Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

Removal instructions for My Faster PC

- - - - -

  • Please log in to reply
No replies to this topic

#1
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 32,369 posts
Content is republished with permission from Malwarebytes.

What is My Faster PC?

The Malwarebytes research team has determined that My Faster PC is a "system optimizer". These so-called "system optimizer" use intentional false positives to convince users that their systems have problems. Then they try to sell you their software, claiming it will remove these problems.
More information can be found on our Malwarebytes Unpacked blog.

How do I know if I am infected with My Faster PC?

This is how the main screen of the sytem optimizer looks:

main.png

You will find these icons in your taskbar and on your desktop:

icons.png

And see these warnings during install:

warning1.png

warning2.png

warning3.png

and these screens during "operations":

warning5.png

warning6.png

You may see this entry in your list of installed programs:

warning4.png

How did My Faster PC get on my computer?

These so-called system optimizers use different methods of getting installed. This particular one was sownloaded from their site.

How do I remove My Faster PC?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.
  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-{version}.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to:
    Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • If an update is available, it will be implemented before the rest of the scanning procedure.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of My Faster PC?
  • No, Malwarebytes' Anti-Malware removes My Faster PC completely.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this system optimizer.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the My Faster PC installer. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

protection1.png


and we block access to their domain:

protection2.png


Technical details for experts

You may see these entries in FRST logs:

 (ConsumerSoft) C:\Program Files (x86)\ConsumerSoft\My Faster PC\MyFasterPC.exe
 (ConsumerSoft) C:\Program Files (x86)\ConsumerSoft\My Faster PC\MFPCReminder.exe
 HKCU\...\Run: [My Faster PC] => C:\Program Files (x86)\ConsumerSoft\My Faster PC\MFPCHelper.exe [1243120 2015-07-16] (ConsumerSoft)
 HKCU\...\Run: [DefragReminder] => C:\Program Files (x86)\ConsumerSoft\My Faster PC\My Defragmenter\DefragReminder.exe [919544 2015-07-16] (ConsumerSoft)
 C:\Users\{username}\Desktop\Get Tech Support.lnk
 C:\Users\{username}\Desktop\My Faster PC.lnk
 C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My Faster PC
 C:\Users\{username}\AppData\Roaming\ConsumerSoft
 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\My Faster PC
 C:\Program Files (x86)\ConsumerSoft

My Faster PC (HKLM-x32\...\{4673297B-FFAD-4F12-A6B9-8E79ADE56CF6}_is1) (Version: 7.4 - ConsumerSoft)
() C:\Program Files (x86)\ConsumerSoft\My Faster PC\sqlite3.dll
Alterations made by the installer:

