Both these malware are actually on the very tough to remove list for me, however they arent damaging just altered home page somtimes sending you to different website other than the one u typed in the url and can cause pop ups. Spybot should find both of them but isnt equipt to remove even moderate malware never mind hard malware like these. Id be surprised if adadware even spots them. Here is instuctions on the manual removal of altnet. Ensure you have youre system restore on for backup purposes and that you have backup disks in case the worst happens (as you should before attempting any registry work) and if you botch it up dont come crying hehe.
Delete the following directories
Altnet
%windowstempdir%\Altnet
%programfilesdir%\Altnet
DBBackup
%programfilesdir%\Altnet\Download Manager
%programfilesdir%\Altnet\My Altnet Shares
Points Manager
LocalPages
Skin
%programfilesdir%\Altnet\Points Manager\Temp Internet Shares
ADMCache
%commonprogramsdir%\Altnet
%programfilesdir%\altnet\My Altnet Shares\Bullguard Protection
altnet
Delete the following files
%tempdir%\asmfiles.cab
%programsdir%\Altnet\Peer Points Manager.lnk
adm.exe
%windowstempdir%\Altnet\adm25.dll
adm4.dll
%windowstempdir%\Altnet\admdata.dll
admdloader.dll
admfdi.dll
admprog.dll
%windowstempdir%\Altnet\Atl.dll
dmfiles.cab
%windowstempdir%\Altnet\DMinfo3.cab
dminstall7.cab
%windowstempdir%\Altnet\msvcirt.dll
%windowstempdir%\Altnet\mysearch.cab
%windowstempdir%\Altnet\pmexe.cab
pmfiles.cab
%windowstempdir%\Altnet\pminstall.cab
%windowstempdir%\Altnet\Setup.cab
Setup.exe
adm25.dll
adm4.dll
%programfilesdir%\Altnet\Download Manager\adm4005.exe
%programfilesdir%\Altnet\Download Manager\admdata.dll
admdloader.dll
admprog.dll
%programfilesdir%\Altnet\Download Manager\altnetuninstall.exe
asm.exe
%programfilesdir%\Altnet\Download Manager\asmend.exe
asmps.dll
dminfo3.cab
dminstall7.cab
dmsetup.bmp
dmsetupbig.bmp
%programfilesdir%\Altnet\Download Manager\jsinstall.cab
jslegals.txt
selectdir.txt
%programfilesdir%\Altnet\Download Manager\selectdir1st.txt
Points Manager.exe
Points Manager.exe.Manifest
settings.cab
setup.cab
%programfilesdir%\Altnet\Points Manager\sysdetect.dll
altnet.css
gradient.gif
%programfilesdir%\Altnet\Points Manager\LocalPages\local_firstuse.html
%programfilesdir%\Altnet\Points Manager\LocalPages\local_points.html
local_redeem.html
local_start.html
local_wallet.html
%programfilesdir%\Altnet\Points Manager\LocalPages\notconnected.gif
offline.gif
%programfilesdir%\Altnet\Points Manager\LocalPages\pixel.gif
%programfilesdir%\Altnet\Points Manager\Skin\back-over.bmp
%programfilesdir%\Altnet\Points Manager\Skin\back.bmp
%programfilesdir%\Altnet\Points Manager\Skin\bottom.bmp
bottomleft.bmp
bottomright.bmp
%programfilesdir%\Altnet\Points Manager\Skin\close-over.bmp
%programfilesdir%\Altnet\Points Manager\Skin\close.bmp
%programfilesdir%\Altnet\Points Manager\Skin\forward-over.bmp
forward.bmp
%programfilesdir%\Altnet\Points Manager\Skin\help-bottom.bmp
help-over.bmp
%programfilesdir%\Altnet\Points Manager\Skin\help-sel.bmp
help-top.bmp
help-topleft.bmp
%programfilesdir%\Altnet\Points Manager\Skin\help-topright.bmp
%programfilesdir%\Altnet\Points Manager\Skin\help.bmp
Help.xml
left.bmp
%programfilesdir%\Altnet\Points Manager\Skin\maximise-over.bmp
maximise.bmp
mb_bottom.bmp
mb_bottomleft.bmp
mb_bottomright.bmp
