We’ve had the privilege of helping hundreds of people with their Windows computers. We were not surprised to see how many of these computer were barely running due to spyware and adware which people unknowing install thanks to the current developer fascination with bundling.<\/p>\n
Bundling is when developers bundle other software with the software you really want in order to make money from their freeware. It’s no wonder than that so many people who do their homework and download only reputable freeware get unwanted surprises if they’re not very careful during the installation process. In fact, even if they’re careful, unchecking the boxes which give you the option to install the bundled software doesn’t to anything at all and the bundled software is installed anyway — often without any acknowledgements or license agreements.<\/p>\n
There’s one particular company who tops the lists when it comes to installing junkware on personal computers — and that’s the parent company of Ask.com — the failed search engine — Interactive Corp. Interactive is the company behind FunWebProducts which is anything but fun. They have so many junkware programs including MyWebSearch, SmileyCentral, Webfetti, and dozens and dozens of others — the most deplorable of which is a Bible quotes\/study toolbar. This company has even sunk to the level of playing on religion in order to make a profit.<\/p>\n
We recently worked on a computer which had become so slow and was crashing so often the owner could barely use it. This person had no idea why she was getting popups, browser redirections or why her home page was being hijacked. When we scanned the computer with Malwarebytes over 200 instances of Interactive Corp (FunWebProducts\/MySearch et. al.) were found on her computer. Malwarebytes calls anything related to FunWebProducts \/ IAC as a PUP (Potentially Unwanted Program). They call them PUPs to avoid lawsuits. But we will call a spade a spade since no one could sue us because we’re broke — and you can’t squeeze blood from a turnip. We’ll call it junkware, adware, and yes, even spyware. It’s not potentially unwanted is unwanted — or it should be.<\/p>\n
With over 200 instances of PUPs on this computer, there’s no wonder why this person’s computer barely ran. And it got this bad because once this stuff gets on a computer the “updater” installs more and more garbage. These are not updates, they’re additional programs. As soon as FunWebProducts IAC comes up with new garbage, it gets installed via the “updater” (wsupdsvc.exe).<\/p>\n
These people should be sued and forced to pay to repair the computers they ruin with their garbage. They should be forced, by law, to stop distributing their junkware by paying developers to bundle it with decent software. We’d blame the developers but there are literally thousands of them and they’re not going to stop bundling until the companies which make adware\/junkware stop paying them to bundle it.<\/p>\n
Tell us what you think about this and what you think should be done to prevent multi-billion dollar, publicly traded companies from doing this kind of thing to personal computers. Do you think they should be sued in class-action lawsuit and forced to compensatory damages for the harm their junkware causes? Do you think they should pay for using people’s computers as billboards to make money?<\/p>\n
Here’s the actual scan log from Malwarebytes from June 8, 2012. Only the username was changed to protect the individual’s privacy.
\n6\/8\/2012 1:42:08 PM
\nmbam-log-2012-06-08 (13-42-08).txt<\/p>\n
Scan type: Quick scan
\nScan options enabled: Memory | Startup | Registry | File System | Heuristics\/Extra | Heuristics\/Shuriken | PUP | PUM
\nScan options disabled: P2P
\nObjects scanned: 208012
\nTime elapsed: 3 minute(s), 15 second(s)<\/p>\n
Memory Processes Detected: 3
\nC:\\ProgramData\\UpdaterService\\wsupdsvc.exe (PUP.BundleInstaller.IB) -> 2268 -> Delete on reboot.
\nC:\\ProgramData\\UpdaterService\\wsupdsvc.exe (PUP.BundleInstaller.IB) -> 2320 -> Delete on reboot.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64brmon.exe (PUP.MyWebSearch) -> 3120 -> Delete on reboot.<\/p>\n
Memory Modules Detected: 5
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64brstub.dll (PUP.MyWebSearch) -> Delete on reboot.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64auxstb.dll (PUP.MyWebSearch) -> Delete on reboot.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64SrcAs.dll (PUP.MyWebSearch) -> Delete on reboot.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64dlghk.dll (PUP.MyWebSearch) -> Delete on reboot.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64ieovr.dll (PUP.MyWebSearch) -> Delete on reboot.<\/p>\n
Registry Keys Detected: 124
\nHKLM\\SYSTEM\\CurrentControlSet\\Services\\TelevisionFanaticService (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKLM\\SYSTEM\\CurrentControlSet\\Services\\UpdaterService (PUP.BundleInstaller.IB) -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WhiteSmoke Updater Service (PUP.BundleInstaller.IB) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{0696f815-a3a9-490a-bb14-9ec3350b1276} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{5d79f641-c168-40df-a32f-bacea7509e75} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Browser Helper Objects\\{5D79F641-C168-40DF-A32F-BACEA7509E75} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Ext\\Settings\\{5D79F641-C168-40DF-A32F-BACEA7509E75} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Ext\\Stats\\{5D79F641-C168-40DF-A32F-BACEA7509E75} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{fba7cbb1-fc93-4149-8862-d94451a7d167} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TypeLib\\{608f7340-e221-4afb-a848-c4dad297cd58} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\Interface\\{966430CC-2097-45CA-8626-2C3F454C3297} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{11111111-1111-1111-1111-110011221158} (Adware.GamePlayLabs) -> Quarantined and deleted successfully.
\nHKCR\\TypeLib\\{44444444-4444-4444-4444-440044224458} (Adware.GamePlayLabs) -> Quarantined and deleted successfully.
\nHKCR\\Interface\\{55555555-5555-5555-5555-550055225558} (Adware.GamePlayLabs) -> Quarantined and deleted successfully.
\nHKCR\\CrossriderApp0002258.BHO.1 (Adware.GamePlayLabs) -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Browser Helper Objects\\{11111111-1111-1111-1111-110011221158} (Adware.GamePlayLabs) -> Quarantined and deleted successfully.
\nHKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Ext\\Settings\\{11111111-1111-1111-1111-110011221158} (Adware.GamePlayLabs) -> Quarantined and deleted successfully.
\nHKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Ext\\Stats\\{11111111-1111-1111-1111-110011221158} (Adware.GamePlayLabs) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{04d2b915-19ff-41e9-994d-95dc898bea43} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TypeLib\\{0597d3be-9a4d-4426-a8a7-572ad299852e} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\Interface\\{4E7F49ED-8C94-4AAA-A407-3010D099B11A} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.SettingsPlugin.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.SettingsPlugin (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Ext\\Stats\\{04D2B915-19FF-41E9-994D-95DC898BEA43} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Ext\\PreApproved\\{04D2B915-19FF-41E9-994D-95DC898BEA43} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\TelevisionFanaticbar Uninstall (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{cb41fc95-f1b3-4797-8bb6-1012ff62abba} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Browser Helper Objects\\{CB41FC95-F1B3-4797-8BB6-1012FF62ABBA} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Ext\\Settings\\{CB41FC95-F1B3-4797-8BB6-1012FF62ABBA} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Ext\\Stats\\{CB41FC95-F1B3-4797-8BB6-1012FF62ABBA} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{02515cef-2063-4d64-b87a-d504c99d40dd} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TypeLib\\{aed3b1e0-fabb-4c27-a2da-ec8352ee7e30} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\Interface\\{9989BC14-9B5B-4B3B-8040-478FD1685E34} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{07494721-dfcf-41c1-8a03-b3fffb0f8409} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TypeLib\\{952c6f00-cba7-47be-baf3-cfc5808e6c7b} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\Interface\\{1E34EA93-600B-4CBC-9858-59BE04C1A581} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{0e8a6cb6-3b14-491d-8bba-86a95a62ff72} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.PseudoTransparentPlugin.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.PseudoTransparentPlugin (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Ext\\PreApproved\\{0E8A6CB6-3B14-491D-8BBA-86A95A62FF72} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{1D7E63AF-274B-426B-B51D-ADF161DF7F24} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.HTMLMenu.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.HTMLMenu (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Ext\\PreApproved\\{1D7E63AF-274B-426B-B51D-ADF161DF7F24} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{22222222-2222-2222-2222-220022222258} (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nHKCR\\CrossriderApp0002258.Sandbox.1 (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nHKCR\\CrossriderApp0002258.Sandbox (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{33333333-3333-3333-3333-330033223358} (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nHKCR\\CrossriderApp0002258.FBApi.1 (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nHKCR\\CrossriderApp0002258.FBApi (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{387dface-9e46-415f-8c86-18083b7d6ead} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TypeLib\\{73cadbbd-4dc5-419d-84f1-e7bf4c3b20c4} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\Interface\\{32CC4D2E-999C-4853-9D3E-5DE4C02D57C6} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{38deffd9-9379-4ac4-baa9-1a883dba9cd2} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.MultipleButton.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.MultipleButton (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{52d3c28f-c9ac-40b5-848f-1fb63d2badef} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.ScriptButton.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.ScriptButton (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{67d33c35-62e9-4f77-a284-9e9d256f7846} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.DynamicBarButton.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.DynamicBarButton (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{6ffb45e3-cffc-4b3a-95eb-334cb53c85b0} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TypeLib\\{a378fd9d-b406-44bb-96d2-8cdaa668713f} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\Interface\\{93A55DA3-83ED-4090-91B6-904C44647639} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.FeedManager.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.FeedManager (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{7895609d-c8b4-4cf5-a2c7-28223d0c3d92} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TypeLib\\{34979cb5-728d-4727-81bf-01850a3bb89b} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\Interface\\{934063FB-A81D-4849-B02C-478446DF3219} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.ThirdPartyInstaller.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.ThirdPartyInstaller (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Ext\\PreApproved\\{7895609D-C8B4-4CF5-A2C7-28223D0C3D92} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{7952f465-ac46-4a82-b383-870f3784d1cd} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.UrlAlertButton.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.UrlAlertButton (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{7ad9c324-3672-4d33-8477-d9c8e627f4bf} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.Radio.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.Radio (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{8be781d8-5e70-423d-82de-9e4756fce53c} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TypeLib\\{026fd9ba-112b-4d9f-86ea-589e28016e8c} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\Interface\\{0328B630-EA94-4FA3-9F27-8250B6324DDB} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.XMLSessionPlugin.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.XMLSessionPlugin (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Ext\\PreApproved\\{8BE781D8-5E70-423D-82DE-9E4756FCE53C} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{91a8da6b-8013-44aa-b63f-00195312999a} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TypeLib\\{03f59b4b-09d9-40f0-a01a-6e895023f2f0} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\Interface\\{42CB7963-EFE0-4737-A927-CE076FAA3BA0} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.RadioSettings.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.RadioSettings (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{c98d5b61-b0ea-4d48-9839-1079d352d880} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Ext\\Settings\\{C98D5B61-B0EA-4D48-9839-1079D352D880} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Ext\\Stats\\{C98D5B61-B0EA-4D48-9839-1079D352D880} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{cd3cae95-556f-46ae-b636-45dc6b297eb1} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.ToolbarPlugin.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.ToolbarPlugin (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{d09094b3-b426-4f16-a6d9-e211fe222127} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\Microsoft\\Internet Explorer\\Low Rights\\ElevationPolicy\\{D09094B3-B426-4F16-A6D9-E211FE222127} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{f02c0832-c85c-4b93-8c6f-9df20121a10d} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TypeLib\\{6784d08d-cdc3-419d-9b97-744a351ed908} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\Interface\\{844C2331-94DF-431E-9A67-426ED861D27F} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.HTMLPanel.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKCR\\TelevisionFanatic.HTMLPanel (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Ext\\PreApproved\\{F02C0832-C85C-4B93-8C6F-9DF20121A10D} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\Microsoft\\Internet Explorer\\Low Rights\\ElevationPolicy\\{4e7f49ed-8c94-4aaa-a407-3010d099b11a} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\Microsoft\\Internet Explorer\\Low Rights\\ElevationPolicy\\{65bcd620-07dd-012f-819f-073cf1b8f7c6} (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nHKCR\\CrossriderApp0002258.BHO (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\I Want This (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nHKCR\\CrossriderApp0002258.BHO (PUP.CrossFire.Gen) -> Quarantined and deleted successfully.
\nHKCR\\CrossriderApp0002258.BHO.1 (PUP.CrossFire.Gen) -> Quarantined and deleted successfully.
\nHKCR\\CrossriderApp0002258.FBApi (PUP.CrossFire.Gen) -> Quarantined and deleted successfully.
\nHKCR\\CrossriderApp0002258.FBApi.1 (PUP.CrossFire.Gen) -> Quarantined and deleted successfully.
\nHKCR\\CrossriderApp0002258.Sandbox (PUP.CrossFire.Gen) -> Quarantined and deleted successfully.
\nHKCR\\CrossriderApp0002258.Sandbox.1 (PUP.CrossFire.Gen) -> Quarantined and deleted successfully.
\nHKCU\\Software\\Cr_Installer\\2258 (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\Google\\Chrome\\Extensions\\mpfapcdfbbledbojijcbcclmlieaoogk (PUP.GamesPlayLab) -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\MozillaPlugins\\@TelevisionFanatic.com\/Plugin (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\Wow6432Node\\Google\\Chrome\\Extensions\\mpfapcdfbbledbojijcbcclmlieaoogk (PUP.GamesPlayLab) -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Browser Helper Objects\\{11111111-1111-1111-1111-110011221158} (PUP.GamePlayLab) -> Quarantined and deleted successfully.
\nHKCR\\CLSID\\{11111111-1111-1111-1111-110011221158} (PUP.GamePlayLab) -> Quarantined and deleted successfully.
\nHKCR\\TypeLib\\{44444444-4444-4444-4444-440044224458} (PUP.GamePlayLab) -> Quarantined and deleted successfully.
\nHKCR\\Interface\\{55555555-5555-5555-5555-550055225558} (PUP.GamePlayLab) -> Quarantined and deleted successfully.
\nHKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Ext\\Settings\\{11111111-1111-1111-1111-110011221158} (PUP.GamePlayLab) -> Quarantined and deleted successfully.
\nHKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Ext\\Stats\\{11111111-1111-1111-1111-110011221158} (PUP.GamePlayLab) -> Quarantined and deleted successfully.<\/p>\n
Registry Values Detected: 8
\nHKCU\\SOFTWARE\\Microsoft\\Internet Explorer\\URLSearchHooks|{0696F815-A3A9-490A-BB14-9EC3350B1276} (PUP.MyWebSearch) -> Data: -> Quarantined and deleted successfully.
\nHKCU\\SOFTWARE\\Microsoft\\Internet Explorer\\Toolbar\\WebBrowser|{C98D5B61-B0EA-4D48-9839-1079D352D880} (PUP.MyWebSearch) -> Data: a[\u008d\u00c9\u00ea\u00b0HM\u02dc9\u0010y\u00d3R\u00d8\u20ac -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\Microsoft\\Internet Explorer\\Toolbar|{C98D5B61-B0EA-4D48-9839-1079D352D880} (PUP.MyWebSearch) -> Data: -> Quarantined and deleted successfully.
\nHKCU\\SOFTWARE\\Microsoft\\Internet Explorer\\Toolbar\\WebBrowser\\{C98D5B61-B0EA-4D48-9839-1079D352D880} (PUP.MyWebSearch) -> Data: -> Quarantined and deleted successfully.
\nHKCU\\SOFTWARE\\Microsoft\\Internet Explorer\\URLSearchHooks\\{0696f815-a3a9-490a-bb14-9ec3350b1276} (PUP.MyWebSearch) -> Data: -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\Microsoft\\Internet Explorer\\Toolbar\\{c98d5b61-b0ea-4d48-9839-1079d352d880} (PUP.MyWebSearch) -> Data: -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\I Want This|Publisher (Adware.GamePlayLab) -> Data: 215 Apps -> Quarantined and deleted successfully.
