Malware help please

nikki702

Hi my PC has been sluggish lately so today I ran Malwarebytes and it came up with the following

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 2
HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr) -> No action taken.
HKCU\Software\DataMngr (PUP.Optional.DataMngr) -> No action taken.

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 4
C:\Users\Nikki\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> No action taken.
C:\Users\Nikki\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> No action taken.
C:\Users\Nikki\AppData\Roaming\OpenCandy\FD0B3963A6784E07BC7F532452F27444 (PUP.Optional.OpenCandy) -> No action taken.
C:\Users\Nikki\AppData\Roaming\OpenCandy\OpenCandy_FD0B3963A6784E07BC7F532452F27444 (PUP.Optional.OpenCandy) -> No action taken.

Files Detected: 7
C:\Users\Nikki\AppData\Local\Temp\DBB3077D-BAB0-7891-9F9D-10BE86B6B74F\Latest\Setup.exe (PUP.Optional.Babylon.A) -> No action taken.
C:\Users\Nikki\Downloads\bbbe-latest.exe (PUP.Optional.OpenCandy) -> No action taken.
C:\Users\Nikki\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> No action taken.
C:\Users\Nikki\AppData\Roaming\OpenCandy\FD0B3963A6784E07BC7F532452F27444\2560.ico (PUP.Optional.OpenCandy) -> No action taken.
C:\Users\Nikki\AppData\Roaming\OpenCandy\FD0B3963A6784E07BC7F532452F27444\SymantecRegMech_p1v1.exe (PUP.Optional.OpenCandy) -> No action taken.
C:\Users\Nikki\AppData\Roaming\OpenCandy\OpenCandy_FD0B3963A6784E07BC7F532452F27444\LatestDLMgr.exe (PUP.Optional.OpenCandy) -> No action taken.
C:\Users\Nikki\AppData\Roaming\OpenCandy\OpenCandy_FD0B3963A6784E07BC7F532452F27444\OpenCandyU1Dlm.dll (PUP.Optional.OpenCandy) -> No action taken.

(end)

Could someone advise me on the best way to remove these please?

Thank you

debitcardmayhem

Re run Malwarebytes and this time right click on the program and select run as administrator. Then download and run adwcleaner and post the logs someone more knowledgeable will be along later

http://www.bleepingcomputer.com/download/adwcleaner/dl/125/

And right click on that too and run as administrator.

NiftyDigits

You need to choose to remove them at the end of the scan, not just leave them with 'no action taken'.

debitcardmayhem

NiftyDigits wrote: »

You need to choose to remove them at the end of the scan, not just leave them with 'no action taken'.

Oops I forgot that bit .....too long on Linux

closed

post a hijackthis log when you've finished

the quickest fix to sluggish on a newish machine, apart from uninstalling mcafee and accumulated toolbar/junk, is backup data, and factory restore.