%programfilesdir%\Altnet\Points Manager\Skin\mb_left.bmp
%programfilesdir%\Altnet\Points Manager\Skin\mb_right.bmp
%programfilesdir%\Altnet\Points Manager\Skin\mb_top.bmp
%programfilesdir%\Altnet\Points Manager\Skin\mb_topleft.bmp
mb_topright.bmp
message.xml
minimise-over.bmp
%programfilesdir%\Altnet\Points Manager\Skin\minimise.bmp
%programfilesdir%\Altnet\Points Manager\Skin\points-disabled.bmp
%programfilesdir%\Altnet\Points Manager\Skin\points-over.bmp
%programfilesdir%\Altnet\Points Manager\Skin\points-sel.bmp
%programfilesdir%\Altnet\Points Manager\Skin\points.bmp
%programfilesdir%\Altnet\Points Manager\Skin\redeem-disabled.bmp
redeem-over.bmp
%programfilesdir%\Altnet\Points Manager\Skin\redeem-sel.bmp
redeem.bmp
%programfilesdir%\Altnet\Points Manager\Skin\refresh-over.bmp
%programfilesdir%\Altnet\Points Manager\Skin\refresh.bmp
right.bmp
%programfilesdir%\Altnet\Points Manager\Skin\Sav3BD.tmp
settings-disabled.bmp
settings-over.bmp
%programfilesdir%\Altnet\Points Manager\Skin\settings-sel.bmp
%programfilesdir%\Altnet\Points Manager\Skin\settings.bmp
%programfilesdir%\Altnet\Points Manager\Skin\Skin.xml
%programfilesdir%\Altnet\Points Manager\Skin\start-disabled.bmp
%programfilesdir%\Altnet\Points Manager\Skin\start-over.bmp
start-sel.bmp
%programfilesdir%\Altnet\Points Manager\Skin\start.bmp
%programfilesdir%\Altnet\Points Manager\Skin\top.bmp
%programfilesdir%\Altnet\Points Manager\Skin\topleft-pro.bmp
topleft-reg.bmp
%programfilesdir%\Altnet\Points Manager\Skin\topleft.bmp
%programfilesdir%\Altnet\Points Manager\Skin\topright.bmp
%programfilesdir%\Altnet\Points Manager\Skin\wallet-over.bmp
%programfilesdir%\Altnet\Points Manager\Skin\wallet-sel.bmp
%programfilesdir%\Altnet\Points Manager\Skin\wallet.bmp
asm.exe
asmps.dll
%programfilesdir%\altnet\download manager\adm.exe
%programfilesdir%\altnet\download manager\selectdir.txt1st
dminfo2.cab
%programfilesdir%\altnet\download manager\dminstall3.cab
%programfilesdir%\altnet\Points Manager\Skin\wallet-disabled.bmp
Sigfiles.db
%tempdir%\altnet\Setup.exe
%tempdir%\altnet\msvcirt.dll
%tempdir%\altnet\admfdi.dll
admdloader.dll
%tempdir%\altnet\admdata.dll
%tempdir%\altnet\adm25.dll
%tempdir%\ADMCache\admD9.tmp
adm.exe
adm4.dll
%systemdir%\admdata.dll
admdloader.dll
admfdi.dll
%systemdir%\admprog.dll
%windir%\Temp\Altnet\adm4.dll
adm.exe
%windir%\Temp\Altnet\adm25.dll
%windir%\Temp\Altnet\admdata.dll
%windir%\Temp\Altnet\admdloader.dll
admfdi.dll
%windir%\Temp\Altnet\admprog.dll
dmfiles.cab
%windir%\Temp\Altnet\dminfo3.cab
dminstall7.cab
mysearch.cab
pmexe.cab
pmfiles.cab
%windir%\Temp\Altnet\pminstall.cab
setup.cab
%windir%\Temp\Altnet\setup.exe
msvcirt.dll
%windir%\Temp\Altnet\atl.dll
873101.tmp
dminfo3.zip
dminstall3.zip
%programfilesdir%\altnet\download manager\jsinstall.zip
%programfilesdir%\altnet\Points Manager\settings.zip
\asm.exe
Delete the following registry keys
adm.EXE
Signing
Altnet Signing Module.EXE
ADM25.ADM25
ADM25.ADM25.1
ADM4.ADM4.1
ADM4.ADM4
ADM.ADM.1
ADM.ADM
SigningModule.SigningModule
SigningModule.SigningModule.1
adm.EXE
Signing
Altnet Signing Module.EXE
ADM25.ADM25.1
ADM25.ADM25
ADM4.ADM4.1
ADM4.ADM4
ADM.ADM.1
ADM.ADM
SigningModule.SigningModule
SigningModule.SigningModule.1
{99A8E2B2-3405-4C0D-9110-131C14CAAF62}
{8B0FEF15-54DC-49F5-8377-8172DE975F75}
{1D3BCE37-7834-4579-8169-E67681420A98}
{DEF37997-D9C9-4A4B-BF3C-88F99EACEEC2}
