Jump to content
Sign in to follow this  
strgazr04

barcfg.myway.com ADWARE?!

Recommended Posts

Hi. I have been getting alerts from Norton protection for 2 days on my vista laptop of attack attempts by something called barcfg.myway.com. Can anyone tell me what this is? It started last night and around the same time Firefox kept closing on me while I was trying to use it. A box simply says "Firefox has a problem and needs to close". Are these two things connected? I ran a Norton full scan which at first had problems I needed to fix through Liveupdate so it would run but then it ran fine and only alerted me to a tracking cookie which I deleted. Should I be worried about this myway thing and how do I get rid of this attack that keep popping up?

Share this post


Link to post
Share on other sites

You could try the suggestions given in the V2008 topic.

 

Malwarebytes' Anti-Malware 1.31

Database version: 1498

Windows 6.0.6001 Service Pack 1

 

12/14/2008 2:51:10 AM

mbam-log-2008-12-14 (02-51-10).txt

 

Scan type: Full Scan (C:\|D:\|E:\|F:\|)

Objects scanned: 213131

Time elapsed: 2 hour(s), 3 minute(s), 24 second(s)

 

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 1

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 6

Files Infected: 3

 

Memory Processes Infected:

(No malicious items detected)

 

Memory Modules Infected:

(No malicious items detected)

 

Registry Keys Infected:

HKEY_CLASSES_ROOT\CLSID\{014da6c9-189f-421a-88cd-07cfe51cff10} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

 

Registry Values Infected:

(No malicious items detected)

 

Registry Data Items Infected:

(No malicious items detected)

 

Folders Infected:

C:\Program Files\MyWay (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar\1.bin (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar\History (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\SrchAstt (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\SrchAstt\1.bin (Adware.MyWay) -> Quarantined and deleted successfully.

 

Files Infected:

C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar\History\search (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\SrchAstt\1.bin\MYSRCHAS.DLL (Adware.MyWay) -> Quarantined and deleted successfully.

 

Rogue Remover Free didn't find anything but Super antispyware did. I ran a full scan then quarintined and removed about 30 items, including about 10 MyWay adwares. Just in case I rebooted, as per instructions on the program, and ran a quick scan. Despite it saying that it removed the adware, it came up again. It's been running for 20mins now and there are 4 so far. How can I be sure it's all gone when one program gets rid of some, another doesnt detect any, and then a third keeps finding more even after it says it eliminating them? does anyone know how dangerous this myway file is to being with?

 

thank you!!!

Share this post


Link to post
Share on other sites

Click here to download the HijackThis Installer.

 

Save HJTInstall.exe to your desktop.

Double-click on HJTInstall.exe to run the program.

By default it will install to C:\Program Files\Trend Micro\HijackThis.

Accept the license agreement by clicking the "I Accept" button.

Click on the "Do a system scan and save a log file button. It will scan and then ask you to save the log.

Click "Save log" to save the log file and then the log will open in Notepad.

Click on Edit>Select All, then click on "Edit>Copy" to copy the entire contents of the log.

 

Then go to this forum and start a new thread for a Trusted Advisor to help you.

Do NOT have HijackThis fix anything yet! Most of what it finds will be harmless or even required.

 

Make sure you explain the problem as well as mentioning the save logs from your spyware scans. Include a link to this thread. Then paste your HijackThis log into your post. Do not post your log in this thread.

Mark

Share this post


Link to post
Share on other sites

Click here to download the HijackThis Installer.

 

Save HJTInstall.exe to your desktop.

Double-click on HJTInstall.exe to run the program.

By default it will install to C:\Program Files\Trend Micro\HijackThis.

Accept the license agreement by clicking the "I Accept" button.

Click on the "Do a system scan and save a log file button. It will scan and then ask you to save the log.

Click "Save log" to save the log file and then the log will open in Notepad.

Click on Edit>Select All, then click on "Edit>Copy" to copy the entire contents of the log.

 

Then go to this forum and start a new thread for a Trusted Advisor to help you.

Do NOT have HijackThis fix anything yet! Most of what it finds will be harmless or even required.

 

Make sure you explain the problem as well as mentioning the save logs from your spyware scans. Include a link to this thread. Then paste your HijackThis log into your post. Do not post your log in this thread.

Mark

 

 

done. thanks. http://forums.pcpitstop.com/index.php?showtopic=163358

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
Sign in to follow this  

×
×
  • Create New...