Results 1 to 7 of 7

Thread: adware not removed

  1. #1
    Junior Member
    Join Date
    Nov 2016
    Posts
    4

    Default adware not removed

    somehow whenu.funplayer got on my computer, pretty sure I mis-hit a key going to safetynetaccess for my landing page. Spybot found it but when I tried to to fix got this Unexpected error cannot fix path C:Windows/wininit.ini (backslash / went opposite direction) very frustrating Any ideas?
    Last edited by tashi; 2016-11-17 at 17:47. Reason: Moved from the malware forum

  2. #2
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,961

    Default

    Hello jdolan3580,

    Did you elevate Spybot's permissions?

    If not, please open Spybot by right-clicking on the Spybot icon and choosing the option to “Run as administrator”.

    Which version and edition of the software do you have: https://www.safer-networking.org/

    Also what is the operating system please.

    Best regards.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  3. #3
    Junior Member
    Join Date
    Nov 2016
    Posts
    4

    Default

    Tashi thanks dont have the option to run as admin tried to copy and paste spy 162 ver, on windows 10 another nitemare

    --- Search result list ---
    WhenU.FunPlayer: [SBI $231D0600] Data (File, nothing done)
    C:\ProgramData\ExtRaShoopPPeeR\3130.dat
    Properties.size=3434
    Properties.md5=6E04CD89623290A64FF497D8DB5BCE9E
    Properties.filedate=1395080424
    Properties.filedatetext=2014-03-17 13:20:24