File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Program Files (x86)\ConsumerSoft\My Faster PC
       Adds the file CSSWMUR.dll"="7/16/2015 11:39 AM, 98304 bytes, A
       Adds the file MFPCHelper.exe"="7/16/2015 11:39 AM, 1243120 bytes, A
       Adds the file MFPCReminder.exe"="8/12/2015 1:11 AM, 960504 bytes, A
       Adds the file MyFasterPC.exe"="4/25/2016 5:54 PM, 9665532 bytes, A
       Adds the file MyPhoneSupport.exe"="7/16/2015 11:39 AM, 914944 bytes, A
       Adds the file sqlite3.dll"="1/9/2013 9:53 PM, 605049 bytes, A
       Adds the file unins000.dat"="11/17/2016 10:53 AM, 12151 bytes, A
       Adds the file unins000.exe"="11/17/2016 10:52 AM, 1229784 bytes, A
       Adds the file unins000.msg"="11/17/2016 10:53 AM, 22701 bytes, A
       Adds the file unload.ini"="11/17/2016 10:53 AM, 57 bytes, A
    Adds the folder C:\Program Files (x86)\ConsumerSoft\My Faster PC\Microsoft.VC90.CRT
       Adds the file Microsoft.VC90.CRT.manifest"="4/19/2011 12:58 AM, 1860 bytes, A
       Adds the file msvcm90.dll"="4/19/2011 12:51 AM, 225280 bytes, A
       Adds the file msvcp90.dll"="4/19/2011 12:51 AM, 569680 bytes, A
       Adds the file msvcr90.dll"="4/19/2011 12:51 AM, 653136 bytes, A
    Adds the folder C:\Program Files (x86)\ConsumerSoft\My Faster PC\My Defragmenter
       Adds the file Defrag.exe"="7/16/2015 11:39 AM, 2210296 bytes, A
       Adds the file DefragReminder.exe"="7/16/2015 11:39 AM, 919544 bytes, A
       Adds the file eula.txt"="10/13/2011 7:33 PM, 34178 bytes, A
       Adds the file schd"="1/12/2015 4:28 PM, 20 bytes, A
       Adds the file udefrag.dll"="5/30/2010 1:11 AM, 8192 bytes, A
       Adds the file udefrag-kernel.dll"="5/30/2010 1:11 AM, 44032 bytes, A
       Adds the file zenwinx.dll"="5/30/2010 1:11 AM, 26624 bytes, A
    Adds the folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\My Faster PC
       Adds the file My Faster PC.lnk"="11/17/2016 10:53 AM, 1222 bytes, A
       Adds the file Uninstall My Faster PC.lnk"="11/17/2016 10:53 AM, 1212 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\ConsumerSoft\My Faster PC
       Adds the file complete.reg"="11/17/2016 10:59 AM, 185037228 bytes, A
       Adds the file config.mfpc"="11/17/2016 11:01 AM, 416 bytes, A
       Adds the file crawloption.mfpc"="11/17/2016 11:01 AM, 1056 bytes, A
       Adds the file helper.mfpc"="11/17/2016 11:01 AM, 64 bytes, A
       Adds the file Ignores.mfpc"="11/17/2016 11:01 AM, 444960 bytes, A
       Adds the file Opti.mfpc"="11/17/2016 10:53 AM, 70 bytes, A
       Adds the file Schopt.mfpc"="11/17/2016 11:01 AM, 1 bytes, A
       Adds the file Startup.mfpc"="11/17/2016 10:53 AM, 0 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\ConsumerSoft\My Faster PC\backup
       Adds the file MFPC Backup(11-17-2016).mfpb"="11/17/2016 11:01 AM, 2315440 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My Faster PC
       Adds the file Customer Support.url"="11/17/2016 10:53 AM, 60 bytes, A
       Adds the file Help Using My Faster PC.url"="11/17/2016 10:53 AM, 57 bytes, A
    In the existing folder C:\Users\{username}\Desktop
       Adds the file Get Tech Support.lnk"="11/17/2016 10:53 AM, 1354 bytes, A
       Adds the file My Faster PC.lnk"="11/17/2016 10:53 AM, 1326 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4673297B-FFAD-4F12-A6B9-8E79ADE56CF6}_is1]
       "Comments"="REG_SZ"", "My Faster PC Installation"
       "DisplayIcon"="REG_SZ"", "C:\Program Files (x86)\ConsumerSoft\My Faster PC\MyFasterPC.exe"
       "DisplayName"="REG_SZ"", "My Faster PC"
       "DisplayVersion"="REG_SZ"", "7.4"
       "EstimatedSize"="REG_DWORD"", 19050
       "HelpLink"="REG_SZ"", "http://www.myfasterpc.com/support/"
       "Inno Setup: App Path"="REG_SZ"", "C:\Program Files (x86)\ConsumerSoft\My Faster PC"
       "Inno Setup: Icon Group"="REG_SZ"", "My Faster PC"
       "Inno Setup: Language"="REG_SZ"", "english"
       "Inno Setup: Setup Version"="REG_SZ"", "5.5.5 (u)"
       "Inno Setup: User"="REG_SZ"", "{username}"
       "InstallDate"="REG_SZ"", "20161117"
       "InstallLocation"="REG_SZ"", "C:\Program Files (x86)\ConsumerSoft\My Faster PC\"
       "MajorVersion"="REG_DWORD"", 7
       "MinorVersion"="REG_DWORD"", 4
       "NoModify"="REG_DWORD"", 1
       "NoRepair"="REG_DWORD"", 1
       "Publisher"="REG_SZ"", "ConsumerSoft"
       "QuietUninstallString"="REG_SZ"", ""C:\Program Files (x86)\ConsumerSoft\My Faster PC\unins000.exe" /SILENT"
       "UninstallString"="REG_SZ"", ""C:\Program Files (x86)\ConsumerSoft\My Faster PC\unins000.exe""
       "URLInfoAbout"="REG_SZ"", "http://www.myfasterpc.com/support/"
       "URLUpdateInfo"="REG_SZ"", "http://www.myfasterpc.com/support/"
    [HKEY_CURRENT_USER\Software\ConsumerSoft\My Faster PC]
       "Config"="REG_SZ"", "C:\Users\{username}\AppData\Roaming\ConsumerSoft\My Faster PC"
       "ConfVers"="REG_SZ"", "2"
       "Start"="REG_SZ"", ""
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
       "DefragReminder"="REG_SZ"", "C:\Program Files (x86)\ConsumerSoft\My Faster PC\My Defragmenter\DefragReminder.exe"
       "My Faster PC"="REG_SZ"", "C:\Program Files (x86)\ConsumerSoft\My Faster PC\MFPCHelper.exe"

Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 11/18/2016
Scan Time: 9:14 AM
Logfile: mbamMyFasterPC.txt
Administrator: Yes

Version: 2.2.1.1043
Malware Database: v2016.11.18.01
Rootkit Database: v2016.10.31.01
License: Premium
Malware Protection: Disabled
Malicious Website Protection: Enabled
Self-protection: Enabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {username}

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 301435
Time Elapsed: 8 min, 43 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 2
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\MyFasterPC.exe, 844, Delete-on-Reboot, [4c6dc7fa2a706cca50526175bb4845bb]
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\MFPCReminder.exe, 3672, Delete-on-Reboot, [71480cb581193bfb7232f2e4af544bb5]

Modules: 4
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\CSSWMUR.dll, Delete-on-Reboot, [af0a1fa2b0ea74c25c46b323e1229769], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\sqlite3.dll, Delete-on-Reboot, [71480cb581193bfb7232f2e4af544bb5], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\Microsoft.VC90.CRT\msvcp90.dll, Delete-on-Reboot, [71480cb581193bfb7232f2e4af544bb5], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\Microsoft.VC90.CRT\msvcr90.dll, Delete-on-Reboot, [71480cb581193bfb7232f2e4af544bb5], 

Registry Keys: 2
PUP.Optional.MyFasterPC, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{4673297B-FFAD-4F12-A6B9-8E79ADE56CF6}_is1, Quarantined, [5d5ce3dedac0d0668e19983ef60da65a], 
PUP.Optional.MyFasterPC, HKCU\SOFTWARE\CONSUMERSOFT\My Faster PC, Quarantined, [1d9c06bb5f3b64d20e9acc0ac83b659b], 

Registry Values: 2
PUP.Optional.MyFasterPC, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|My Faster PC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\MFPCHelper.exe, Quarantined, [fcbd2d942773e2541b87845227dcc43c]
PUP.Optional.MyFasterPC, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|DefragReminder, C:\Program Files (x86)\ConsumerSoft\My Faster PC\My Defragmenter\DefragReminder.exe, Quarantined, [4a6fa21fb4e6b97d3b6e429413f038c8]

Registry Data: 0
(No malicious items detected)

Folders: 7
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC, Delete-on-Reboot, [71480cb581193bfb7232f2e4af544bb5], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\Microsoft.VC90.CRT, Delete-on-Reboot, [71480cb581193bfb7232f2e4af544bb5], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\My Defragmenter, Quarantined, [71480cb581193bfb7232f2e4af544bb5], 
PUP.Optional.MyFasterPC, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\My Faster PC, Quarantined, [f4c5fcc50496ac8a139296407b88768a], 
PUP.Optional.MyFasterPC, C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My Faster PC, Quarantined, [7049e3de4d4dcc6a6b3a459148bbc33d], 
PUP.Optional.MyFasterPC, C:\Users\{username}\AppData\Roaming\ConsumerSoft\My Faster PC, Delete-on-Reboot, [6752873acad025118224b71fdf241fe1], 
PUP.Optional.MyFasterPC, C:\Users\{username}\AppData\Roaming\ConsumerSoft\My Faster PC\backup, Quarantined, [6752873acad025118224b71fdf241fe1], 