\nHKLM\\SOFTWARE\\Mozilla\\Firefox\\Extensions|64ffxtbr@TelevisionFanatic.com (PUP.MyWebSearch) -> Data: C:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin -> Quarantined and deleted successfully.<\/p>\n
Registry Data Items Detected: 0
\n(No malicious items detected)<\/p>\n
Folders Detected: 7
\nC:\\Program Files (x86)\\I Want This (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin (PUP.MyWebSearch) -> Delete on reboot.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\chrome (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Users\\UserNameRemovedForPrivacy\\Local Settings\\Application Data\\I Want This (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nC:\\Users\\UserNameRemovedForPrivacy\\Local Settings\\Application Data\\I Want This\\Chrome (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nC:\\Users\\UserNameRemovedForPrivacy\\AppData\\Local\\I Want This (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nC:\\Users\\UserNameRemovedForPrivacy\\AppData\\Local\\I Want This\\Chrome (Adware.GamePlayLab) -> Quarantined and deleted successfully.<\/p>\n
Files Detected: 53
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64barsvc.exe (PUP.MyWebSearch) -> Delete on reboot.
\nC:\\ProgramData\\UpdaterService\\wsupdsvc.exe (PUP.BundleInstaller.IB) -> Delete on reboot.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64brstub.dll (PUP.MyWebSearch) -> Delete on reboot.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64brmon.exe (PUP.MyWebSearch) -> Delete on reboot.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64auxstb.dll (PUP.MyWebSearch) -> Delete on reboot.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64SrcAs.dll (PUP.MyWebSearch) -> Delete on reboot.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64dlghk.dll (PUP.MyWebSearch) -> Delete on reboot.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64ieovr.dll (PUP.MyWebSearch) -> Delete on reboot.
\nC:\\Program Files (x86)\\I Want This\\I Want This.dll (Adware.GamePlayLabs) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64bar.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64httpct.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64skin.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64htmlmu.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64datact.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64mlbtn.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64script.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64dyn.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64feedmg.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64tpinst.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64uabtn.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64radio.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64msg.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64html.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\I Want This\\I Want This.ini (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\I Want This\\appAPIinternalWrapper.js (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\I Want This\\fb.js (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\I Want This\\I Want This.exe (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\I Want This\\I Want This.ico (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\I Want This\\I Want ThisGui.exe (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\I Want This\\I Want ThisInstaller.log (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\I Want This\\jquery.js (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\I Want This\\json.js (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\I Want This\\Uninstall.exe (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64highin.exe (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64hkstub.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64idle.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64impipe.exe (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64medint.exe (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64Plugin.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64regfft.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64reghk.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64regiet.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64skplay.exe (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\64SrchMn.exe (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\CHROME.MANIFEST (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\INSTALL.RDF (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\LOGO.BMP (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\NP64Stub.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\T8RES.DLL (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\TelevisionFanatic\\bar\\1.bin\\chrome\\64ffxtbr.jar (PUP.MyWebSearch) -> Quarantined and deleted successfully.
\nC:\\Users\\UserNameRemovedForPrivacy\\Local Settings\\Application Data\\I Want This\\Chrome\\I Want This.crx (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nC:\\Users\\UserNameRemovedForPrivacy\\AppData\\Local\\I Want This\\Chrome\\I Want This.crx (Adware.GamePlayLab) -> Quarantined and deleted successfully.
\nC:\\Program Files (x86)\\I Want This\\I Want This.dll (PUP.GamePlayLab) -> Quarantined and deleted successfully.<\/p>\n
(end)<\/p>\n","protected":false},"excerpt":{"rendered":"
We’ve had the privilege of helping hundreds of people with their Windows computers. We were not surprised to see how many of these computer were barely running due to spyware and adware which people unknowing install thanks to the current developer fascination with bundling. Bundling is when developers bundle other software with the software you really want in\u2026 Read More »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"_links":{"self":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/4440"}],"collection":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/comments?post=4440"}],"version-history":[{"count":4,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/4440\/revisions"}],"predecessor-version":[{"id":4442,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/4440\/revisions\/4442"}],"wp:attachment":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/media?parent=4440"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/categories?post=4440"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/tags?post=4440"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}