    --- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---

    2009-01-26 blindman.exe (1.0.0.8)
    2009-01-26 SDFiles.exe (1.6.1.7)
    2009-01-26 SDMain.exe (1.0.0.6)
    2009-01-26 SDUpdate.exe (1.6.0.12)
    2009-01-26 SpybotSD.exe (1.6.2.46)
    2009-03-05 TeaTimer.exe (1.6.6.32)
    2016-11-15 unins000.exe (51.49.0.0)
    2009-01-26 Update.exe (1.6.0.7)
    2009-11-04 advcheck.dll (1.6.5.20)
    2007-04-02 aports.dll (2.1.0.0)
    2008-06-14 DelZip179.dll (1.79.11.1)
    2009-01-26 SDHelper.dll (1.6.2.14)
    2008-06-19 sqlite3.dll
    2009-01-26 Tools.dll (2.1.6.10)
    2009-01-16 UninsSrv.dll (1.0.0.0)
    2015-07-31 Includes\Adware-000.sbi (*)
    2015-11-10 Includes\Adware-001.sbi (*)
    2016-11-16 Includes\Adware-C.sbi (*)
    2014-01-13 Includes\Adware.sbi (*)
    2014-01-13 Includes\AdwareC.sbi (*)
    2010-08-13 Includes\Cookies.sbi (*)
    2014-11-14 Includes\Dialer-000.sbi (*)
    2014-11-14 Includes\Dialer-001.sbi (*)
    2016-11-16 Includes\Dialer-C.sbi (*)
    2014-01-13 Includes\Dialer.sbi (*)
    2014-01-13 Includes\DialerC.sbi (*)
    2016-06-22 Includes\Fraud-000.sbi (*)
    2016-02-29 Includes\Fraud-001.sbi (*)
    2015-11-23 Includes\Fraud-002.sbi (*)
    2016-07-06 Includes\Fraud-003.sbi (*)
    2013-04-11 Includes\HeavyDuty.sbi (*)
    2014-11-14 Includes\Hijackers-000.sbi (*)
    2014-11-14 Includes\Hijackers-001.sbi (*)
    2016-11-09 Includes\Hijackers-C.sbi (*)
    2014-01-13 Includes\Hijackers.sbi (*)
    2014-01-13 Includes\HijackersC.sbi (*)
    2014-01-08 Includes\iPhone-000.sbi (*)
    2014-01-08 Includes\iPhone.sbi (*)
    2016-05-27 Includes\Keyloggers-000.sbi (*)
    2016-08-31 Includes\Keyloggers-C.sbi (*)
    2014-01-13 Includes\Keyloggers.sbi (*)
    2014-01-13 Includes\KeyloggersC.sbi (*)
    2015-06-25 Includes\Malware-000.sbi (*)
    2016-06-22 Includes\Malware-001.sbi (*)
    2016-06-14 Includes\Malware-002.sbi (*)
    2015-11-19 Includes\Malware-003.sbi (*)
    2016-06-14 Includes\Malware-004.sbi (*)
    2016-06-22 Includes\Malware-005.sbi (*)
    2016-01-18 Includes\Malware-006.sbi (*)
    2015-10-29 Includes\Malware-007.sbi (*)
    2016-11-16 Includes\Malware-C.sbi (*)
    2014-01-13 Includes\Malware.sbi (*)
    2014-01-13 Includes\MalwareC.sbi (*)
    2016-03-24 Includes\PUPS-000.sbi (*)
    2015-10-22 Includes\PUPS-001.sbi (*)
    2014-01-15 Includes\PUPS-002.sbi (*)
    2016-11-16 Includes\PUPS-C.sbi (*)
    2014-01-13 Includes\PUPS.sbi (*)
    2014-01-13 Includes\PUPSC.sbi (*)
    2010-01-25 Includes\Revision.sbi (*)
    2014-01-08 Includes\Security-000.sbi (*)
    2015-12-02 Includes\Security-C.sbi (*)
    2014-01-08 Includes\Security.sbi (*)
    2014-01-13 Includes\SecurityC.sbi (*)
    2008-06-03 Includes\Spybots.sbi (*)
    2008-06-03 Includes\SpybotsC.sbi (*)
    2015-11-11 Includes\Spyware-000.sbi (*)
    2015-05-06 Includes\Spyware-001.sbi (*)
    2016-08-10 Includes\Spyware-C.sbi (*)
    2014-01-13 Includes\Spyware.sbi (*)
    2014-01-08 Includes\SpywareC.sbi (*)
    2012-11-19 Includes\Tracks.uti
    2015-11-17 Includes\Trojans-000.sbi (*)
    2015-11-19 Includes\Trojans-001.sbi (*)
    2015-11-25 Includes\Trojans-002.sbi (*)
    2016-01-20 Includes\Trojans-003.sbi (*)
    2016-01-22 Includes\Trojans-004.sbi (*)
    2015-11-25 Includes\Trojans-005.sbi (*)
    2015-11-30 Includes\Trojans-006.sbi (*)
    2016-01-27 Includes\Trojans-007.sbi (*)
    2015-11-16 Includes\Trojans-008.sbi (*)
    2015-04-21 Includes\Trojans-009.sbi (*)
    2016-11-16 Includes\Trojans-C.sbi (*)
    2016-02-02 Includes\Trojans-OG-000.sbi (*)
    2014-01-15 Includes\Trojans-TD-000.sbi (*)
    2014-01-15 Includes\Trojans-VM-000.sbi (*)
    2014-01-15 Includes\Trojans-VM-001.sbi (*)
    2014-01-15 Includes\Trojans-VM-002.sbi (*)
    2014-01-15 Includes\Trojans-VM-003.sbi (*)
    2014-01-15 Includes\Trojans-VM-004.sbi (*)
    2014-01-15 Includes\Trojans-VM-005.sbi (*)
    2014-01-15 Includes\Trojans-VM-006.sbi (*)
    2014-01-15 Includes\Trojans-VM-007.sbi (*)
    2014-01-15 Includes\Trojans-VM-008.sbi (*)
    2014-01-15 Includes\Trojans-VM-009.sbi (*)
    2014-01-15 Includes\Trojans-VM-010.sbi (*)
    2014-01-15 Includes\Trojans-VM-011.sbi (*)
    2014-01-15 Includes\Trojans-VM-012.sbi (*)
    2014-01-15 Includes\Trojans-VM-013.sbi (*)
    2014-01-15 Includes\Trojans-VM-014.sbi (*)
    2014-01-15 Includes\Trojans-VM-015.sbi (*)
    2014-01-15 Includes\Trojans-VM-016.sbi (*)
    2014-01-15 Includes\Trojans-VM-017.sbi (*)
    2014-01-15 Includes\Trojans-VM-018.sbi (*)
    2014-01-15 Includes\Trojans-VM-019.sbi (*)
    2014-01-15 Includes\Trojans-VM-020.sbi (*)
    2014-01-15 Includes\Trojans-VM-021.sbi (*)
    2014-01-15 Includes\Trojans-VM-022.sbi (*)
    2014-01-15 Includes\Trojans-VM-023.sbi (*)
    2014-01-15 Includes\Trojans-VM-024.sbi (*)
    2014-01-13 Includes\Trojans-VM-025.sbi (*)
    2014-01-13 Includes\Trojans-VM-026.sbi (*)
    2015-11-09 Includes\Trojans-ZB-000.sbi (*)
    2016-02-03 Includes\Trojans-ZL-000.sbi (*)
    2014-01-09 Includes\Trojans.sbi (*)
    2010-03-10 Includes\TrojansC-01.sbi (*)
    2014-01-09 Includes\TrojansC-02.sbi (*)
    2014-01-09 Includes\TrojansC-03.sbi (*)
    2014-01-16 Includes\TrojansC-04.sbi (*)
    2014-01-09 Includes\TrojansC-05.sbi (*)
    2014-01-09 Includes\TrojansC.sbi (*)
    2008-03-04 Plugins\Chai.dll
    2008-03-05 Plugins\Fennel.dll
    2008-02-26 Plugins\Mate.dll
    2007-12-24 Plugins\TCPIPAddress.dll



    --- System information ---
    Unknown Windows version 6.2 (Build: 9200) (6.2.9200)
    Last edited by tashi; 2016-11-17 at 21:27. Reason: Removed Start Ups list

  4. #4
    Junior Member
    Join Date
    Nov 2016
    Posts
    4

    Default

    Tashi sorry about the long list I just tried to copy and paste
    issue is whenu.funplayer adware does not allow removal in .ini file

  5. #5
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,961

    Default

    Hello jdolan3580,

    Do you have other security programs installed, if so please list them.

    Was Windows 10 a new install or an upgrade from a previous operating system.

    Also, have you experienced any other issues with the computer that might be related to infection?

    Please let me know. It may be best if someone takes a look at the system in the malware forum, if so I will provide a link to that forum's FAQ.

    Best regards.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  6. #6
    Junior Member
    Join Date
    Nov 2016
    Posts
    4

    Default

    Tashi
    win 10 was upgrade from win 8
    also have norton security installed
    please share no worries

  7. #7
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,961

    Default

    Hello jdolan3580,

    For someone to check out the system please see the Malware Removal Forum sticky which includes instructions in post #2 on how to provide the logs from Farbar Recovery Scan Tool and aswMBR, which are the logs used in the preliminary analysis.

    http://forums.spybot.info/showthread.php?t=288

    Then start a new topic in that forum providing the logs so a volunteer analyst can guide you.

    Best regards.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •