helen99: A windswept tree against a starlit sky (Default)
[personal profile] helen99
I found a folder called F3C1DE9E5E164BA9B8547B53A45E3579.TMP in my home directory (running Vista Home Premium). The folder contained the application file "Wise Custom Calla 44.exe". Checked forums, and found a thread started by someone who'd found a similar folder in the Windows directory with 'Wise Custom Calla.dll" in it. (http://discussions.virtualdr.com/archive/index.php/t-165801.html). I've transferred the folder I found to trash but haven't deleted it yet.

Does anyone know anything about this?

(no subject)

Date: 2010-02-05 05:33 pm (UTC)
From: [identity profile] actingbunny.livejournal.com
i will pass it on to chad.:D

(no subject)

Date: 2010-02-05 06:19 pm (UTC)
From: [identity profile] jarandhel.livejournal.com
I believe it's malware pretending to be a McAfee component. Spybot seems to be able to detect and remove it.

(no subject)

Date: 2010-02-05 07:53 pm (UTC)
ext_5300: tree in the stars (Default)
From: [identity profile] helen99.livejournal.com
Yup, further searches revealed it's part of MyWebSearch, which is very annoying spyware. I picked it up from something posted on Facebook (a design your own cartoon face site). Luckily I recognized something had gone wrong and never linked anyone else to it.

I've been trying to clean Mywebsearch out of my system for a while now. Spybot SD took care of it. I never had McAfee on my system, so there was no way it could have been what it was pretending to be.

Thanks.

(no subject)

Date: 2010-02-06 02:08 pm (UTC)
From: [identity profile] elven-ranger.livejournal.com
I pick up viruses via facebook as well. Meh.

(no subject)

Date: 2010-02-06 03:37 pm (UTC)
ext_5300: tree in the stars (Default)
From: [identity profile] helen99.livejournal.com
Facebook doesn't check the integrity of any of the ad sites that link to it. Once a site is reported as a virus hatchery, then I think Facebook gets rid of them (but by then it's too late for whoever clicked the link).

(no subject)

Date: 2010-02-05 07:56 pm (UTC)
ext_5300: tree in the stars (Default)
From: [identity profile] helen99.livejournal.com
Thanks! I saw that one. I think it was something else, tho, since my spy busting program detected and destroyed it...

(no subject)

Date: 2010-02-05 07:06 pm (UTC)
From: [identity profile] stillvisions.livejournal.com
I had a similar file at home, looked it up, belonged to some software I'd installed, like AVG or something. Not there so I can't look up the specifics.... didn't have the "Wise Custome Calla" part so I can't comment on that part. I'll see if I can find it again when I get home...

(no subject)

Date: 2010-02-05 07:55 pm (UTC)
ext_5300: tree in the stars (Default)
From: [identity profile] helen99.livejournal.com
Actually it's part of some malware that masquerades as leftover install temp files. Everyone seems to think it's part of a different software install. Some say McAfee, others say something else... In fact it's part of something called MyWebSearch, which is an adware program.

April 2010

S M T W T F S
    123
45678910
11121314151617
18192021222324
252627282930 

Most Popular Tags

Style Credit

Expand Cut Tags

No cut tags