penfrasha
When I double-click the file the same box pops up.
Spyware / Malware / Virus Removal
pup.datamngr [Solved]
29 min read
penfrasha
By the way, thank you for answering my non-virus related questions and the info about Google Chrome. 
Satchfan
No problem.thank you for answering my non-virus related questions and the info about Google Chrome
Don't right-click; just click on the file and then on Open, (bottom, right of the dialogue box, to the left of Cancel). That will place the file in the VirusTotal box and you can then click Scan it!
penfrasha
When I left-click the file once nothing happens. No dialog box pops up Satchfan.
penfrasha
I think I see the problem. On the VirusTotal site, should I select choose file?
penfrasha
That's what I just did and of course it works. Sometimes I'm just computer-stupid, DOH. I'll follow the rest of your instructions. Thank you.
I'll follow the rest of your instructions. Thank you.
penfrasha
Hey. I don't know what you meant by 'you will get a report back' so I highlighted and copied the page after the analysis was finished and am posting it here, I hope.
SHA256:
910ca013a3e4bd5ef62fa9a0b75af91d5097998a3bc94bc8ab3f556010133079
File name:
2qx40tw0135t8fr027e36257xjgwl8585
Detection ratio:
1 / 46
Analysis date:
2013-02-01 13:50:11 UTC ( 1 minute ago )
0
0
More details
Analysis
Comments
Votes
Additional information
Antivirus
Result
Update
Agnitum
-
20130201
AhnLab-V3
-
20130201
AntiVir
-
20130201
Antiy-AVL
-
20130201
Avast
-
20130201
AVG
-
20130201
BitDefender
-
20130201
ByteHero
-
20130201
CAT-QuickHeal
-
20130201
ClamAV
-
20130131
Commtouch
-
20130201
Comodo
-
20130201
DrWeb
-
20130201
Emsisoft
-
20130201
eSafe
-
20130131
ESET-NOD32
-
20130201
F-Prot
-
20130201
F-Secure
-
20130201
Fortinet
-
20130201
GData
-
20130201
Ikarus
-
20130201
Jiangmin
-
20121221
K7AntiVirus
-
20130131
Kaspersky
-
20130201
Kingsoft
-
20130131
Malwarebytes
-
20130201
McAfee
-
20130201
McAfee-GW-Edition
-
20130201
Microsoft
-
20130201
MicroWorld-eScan
-
20130201
NANO-Antivirus
-
20130201
Norman
-
20130201
nProtect
-
20130201
Panda
-
20130201
PCTools
-
20130201
Rising
-
20130201
Sophos
Mal/FakeAvCn-C
20130131
SUPERAntiSpyware
-
20130201
Symantec
-
20130201
TheHacker
-
20130131
TotalDefense
-
20130131
TrendMicro
-
20130201
TrendMicro-HouseCall
-
20130201
VBA32
-
20130201
VIPRE
-
20130201
ViRobot
-
20130201
Sophos was the only one that had something in the results column. I'll post the other file results shortly. Thanks.
penfrasha
Here are the other file's results. Again, Sophos was the only thing that had something in the results column.
SHA256:
e2188528cd46f8dc37de38285815bdc712355f11bfd8da5ccb918409fb239f09
File name:
uwl5jl73bkn5baix3w36826l27g5ugw
Detection ratio:
1 / 46
Analysis date:
2013-02-01 13:58:54 UTC ( 0 minutes ago )
0
0
More details
Analysis
Comments
Votes
Additional information
Antivirus
Result
Update
Agnitum
-
20130201
AhnLab-V3
-
20130201
AntiVir
-
20130201
Antiy-AVL
-
20130201
Avast
-
20130201
AVG
-
20130201
BitDefender
-
20130201
ByteHero
-
20130201
CAT-QuickHeal
-
20130201
ClamAV
-
20130131
Commtouch
-
20130201
Comodo
-
20130201
DrWeb
-
20130201
Emsisoft
-
20130201
eSafe
-
20130131
ESET-NOD32
-
20130201
F-Prot
-
20130201
F-Secure
-
20130201
Fortinet
-
20130201
GData
-
20130201
Ikarus
-
20130201
Jiangmin
-
20121221
K7AntiVirus
-
20130131
Kaspersky
-
20130201
Kingsoft
-
20130131
Malwarebytes
-
20130201
McAfee
-
20130201
McAfee-GW-Edition
-
20130201
Microsoft
-
20130201
MicroWorld-eScan
-
20130201
NANO-Antivirus
-
20130201
Norman
-
20130201
nProtect
-
20130201
Panda
-
20130201
PCTools
-
20130201
Rising
-
20130201
Sophos
Mal/FakeAvCn-C
20130131
SUPERAntiSpyware
-
20130201
Symantec
-
20130201
TheHacker
-
20130131
TotalDefense
-
20130131
TrendMicro
-
20130201
TrendMicro-HouseCall
-
20130201
VBA32
-
20130201
VIPRE
-
20130201
ViRobot
-
20130201
penfrasha
I ran AdwCleaner. A notepad box popped up with the results, but no reboot option. Here are the results.
AdwCleaner v2.109 - Logfile created 02/01/2013 at 09:06:18
# Updated 26/01/2013 by Xplode
# Operating system : Windows 7 Ultimate Service Pack 1 (64 bits)
# User : Penny Morgan - PENNYMORGAN-PC
# Boot Mode : Normal
# Running from : C:\Users\Penny Morgan\Desktop\adwcleaner.exe
# Option [Search]
***** [Services] *****
***** [Files / Folders] *****
File Found : C:\END
Folder Found : C:\Users\Penny Morgan\AppData\Roaming\Mozilla\Firefox\Profiles\us0nla4v.default\extensions\{1fd91a9c-410c-4090-bbcc-55d3450ef433}
Folder Found : C:\Users\Shai.PennyMorgan-PC\AppData\LocalLow\Conduit
***** [Registry] *****
Key Found : HKCU\Software\APN DTX
Key Found : HKCU\Software\AppDataLow\Software\Toolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\iLivid_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\iLivid_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{9FF9AE6F-4553-41A7-B645-B0E88850EABF}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{CE4DB5A3-58E6-41F1-8761-47238DF4F468}
Key Found : HKLM\SOFTWARE\DataMngr
***** [Internet Browsers] *****
-\\ Internet Explorer v9.0.8112.16457
[OK] Registry is clean.
-\\ Mozilla Firefox v15.0.1 (en-US)
File : C:\Users\Penny Morgan\AppData\Roaming\Mozilla\Firefox\Profiles\us0nla4v.default\prefs.js
[OK] File is clean.
*************************
AdwCleaner[R1].txt - [1680 octets] - [01/02/2013 09:06:18]
########## EOF - C:\AdwCleaner[R1].txt - [1740 octets] ##########
Satchfan
It didn't reboot because you chose "Search" instead of "Delete".
Please run it again and choose "Delete" this time.
penfrasha
Apparently, there was nothing to delete. Yay. I am re-installing and getting ready to re-run MalwareBytes now, although I did that and ran a full scan after running JRT and seeing all that that damned ilivid (that was the carp** I downloaded that contained pup.datamngr) stuff JRT detected and removed. Yay. When I ran the full scan, nothing was detected and pup.datamngr was gone. Yay! I'll reply after scanning again with MalwareBytes. Thank you.
penfrasha
I meant 'carp**".
penfrasha
What the heck? I know I am typing 'carp**"
penfrasha
carp** carp** carp**
penfrasha
Oh well. 
Ask AI
AI can make mistakes. Check the cited posts. Archived advice can be out-of-date
Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI