Adware.MyWebSearch/FunWebProducts

S

SC Tom

Emrys Davies said:
SC Tom said:
Emrys Davies said:
?"Emrys Davies" wrote in message



?"Emrys Davies" wrote in message

I have Win7 Home Premium 64 bit and WLM 2009

Just lately my SUPERAntiSpyware Free Edition has been finding a host
of the
above spyware. I quarantine it and Restart, but it shows up again,
instantly. There is nothing in my Installed Programmes or IE
toolbar of a
similar name, but there is 'Fun Web Products install' in Manage
Add-ons and
I have Disabled that. Still it persists. I obviously need a fresh
spyware
detector, but I sense that there will be an answer here. It could be
harmless. Have tried Google. Any ideas?


Mr. Davis,

Here's what I do and I NEVER have any adware or virus problems

1) Download and use Microsoft Security Essentials
2) Turn on the Windows firewall
3) Download Malwarebytes free version. Do a complete scan once per
week
4) Download SUPERantispyware free version. Do a complete scan once
per week
5) Keep all of the above plus Windows and Internet Explorer if you
use it. updated regularly

Here's how to uninstall Fun Web Products:

http://help.funwebproducts.com/uninstall/uninstall.html

I have all of these and I do what you advise, except that I have
'avast', which I like, instead of MSE. Fun Web Products did not show
in 'Installed Programmes' but I got rid of it via 'regedit.exe'.
Still little bits of 'My Web Search'etc. in there, but not sure about
them so will leave well alone. Tread lightly in there unless sure.
Thanks a lot.

SUPERAntiSpyware repeatedly finds two 'Adware.Tracking Cookie' which
have a
large red dot against them. It 'kills' them but they instantly show
up. I
now find that if I r.c. them it says 'Always allow item. (Trust
Item)'.
Item 2 is: C:Users\Emrys
Davies\AppData\Roaming\Microsoft\Windows\Cookies\emrysdavies@atdmtcombing[2].txt
and item 1 is identical, but without the combing. Malwarebytes does
not
find these. Just wondered what you think of this.

=====================================================================================================================

Emrys,

I said that I NEVER have any adware using my stated protection. That's
not quite true. I confess that on rare occasions, SUPERantispyware
finds a tracking cookie or two which do not show up on MSE or
malwarebytes. I may go a month or two before I see another tracking
cookie which I just ignore since SAS removes them.

But what I have said is that SAS found and removed two tracking cookies,
quarantined them and when I ran it again, instantly, they were still
there. Try it for yourself.
I get the "atdmt" twice and one from "vermontcountrystore" (I shop there
occasionally) in SAS every time I run it, even though those cookies are
not in the folder it says they are. Same as you, I can quarantine them,
delete the quarantines (or not), and rerun SAS and they show up again.
Whether or not IE is open makes no difference. A search through the
registry shows atdmt in the same key as bing, which I have used maybe 3
or 4 times since it came out.
I don't know why SAS catches it, or where exactly it comes from, but I
haven't had any problems lately, no one has cleared out my bank accounts
or anything else that I'm aware of, so I don't think it's of any
consequence. It just concerns me that when SAS finds them, it says they
are in a particular location that they aren't.
Very enlightening. Thanks. Are you saying that those Tracking Cookies
which I referred to are fairly harmless? Incidentally, I have cleared out
Adware.MyWebSearch\FunWebProducts with the help of Malwarebytes (26
strikes) and Spybot. I used the latter last of all and it found a further
41 of the baddies - probably mostly remnants. Shows that all of these
Malware software have a cumulative purpose. I will keep all three after
these experiences.
They seem to be harmless to me.
I found that all I have to do is open IE8 and the atdmt one is written to my
Cookies folder. I even tried with using about:blank as my home page. Makes
no difference- all I have to do is open it and close it without going
anywhere else and the cookie is written. I also have atdmt.com set to
Blocked in my privacy settings. Makes no difference.
This is what's in the atdmt.txt file:

ANON
A=5448A217D99CAC489FD346DDFFFFFFFF&E=abb&W=1
atdmt.com/
0
25554176
30166969
3198290320
30126705
*
NAP
V=1.9&E=a61&C=Q96xK733cGCsbBMMtcuzM6KWgJkadulqJMTR0S3HiYMurEO3z5RGFw&W=1
atdmt.com/
0
1882647808
30146852
3198440320
30126705
*

Doesn't mean anything to me, but it might to someone.

I don't think atdmt has anything to do with FunWebProducts, and I wish you
luck getting it all cleared out. I haven't had a worm/virus since Windows
95, but I remember how hard it was to get rid of.
 
E

Emrys Davies

SC Tom said:
Emrys Davies said:
SC Tom said:
?"Emrys Davies" wrote in message



?"Emrys Davies" wrote in message

I have Win7 Home Premium 64 bit and WLM 2009

Just lately my SUPERAntiSpyware Free Edition has been finding a host
of the
above spyware. I quarantine it and Restart, but it shows up again,
instantly. There is nothing in my Installed Programmes or IE
toolbar of a
similar name, but there is 'Fun Web Products install' in Manage
Add-ons and
I have Disabled that. Still it persists. I obviously need a fresh
spyware
detector, but I sense that there will be an answer here. It could
be
harmless. Have tried Google. Any ideas?


Mr. Davis,

Here's what I do and I NEVER have any adware or virus problems

1) Download and use Microsoft Security Essentials
2) Turn on the Windows firewall
3) Download Malwarebytes free version. Do a complete scan once per
week
4) Download SUPERantispyware free version. Do a complete scan once
per week
5) Keep all of the above plus Windows and Internet Explorer if you
use it. updated regularly

Here's how to uninstall Fun Web Products:

http://help.funwebproducts.com/uninstall/uninstall.html

I have all of these and I do what you advise, except that I have
'avast', which I like, instead of MSE. Fun Web Products did not show
in 'Installed Programmes' but I got rid of it via 'regedit.exe'.
Still little bits of 'My Web Search'etc. in there, but not sure about
them so will leave well alone. Tread lightly in there unless sure.
Thanks a lot.

SUPERAntiSpyware repeatedly finds two 'Adware.Tracking Cookie' which
have a
large red dot against them. It 'kills' them but they instantly show
up. I
now find that if I r.c. them it says 'Always allow item. (Trust
Item)'.
Item 2 is: C:Users\Emrys
Davies\AppData\Roaming\Microsoft\Windows\Cookies\emrysdavies@atdmtcombing[2].txt
and item 1 is identical, but without the combing. Malwarebytes does
not
find these. Just wondered what you think of this.

=====================================================================================================================

Emrys,

I said that I NEVER have any adware using my stated protection.
That's not quite true. I confess that on rare occasions,
SUPERantispyware finds a tracking cookie or two which do not show up
on MSE or malwarebytes. I may go a month or two before I see another
tracking cookie which I just ignore since SAS removes them.

But what I have said is that SAS found and removed two tracking
cookies, quarantined them and when I ran it again, instantly, they were
still there. Try it for yourself.
I get the "atdmt" twice and one from "vermontcountrystore" (I shop there
occasionally) in SAS every time I run it, even though those cookies are
not in the folder it says they are. Same as you, I can quarantine them,
delete the quarantines (or not), and rerun SAS and they show up again.
Whether or not IE is open makes no difference. A search through the
registry shows atdmt in the same key as bing, which I have used maybe 3
or 4 times since it came out.
I don't know why SAS catches it, or where exactly it comes from, but I
haven't had any problems lately, no one has cleared out my bank accounts
or anything else that I'm aware of, so I don't think it's of any
consequence. It just concerns me that when SAS finds them, it says they
are in a particular location that they aren't.
Very enlightening. Thanks. Are you saying that those Tracking Cookies
which I referred to are fairly harmless? Incidentally, I have cleared
out Adware.MyWebSearch\FunWebProducts with the help of Malwarebytes (26
strikes) and Spybot. I used the latter last of all and it found a
further 41 of the baddies - probably mostly remnants. Shows that all of
these Malware software have a cumulative purpose. I will keep all three
after these experiences.
They seem to be harmless to me.
I found that all I have to do is open IE8 and the atdmt one is written to
my Cookies folder. I even tried with using about:blank as my home page.
Makes no difference- all I have to do is open it and close it without
going anywhere else and the cookie is written. I also have atdmt.com set
to Blocked in my privacy settings. Makes no difference.
This is what's in the atdmt.txt file:

ANON
A=5448A217D99CAC489FD346DDFFFFFFFF&E=abb&W=1
atdmt.com/
0
25554176
30166969
3198290320
30126705
*
NAP
V=1.9&E=a61&C=Q96xK733cGCsbBMMtcuzM6KWgJkadulqJMTR0S3HiYMurEO3z5RGFw&W=1
atdmt.com/
0
1882647808
30146852
3198440320
30126705
*

Doesn't mean anything to me, but it might to someone.

I don't think atdmt has anything to do with FunWebProducts, and I wish you
luck getting it all cleared out. I haven't had a worm/virus since Windows
95, but I remember how hard it was to get rid of.
Spybot also found and got rid of those two Tracking Cookies which
SUPERAntiSpyware kept finding and got rid of over and over again, but the
latter failed to find them after the Spybot run. All is being revealed.
Thanks.
 
G

Gene E. Bloch

They seem to be harmless to me.
I found that all I have to do is open IE8 and the atdmt one is written to my
Cookies folder. I even tried with using about:blank as my home page. Makes
no difference- all I have to do is open it and close it without going
anywhere else and the cookie is written. I also have atdmt.com set to
Blocked in my privacy settings. Makes no difference.
This is what's in the atdmt.txt file:

ANON
A=5448A217D99CAC489FD346DDFFFFFFFF&E=abb&W=1
atdmt.com/
0
25554176
30166969
3198290320
30126705
*
NAP
V=1.9&E=a61&C=Q96xK733cGCsbBMMtcuzM6KWgJkadulqJMTR0S3HiYMurEO3z5RGFw&W=1
atdmt.com/
0
1882647808
30146852
3198440320
30126705
*

Doesn't mean anything to me, but it might to someone.

I don't think atdmt has anything to do with FunWebProducts, and I wish you
luck getting it all cleared out. I haven't had a worm/virus since Windows
95, but I remember how hard it was to get rid of.
Are you sure that isn't the DNA code to make a clone of you?

The problem with cookies is that they *look* harmless :)

I really don't worry too much about them, since I believe most are
harmless, but maybe I'm a fool. And I do occasionally run scans by
MalwareBytes, SuperAntiSpyware, and MS Security Essentials.
 
S

SC Tom

Gene E. Bloch said:
Are you sure that isn't the DNA code to make a clone of you?
**** LOL!! If any one wants a clone of me, they're welcome to it, along with
the bum shoulder, worn out knees, and we won't even go into the digestive
tract (no pun intended)!!
The problem with cookies is that they *look* harmless :)

I really don't worry too much about them, since I believe most are
harmless, but maybe I'm a fool. And I do occasionally run scans by
MalwareBytes, SuperAntiSpyware, and MS Security Essentials.
**** I don't worry much about them either; there are plenty of other nasties
to take care of. Between MB, SAS, and ZASS, I have managed to keep them at
bay.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top