what is fbdownloader???? is it a virus and can i get rid??

sitcom321

everytime I click on my internet explorer it comes up as fbdownloader I have no idea what this is but am beginning to think it may be a virus. I have been on my programmes to uninstall but it doesn't seem to be there. can anyone tell me if this is a virus and is there anyway I can get rid of it.


thanks

LGG_2

Have you done a scan

sitcom321

I am not brilliant on the computer I am definitely no technie. I have Microsoft security essentials and I have done a quick scan on it which says no threats

waddler_8

No, it's not a virus.

Post me a DDS log - should take 2-3 minutes.

Download DDS from the link below and save it to your desktop:

Link

After you've downloaded it and saved it to your desktop:

• Double click DDS to run it.
• Click Start
• When it's finished, DDS will open two logs:

1. DDS.txt
   
2. Attach.txt

Save both reports to your desktop.

Copy & paste the contents of just DDS.txt for now and post it here (you may need to split the log over separate posts)

Lifeforms

http://malwaretips.com/blogs/remove-fbdownloader-search/

Do a malwarebytes scan on it, but try the above way to remove first. after that use malwarebytes to see if anything else is left, or with fbdownloader.

sitcom321

S4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\windows live\mesh\wlcrasvc.exe [2010-9-22 51040]
.
=============== Created Last 30 ================
.
2014-01-05 10:14:06 62576 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{a59c71b1-bfe2-4903-a7a0-f38a2b125ba2}\offreg.dll
2014-01-05 10:14:06 40392 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{a59c71b1-bfe2-4903-a7a0-f38a2b125ba2}\MpKsl19c734fa.sys
2014-01-05 10:13:08 7760024 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{a59c71b1-bfe2-4903-a7a0-f38a2b125ba2}\mpengine.dll
2014-01-05 09:52:15 7760024

---

w- c:\programdata\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll
2013-12-12 08:05:57 1928192 ----a-w- c:\windows\system32\inetcpl.cpl
2013-12-12 08:05:52 4243968 ----a-w- c:\windows\system32\jscript9.dll
2013-12-12 08:04:59

---

d

---

w- c:\program files\iPod
2013-12-12 08:04:40

---

d

---

w- c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-12-12 08:04:40

---

d

---

w- c:\program files\iTunes
2013-12-12 07:55:24 12625408 ----a-w- c:\windows\system32\wmploc.DLL
2013-12-12 07:55:19 164864 ----a-w- c:\program files\windows media player\wmplayer.exe
2013-12-12 05:11:01 301568 ----a-w- c:\windows\system32\msieftp.dll
2013-12-12 05:10:58 159232 ----a-w- c:\windows\system32\imagehlp.dll
2013-12-12 05:10:56 2048 ----a-w- c:\windows\system32\tzres.dll
2013-12-12 05:10:52 2349056 ----a-w- c:\windows\system32\win32k.sys
2013-12-12 05:10:51 163840 ----a-w- c:\windows\system32\scrrun.dll
2013-12-12 05:10:51 141824 ----a-w- c:\windows\system32\wscript.exe
2013-12-12 05:10:51 126976 ----a-w- c:\windows\system32\cscript.exe
2013-12-12 05:10:51 121856 ----a-w- c:\windows\system32\wshom.ocx
2013-12-12 05:10:50 417792 ----a-w- c:\windows\system32\WMPhoto.dll
2013-12-12 05:10:50 177152 ----a-w- c:\windows\system32\drivers\portcls.sys
2013-12-12 05:10:49 81408 ----a-w- c:\windows\system32\drivers\drmk.sys
2013-12-06 18:22:09 719224

---

w- c:\programdata\microsoft\microsoft antimalware\definition updates\nisbackup\gapaengine.dll
2013-12-06 18:22:08 719224

---

w- c:\programdata\microsoft\microsoft antimalware\definition updates\{8eefbc81-18a9-4e12-8129-f148605adbca}\gapaengine.dll
.
==================== Find3M ====================
.
2013-12-11 18:44:02 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-12-11 18:44:02 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-11-26 09:23:02 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2013-11-26 09:22:11 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll
2013-11-26 08:53:56 61952 ----a-w- c:\windows\system32\iesetup.dll
2013-11-26 08:52:26 51200 ----a-w- c:\windows\system32\ieetwproxystub.dll
2013-11-26 08:29:55 112128 ----a-w- c:\windows\system32\ieUnatt.exe
2013-11-26 08:29:52 108032 ----a-w- c:\windows\system32\ieetwcollector.exe
2013-11-26 08:28:16 553472 ----a-w- c:\windows\system32\jscript9diag.dll
2013-11-26 06:33:33 1820160 ----a-w- c:\windows\system32\wininet.dll
2013-11-19 10:21:30 230048

---

w- c:\windows\system32\MpSigStub.exe
2013-10-17 16:06:25 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-10-12 02:03:08 656896 ----a-w- c:\windows\system32\nshwfp.dll
2013-10-12 02:01:41 679424 ----a-w- c:\windows\system32\IKEEXT.DLL
2013-10-12 02:01:25 216576 ----a-w- c:\windows\system32\FWPUCLNT.DLL
.
============= FINISH: 10:53:20.16 ===============

waddler_8

Not the first time... https://forums.moneysavingexpert.com/discussion/comment/62430239#Comment_62430239


Copy and paste all before this bit too.

.
=============== Created Last 30 ================
.

sitcom321

I am being blocked from posting for some reason just trying to sort it

waddler_8

I'll PM you my email address. Attach both reports to an email and send me them.

barmonkey

http://www.wintips.org/remove-fbdownloader-hijacker/

waddler_8

Why link to external sites when the OP has asked for help here?