same steps to get a perfect Clean Reinstall - Factory OEM Windows 7.

Just sayin I have never had a situation where I ran perfect Windows 7 after such an infection.

if im gonna do all this,i might as well just reformat hadnt i?

 

[gregrocker]

That's almost always the conclusion I've come to in your situation.

You would want to first wipe the HD with Diskpart Clean Command accessing the Command line by pressing Shift + F10 at first screen after booting installer, then follow closely the same steps to get a perfect Clean Reinstall - Factory OEM Windows 7. Everything you need is in the blue link, which will get and keep a perfect install to the extent you stick with the tools and methods given.

It's important that any files you back up are closely scanned with your AV, Malwarebytes and the tool which deals most effectively with your infection - both on the old install and then before they are reimported to the new one.

Once it's set up and running perfectly save a Win7 backup image to use in place of future reinstalls.

 

[iceman087]

theres no issues with my computer running and none of the stuff i was told to delete or unistall was in the programs list.i usually dont back anything up when it comes to reformatting.i just do it from scratch...cant you just right clivk on the c drive and formatt it?

 

[gregrocker]

If you have no performance problems or chronic infection then there's no need to reinstall., as long as Win7 meets the its native performance standard of fast with no hangs on adequate hardware.

 

[iceman087]

ya everything runs fine,just when i ran maylewarebytes it would find this everytime

 

[gregrocker]

Then work with our Security experts to root it out, before you can judge.

 

[iceman087]

yes,thanks for your help dude.you guys are very helpful here.i posted my findings from the programs they asked me to run so ill wait for a response.

 

[iceman087]

just ran mayleware bits andguess what.NOT SHOWING ANYMORE
Malwarebytes Anti-Malware 1.70.0.1100
Malwarebytes : Free anti-malware download

Database version: v2013.02.02.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
chuck :: CHUCK-PC [administrator]

2/3/2013 1:35:32 PM
mbam-log-2013-02-03 (13-35-32).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 205492
Time elapsed: 1 minute(s), 34 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)
awsome,thanks again guys.yourawsome...

 

[gregrocker]

Run a full scan. You cannot chance a Quick Scan on an infected PC.

 

[cottonball]

gregrocker is right! You want it to scan everything it can, not the short scan option.

To get the report generated by OTL's - Run Fix option, do the following:
Right-click Satrt > Open Windows Explorer
Find your Local Disk C:

Find the _OTL folder and open it.
In the OTL folder, there is a folder called MovedFiles, open it
Inside the MovedFiles folder, there is a folder with numbers, and below it (or in it), there is a text document with numbers:
XXXXXXX_XXXXXX where X = number.

Please post the text document with numbers in your reply.

In the meantime, will take a look at your other reports.

 

[cottonball]

iceman087,

The reports look as if their corresponding program did its job.

However, although the programs you already ran are coming up clean, malware could still be lurking somewhere, particularly in the form of a Rootkit.

So, let’s take a look before Windows starts…

Need some info from you:
Do you have the Repair your computer option in the Advanced Boot Options menu?

To find out:
Restart the computer.
As soon as the BIOS is loaded begin tapping the F8 key until the Advanced Boot Options menu appears.
Is the Repair your computer option listed?

If you do not have the option, do you have your Windows 7 installation CD/DVD available?

And last, do you have a USB flash drive, and access to another computer that is not infected?

 

[iceman087]

i do have the option i believe.remember seeing it there

 

[cottonball]

Will you get the OTL - Run Fix report first, and post it?

Thanks.

 

[cottonball]

You may want to print these instructions so you can have access to follow them.
Also, you may want to read them once befor you apply them.

Please plug a flash drive into a clean computer.




Go to Start > Computer

• Double-click Computer, and select the flash drive.
• Right-click and select: Format
• Press Start on the Format prompt..

Next, download Farbar Recovery Scan Tool:
Farbar Recovery Scan Tool Download
Select the 64-bit download.

Save the program to the >>> USB flash drive.
Remove the drive from the clean computer.

Next, plug the flash drive into the infected computer.


>>>Restart the computer.

• As soon as the BIOS is loaded begin tapping the F8 key until the Advanced Boot Options menu appears.
• Use the arrow keys to select the Repair your computer menu item.
• Select your language settings, and click: Next
• Select your User account and click: OK (If you did not set a password, leave blank.)

On the System Recovery Options menu you get the following options:

• Startup Repair
  [*]System Restore
  [*]Windows Complete PC Restore
  [*]Windows Memory Diagnostic Tool
  [*]Scan your computer's memory for errors.
  [*]Command Prompt

Select: Command Prompt

• In the Command window, at the bliking cursor type notepad and press: Enter
• In Notepad, under the File menu select: Open
• Double-click Computer, find the flash drive letter, remember what letter it is, click on it, and press: Open
• Close out of Notepad.
• Click the Command window
• Type x:\frst64.exe, and press: Enter
  Note: Replace the drive letter x with the drive letter of your flash drive!

The tool starts and prepares to run. Follow the prompts.

• Click Yes to the disclaimer.
• Press: Scan
• When done, the program saves the FRST.txt report, on the flash drive.

Click the Command prompt window, and type exit, and press: Enter

Back at the System Recovery Options, press: Restart

When the computer boots back into Windows, please provide the FRST.txt in your reply.
It is located in the USB flash drive.

 

[cottonball]

Have to go get some lunch, will be checking this thread as soon as I get back.

 

[iceman087]

Will you get the OTL - Run Fix report first, and post it?

Thanks.

here it is

 

[iceman087]

maylewarebytes wont do a full scan,it causes my computer to reboot so i did a quick scan again and it didnt find anything...could that pup be causing this?

 

[gregrocker]

Try it in Safe Mode.

I'd also run the Windows Defender Offline from bootable CD since infection may be interfering with scan while OS is running.

 

[iceman087]

Try it in Safe Mode.

I'd also run the Windows Defender Offline from bootable CD since infection may be interfering with scan while OS is running.

i did the wdoffline thing

 

[iceman087]

i cant do much more tonight guys,ill be back tommorrow.i cownloade that program and put it oj my flashdrive so ill try thattommorrow.ill check back here first to see ifyou guys leave anymore info.thanks for your help.