www.malwarebytes.org
Database version: v2013.01.27.08
Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16466
Owner :: SAMSUNGLAPTOP [limited]
Protection: Enabled
1/27/2013 12:39:46 PM
mbam-log-2013-01-27 (12-39-46).txt
Scan type: Full scan (C:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 404954
Time elapsed: 1 hour(s), 36 minute(s), 53 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 6
HKCR\CLSID\{8EBA1B69-99D8-4135-BD43-729BA79D5CC4} (PUP.PlayTopus) -> Quarantined and deleted successfully.
HKCR\Playtopus.Module.1 (PUP.PlayTopus) -> Quarantined and deleted successfully.
HKCR\Playtopus.Module (PUP.PlayTopus) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8EBA1B69-99D8-4135-BD43-729BA79D5CC4} (PUP.PlayTopus) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{8EBA1B69-99D8-4135-BD43-729BA79D5CC4} (PUP.PlayTopus) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{8EBA1B69-99D8-4135-BD43-729BA79D5CC4} (PUP.PlayTopus) -> Quarantined and deleted successfully.
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 5
C:\Users\Owner\AppData\Local\PLAYTOPUS\PLAYTOPUS.DLL (PUP.PlayTopus) -> Quarantined and deleted successfully.
C:\$Recycle.Bin\S-1-5-21-1751677316-1340614493-3878152295-1001\$R877NHH.exe (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3NOEHG7S\VideoDownloadConvert.exe (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\76B8OSTU\50f9ab3c6e8ee[1].exe (Adware.Dropper) -> Quarantined and deleted successfully.
C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FDKYZOFW\50f9aba1ec8b5[1].exe (Adware.Dropper) -> Quarantined and deleted successfully.
(end)
Malwarebytes Anti-Malware (Trial) 1.70.0.1100
www.malwarebytes.org
Database version: v2013.01.27.08
Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16466
Owner :: SAMSUNGLAPTOP [limited]
Protection: Enabled
1/27/2013 12:39:46 PM
MBAM-log-2013-01-27 (14-18-09).txt
Scan type: Full scan (C:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 404954
Time elapsed: 1 hour(s), 36 minute(s), 53 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 6
HKCR\CLSID\{8EBA1B69-99D8-4135-BD43-729BA79D5CC4} (PUP.PlayTopus) -> No action taken.
HKCR\Playtopus.Module.1 (PUP.PlayTopus) -> No action taken.
HKCR\Playtopus.Module (PUP.PlayTopus) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8EBA1B69-99D8-4135-BD43-729BA79D5CC4} (PUP.PlayTopus) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{8EBA1B69-99D8-4135-BD43-729BA79D5CC4} (PUP.PlayTopus) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{8EBA1B69-99D8-4135-BD43-729BA79D5CC4} (PUP.PlayTopus) -> No action taken.
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 5
C:\Users\Owner\AppData\Local\PLAYTOPUS\PLAYTOPUS.DLL (PUP.PlayTopus) -> No action taken.
C:\$Recycle.Bin\S-1-5-21-1751677316-1340614493-3878152295-1001\$R877NHH.exe (PUP.FunWebProducts) -> No action taken.
C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3NOEHG7S\VideoDownloadConvert.exe (PUP.FunWebProducts) -> No action taken.
C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\76B8OSTU\50f9ab3c6e8ee[1].exe (Adware.Dropper) -> No action taken.
C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FDKYZOFW\50f9aba1ec8b5[1].exe (Adware.Dropper) -> No action taken.
(end)
Malwarebytes Anti-Malware (Trial) 1.70.0.1100
www.malwarebytes.org
Database version: v2013.01.27.08
Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16466
Owner :: SAMSUNGLAPTOP [limited]
Protection: Enabled
1/27/2013 2:26:52 PM
mbam-log-2013-01-27 (14-26-52).txt
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 217929
Time elapsed: 12 minute(s), 23 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
(end)
2013/01/27 12:38:53 -0800 SAMSUNGLAPTOP Owner MESSAGE Starting protection
2013/01/27 12:38:53 -0800 SAMSUNGLAPTOP Owner MESSAGE Protection started successfully
2013/01/27 12:38:53 -0800 SAMSUNGLAPTOP Owner MESSAGE Starting IP protection
2013/01/27 12:39:02 -0800 SAMSUNGLAPTOP Owner MESSAGE IP Protection started successfully
2013/01/27 12:39:07 -0800 SAMSUNGLAPTOP Owner MESSAGE Starting database refresh
2013/01/27 12:39:07 -0800 SAMSUNGLAPTOP Owner MESSAGE Stopping IP protection
2013/01/27 12:39:08 -0800 SAMSUNGLAPTOP Owner MESSAGE IP Protection stopped successfully
2013/01/27 12:39:20 -0800 SAMSUNGLAPTOP Owner MESSAGE Database refreshed successfully
2013/01/27 12:39:20 -0800 SAMSUNGLAPTOP Owner MESSAGE Starting IP protection
2013/01/27 12:39:27 -0800 SAMSUNGLAPTOP Owner MESSAGE IP Protection started successfully
2013/01/27 14:21:48 -0800 SAMSUNGLAPTOP Owner MESSAGE Starting protection
2013/01/27 14:21:48 -0800 SAMSUNGLAPTOP Owner MESSAGE Protection started successfully
2013/01/27 14:21:48 -0800 SAMSUNGLAPTOP Owner MESSAGE Starting IP protection
2013/01/27 14:21:50 -0800 SAMSUNGLAPTOP Owner MESSAGE IP Protection started successfully
If there is any other info you need, or suggestions so this won't happen in the future... Reply please. THANK YOU VERY MUCH! -Nick