{C15B7EA2-A360-43E8-A591-5FAEDC7C4E1D}
{3f4d4f88-0198-4921-b630-957f3eb814e0}
{3646C2BD-3554-49CA-8125-44DEEFB881DE}
{E813099D-5529-47F4-9B37-4AFAFCB00A43}
{9BBCF06C-DCD7-495D-80DF-CDD5399D0FF8}
{bff4f684-677e-44f4-8c74-1d575c950e10}
{5830698f-7fc0-40cd-a453-9a0cafdf3a64}
{676f6d1d-c559-42a9-860b-27c1477b7179}
{E813099D-5529-47F4-9B37-4AFAFCB00A43}
{e79dadc6-18d0-4a2a-831f-d196d41f8438}
{29e825aa-13bc-457c-806a-d72e4a25b3c5}
{9d4548ce-92fd-4c6c-ae7f-3dbe3bc763d8}
{258A3625-183B-4477-AEE2-EA54DF6D878D}
{AD5BC1F0-72D8-44B3-8E3D-8E8FECCE43FB}
{99A8E2B2-3405-4C0D-9110-131C14CAAF62}
{8B0FEF15-54DC-49F5-8377-8172DE975F75}
{DEF37997-D9C9-4A4B-BF3C-88F99EACEEC2}
{1D3BCE37-7834-4579-8169-E67681420A98}
{C15B7EA2-A360-43E8-A591-5FAEDC7C4E1D}
{3f4d4f88-0198-4921-b630-957f3eb814e0}
{3646C2BD-3554-49CA-8125-44DEEFB881DE}
{E813099D-5529-47F4-9B37-4AFAFCB00A43}
{9BBCF06C-DCD7-495D-80DF-CDD5399D0FF8}
{bff4f684-677e-44f4-8c74-1d575c950e10}
{5830698f-7fc0-40cd-a453-9a0cafdf3a64}
{676f6d1d-c559-42a9-860b-27c1477b7179}
{E813099D-5529-47F4-9B37-4AFAFCB00A43}
{e79dadc6-18d0-4a2a-831f-d196d41f8438}
{29e825aa-13bc-457c-806a-d72e4a25b3c5}
{9d4548ce-92fd-4c6c-ae7f-3dbe3bc763d8}
{258A3625-183B-4477-AEE2-EA54DF6D878D}
{AD5BC1F0-72D8-44B3-8E3D-8E8FECCE43FB}
ADMCache
ADM
Messages
Settings
Setup
Temp Internet Shares
Dashboard
DownloadManager
LocalFiles
TopSearch
Altnet
Downloads
ADM
Altnet
AltnetDM
%systemdir%/adm.exe
%systemdir%/adm4.dll
%systemdir%/admdata.dll
%systemdir%/admdloader.dll
%systemdir%/admfdi.dll
%systemdir%/admprog.dll
AltnetDM
Delete the following registry values
AltnetPointsManager
%systemdir%\admdata.dll
%systemdir%\admfdi.dll
%systemdir%\admdloader.dll
%systemdir%\admprog.dll
%systemdir%\adm4.dll
Then the fun web products are you sure it funweb not coolwebsearch, to test try this:
javascript:alert(navigator.userAgent)
Paste this into your browser and click go. You will get a pop up box if indeed you have a funwebsearch malware it will have funwebsearch written somewhere in this box.
This should be able to be removed the easy way believe it or not try:
To remove a FunWebProduct and your My Web Search toolbar, you must do the following:
From your computer's Start button, select "Settings", then select "Control Panel".
Double-click on the "Add/Remove Programs" icon.
Select "My Web Search Bar" and click "Remove". The My Web Search toolbar and the FunWebProduct feature have now been uninstalled.
Outlook, Outlook Express and IncrediMail users: To remove a FunWebProduct and the My Web Search navigation bar from your email system, you must do the following:
From your computer's Start button, select "Settings", then select "Control Panel".
Double-click on the "Add/Remove Programs" icon.
Select "My Web Search (Outlook, Outlook Express, and IncrediMail)" and click "Remove". The My Web Search navigation bar and Smiley Central feature have now been uninstalled from your email system.
To remove Search Assistant (this feature provides you with suggested search listings when you mistype or enter an incomplete word or URL into your browser), you must do the following:
From your computer's Start button, select "Settings", then select "Control Panel".
Double-click on the "Add/Remove Programs" icon.
Select "Search Assistant - My Web Search" and click "Remove".
If youre still in trouble after this pm me and il sort somit else for ya.
l8z.  |