Files: 34
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\MyFasterPC.exe, Delete-on-Reboot, [4c6dc7fa2a706cca50526175bb4845bb], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\CSSWMUR.dll, Delete-on-Reboot, [af0a1fa2b0ea74c25c46b323e1229769], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\MFPCHelper.exe, Quarantined, [fcbd2d942773e2541b87845227dcc43c], 
PUP.Optional.MyFasterPC, C:\Users\{username}\Desktop\Install My Faster PC.exe, Quarantined, [6d4cd7ea98020531c0e2459109fa5ba5], 
PUP.Optional.MyFasterPC, C:\Users\{username}\Desktop\Get Tech Support.lnk, Quarantined, [b207be033c5ec86e6942587ee023956b], 
PUP.Optional.MyFasterPC, C:\Users\{username}\Desktop\My Faster PC.lnk, Quarantined, [eecb279a198193a33d6f00d656ad5ba5], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\My Defragmenter\DefragReminder.exe, Quarantined, [4a6fa21fb4e6b97d3b6e429413f038c8], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\MFPCReminder.exe, Delete-on-Reboot, [71480cb581193bfb7232f2e4af544bb5], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\MyPhoneSupport.exe, Quarantined, [71480cb581193bfb7232f2e4af544bb5], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\sqlite3.dll, Delete-on-Reboot, [71480cb581193bfb7232f2e4af544bb5], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\unins000.dat, Quarantined, [71480cb581193bfb7232f2e4af544bb5], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\unins000.exe, Quarantined, [71480cb581193bfb7232f2e4af544bb5], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\unins000.msg, Quarantined, [71480cb581193bfb7232f2e4af544bb5], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\unload.ini, Quarantined, [71480cb581193bfb7232f2e4af544bb5], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest, Quarantined, [71480cb581193bfb7232f2e4af544bb5], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\Microsoft.VC90.CRT\msvcm90.dll, Quarantined, [71480cb581193bfb7232f2e4af544bb5], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\Microsoft.VC90.CRT\msvcp90.dll, Delete-on-Reboot, [71480cb581193bfb7232f2e4af544bb5], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\Microsoft.VC90.CRT\msvcr90.dll, Delete-on-Reboot, [71480cb581193bfb7232f2e4af544bb5], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\My Defragmenter\Defrag.exe, Quarantined, [71480cb581193bfb7232f2e4af544bb5], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\My Defragmenter\eula.txt, Quarantined, [71480cb581193bfb7232f2e4af544bb5], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\My Defragmenter\schd, Quarantined, [71480cb581193bfb7232f2e4af544bb5], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\My Defragmenter\udefrag-kernel.dll, Quarantined, [71480cb581193bfb7232f2e4af544bb5], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\My Defragmenter\udefrag.dll, Quarantined, [71480cb581193bfb7232f2e4af544bb5], 
PUP.Optional.MyFasterPC, C:\Program Files (x86)\ConsumerSoft\My Faster PC\My Defragmenter\zenwinx.dll, Quarantined, [71480cb581193bfb7232f2e4af544bb5], 
PUP.Optional.MyFasterPC, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\My Faster PC\My Faster PC.lnk, Quarantined, [f4c5fcc50496ac8a139296407b88768a], 
PUP.Optional.MyFasterPC, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\My Faster PC\Uninstall My Faster PC.lnk, Quarantined, [f4c5fcc50496ac8a139296407b88768a], 
PUP.Optional.MyFasterPC, C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My Faster PC\Customer Support.url, Quarantined, [7049e3de4d4dcc6a6b3a459148bbc33d], 
PUP.Optional.MyFasterPC, C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My Faster PC\Help Using My Faster PC.url, Quarantined, [7049e3de4d4dcc6a6b3a459148bbc33d], 
PUP.Optional.MyFasterPC, C:\Users\{username}\AppData\Roaming\ConsumerSoft\My Faster PC\config.mfpc, Quarantined, [6752873acad025118224b71fdf241fe1], 
PUP.Optional.MyFasterPC, C:\Users\{username}\AppData\Roaming\ConsumerSoft\My Faster PC\helper.mfpc, Quarantined, [6752873acad025118224b71fdf241fe1], 
PUP.Optional.MyFasterPC, C:\Users\{username}\AppData\Roaming\ConsumerSoft\My Faster PC\Ignores.mfpc, Delete-on-Reboot, [6752873acad025118224b71fdf241fe1], 
PUP.Optional.MyFasterPC, C:\Users\{username}\AppData\Roaming\ConsumerSoft\My Faster PC\Opti.mfpc, Quarantined, [6752873acad025118224b71fdf241fe1], 
PUP.Optional.MyFasterPC, C:\Users\{username}\AppData\Roaming\ConsumerSoft\My Faster PC\Schopt.mfpc, Quarantined, [6752873acad025118224b71fdf241fe1], 
PUP.Optional.MyFasterPC, C:\Users\{username}\AppData\Roaming\ConsumerSoft\My Faster PC\Startup.mfpc, Quarantined, [6752873acad025118224b71fdf241fe1], 

Physical Sectors: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
  • 0

Advertisements





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.