re-facemood

joe134

Hi, Just scanned using old Spybot S/D, and immediately it detected Facemood which I some how downloaded and Babylon too..
Facemood had 112 entries in PUPSC. and it,s immunized them both with a struggle. They were classed as toolbars, and S/d classed Facemood maliscious, three scans to immunize it.
1.Anyone come across it?

2 what,s is PUPsc? When I installed Malwarebytes I enabled it to scan PUPs, it wasn,t enabled to do this by default, was I right?

waddler_8

PUPs are Potentially Unwanted Programs; Programs that you want & that you may have knowingly installed yourself, or, they may have been bundled with other programs you have installed, or in some cases they are installed by malware.

Here's Spybot's defintition: http://www.safer-networking.org/en/dictionary/pups.html

....software that shows dubious behaviour and is likely to be unwanted. In many cases it is hard to find sufficient factual proof for malware status even though its malevolence is rather obvious by intuition.

Facemoods state "Facemoods contains no spyware, no Malware, No viruses!"
http://articles.facemoods.com/english/is-facemoods-spyware/

Reinforced it seems by these reports:

Threat Expert Report: http://www.threatexpert.com/report.aspx?md5=220c5a1b402d6e5c0c1ec252a717b654

Sample VirusTotal reports for facemoodssrv.exe & facemoods.dll
http://www.virustotal.com/file-scan/report.html?id=6aad125bad5ce9152c9767b4d29d1e2474d2bff4e9d9017e22e0c499b0d1088d-1315679766


As for Babylon:
http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Adware%3AWin32%2FBabylon

This program was detected by definitions prior to 1.87.2231.0 as adware, as it violated the guidelines by which Microsoft identifies spyware and other potentially unwanted software. The vendor subsequently modified the program so as to remove the undesired behavior. Due to this vendor action, Microsoft has confirmed that the program no longer has potentially unwanted behaviors.

Did MBAM find anything more? Post the log if it did.

General advice is to always download from reputable download sites, read EULA's (End User Licence Agreements) before installing software, and pay attention to the installation process and opt out of any extra software that is offered - such as toolbars - that may be unwanted.

joe134

waddler_8 wrote: »

PUPs are Potentially Unwanted Programs; Programs that you want & that you may have knowingly installed yourself, or, they may have been bundled with other programs you have installed, or in some cases they are installed by malware.

Here's Spybot's defintition: http://www.safer-networking.org/en/dictionary/pups.html

Facemoods state "Facemoods contains no spyware, no Malware, No viruses!"
http://articles.facemoods.com/english/is-facemoods-spyware/

Reinforced it seems by these reports:

Threat Expert Report: http://www.threatexpert.com/report.aspx?md5=220c5a1b402d6e5c0c1ec252a717b654

Sample VirusTotal reports for facemoodssrv.exe & facemoods.dll
http://www.virustotal.com/file-scan/report.html?id=6aad125bad5ce9152c9767b4d29d1e2474d2bff4e9d9017e22e0c499b0d1088d-1315679766


As for Babylon:
http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Adware%3AWin32%2FBabylon


Did MBAM find anything more? Post the log if it did.

General advice is to always download from reputable download sites, read EULA's (End User Licence Agreements) before installing software, and pay attention to the installation process and opt out of any extra software that is offered - such as toolbars - that may be unwanted.

Hi, Thanks for your very informative reply. At present I am having connectivity problems with certain sites that I have used before , but for some reason are now not connecting to the et.
One being Secunia PSI. I tried to login to Nationwide today using IE, all stored on favourites.nogo. Use chrome, and it,s ok. Debating whether to reset IE settings, but fraid it may stop my AOL access to E-mail, which uses IE. Such a lot of aggro since I restored my PC tofactory settings and re-istalled certain items. I will post the full Mbam, and would appreciate it if you would have a look. I tried using Microsoft 1 lick fix to reset IE8 to default, it failed due to some missing file.
I,ve spent the last 2weeks trouble shooting , guys on here helped enormously, that I cannot use it for what It was designed for, Work.:beer:Malwarebytes' Anti-Malware 1.51.1.1800
https://www.malwarebytes.org

Database version: 7694

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.19120

11/09/2011 15:27:41
mbam-log-2011-09-11 (15-27-41).txt

Scan type: Full scan (C:\|D:\|)
Objects scanned: 304477
Time elapsed: 48 minute(s), 59 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)