S
SC Tom
They seem to be harmless to me.Emrys Davies said:Very enlightening. Thanks. Are you saying that those Tracking CookiesSC Tom said:I get the "atdmt" twice and one from "vermontcountrystore" (I shop thereEmrys Davies said:?"Emrys Davies" wrote in message
?"Emrys Davies" wrote in message
I have Win7 Home Premium 64 bit and WLM 2009
Just lately my SUPERAntiSpyware Free Edition has been finding a host
of the
above spyware. I quarantine it and Restart, but it shows up again,
instantly. There is nothing in my Installed Programmes or IE
toolbar of a
similar name, but there is 'Fun Web Products install' in Manage
Add-ons and
I have Disabled that. Still it persists. I obviously need a fresh
spyware
detector, but I sense that there will be an answer here. It could be
harmless. Have tried Google. Any ideas?
Mr. Davis,
Here's what I do and I NEVER have any adware or virus problems
1) Download and use Microsoft Security Essentials
2) Turn on the Windows firewall
3) Download Malwarebytes free version. Do a complete scan once per
week
4) Download SUPERantispyware free version. Do a complete scan once
per week
5) Keep all of the above plus Windows and Internet Explorer if you
use it. updated regularly
Here's how to uninstall Fun Web Products:
http://help.funwebproducts.com/uninstall/uninstall.html
I have all of these and I do what you advise, except that I have
'avast', which I like, instead of MSE. Fun Web Products did not show
in 'Installed Programmes' but I got rid of it via 'regedit.exe'.
Still little bits of 'My Web Search'etc. in there, but not sure about
them so will leave well alone. Tread lightly in there unless sure.
Thanks a lot.
SUPERAntiSpyware repeatedly finds two 'Adware.Tracking Cookie' which
have a
large red dot against them. It 'kills' them but they instantly show
up. I
now find that if I r.c. them it says 'Always allow item. (Trust
Item)'.
Item 2 is: C:Users\Emrys
Davies\AppData\Roaming\Microsoft\Windows\Cookies\emrysdavies@atdmtcombing[2].txt
and item 1 is identical, but without the combing. Malwarebytes does
not
find these. Just wondered what you think of this.
=====================================================================================================================
Emrys,
I said that I NEVER have any adware using my stated protection. That's
not quite true. I confess that on rare occasions, SUPERantispyware
finds a tracking cookie or two which do not show up on MSE or
malwarebytes. I may go a month or two before I see another tracking
cookie which I just ignore since SAS removes them.
But what I have said is that SAS found and removed two tracking cookies,
quarantined them and when I ran it again, instantly, they were still
there. Try it for yourself.
occasionally) in SAS every time I run it, even though those cookies are
not in the folder it says they are. Same as you, I can quarantine them,
delete the quarantines (or not), and rerun SAS and they show up again.
Whether or not IE is open makes no difference. A search through the
registry shows atdmt in the same key as bing, which I have used maybe 3
or 4 times since it came out.
I don't know why SAS catches it, or where exactly it comes from, but I
haven't had any problems lately, no one has cleared out my bank accounts
or anything else that I'm aware of, so I don't think it's of any
consequence. It just concerns me that when SAS finds them, it says they
are in a particular location that they aren't.
which I referred to are fairly harmless? Incidentally, I have cleared out
Adware.MyWebSearch\FunWebProducts with the help of Malwarebytes (26
strikes) and Spybot. I used the latter last of all and it found a further
41 of the baddies - probably mostly remnants. Shows that all of these
Malware software have a cumulative purpose. I will keep all three after
these experiences.
I found that all I have to do is open IE8 and the atdmt one is written to my
Cookies folder. I even tried with using about:blank as my home page. Makes
no difference- all I have to do is open it and close it without going
anywhere else and the cookie is written. I also have atdmt.com set to
Blocked in my privacy settings. Makes no difference.
This is what's in the atdmt.txt file:
ANON
A=5448A217D99CAC489FD346DDFFFFFFFF&E=abb&W=1
atdmt.com/
0
25554176
30166969
3198290320
30126705
*
NAP
V=1.9&E=a61&C=Q96xK733cGCsbBMMtcuzM6KWgJkadulqJMTR0S3HiYMurEO3z5RGFw&W=1
atdmt.com/
0
1882647808
30146852
3198440320
30126705
*
Doesn't mean anything to me, but it might to someone.
I don't think atdmt has anything to do with FunWebProducts, and I wish you
luck getting it all cleared out. I haven't had a worm/virus since Windows
95, but I remember how hard it was to get rid of.