For Wiz -- Malwarebytes question.
Moderator: Wiz Feinberg
- Richard Sinkler
- Posts: 17676
- Joined: 15 Aug 1998 12:01 am
- Location: aka: Rusty Strings -- Missoula, Montana
For Wiz -- Malwarebytes question.
I have Malwarebytes running all the time and set to do a scan every night. Every morning for the last week or so, it keeps popping up that it has detected non-malware, PUP files. I'm sure the program loaded when I downloaded GnuCash. The program is Binkiland. I was able to quarantine the files every day, but I guess that really doesn't work in MB. I looked up Binkiland on Google, and it had directions to remove it. I uninstalled the 2 files using Revo Uninstaller like it said, but it didn't get all the files. Many of them are registry values/keys. I can, and have, go into the registry and deleted things that were no longer needed. I have used cCleaner, with no luck. Is there anything else I can try? It's just an inconvenience, but I would like to get rid of it.
Carter D10 8p/7k, Dekley S10 3p/4k C6 setup, Regal RD40 Dobro, Recording King Professional Dobro, NV400, NV112, Ibanez Gio guitar, Epiphone SG Special (open G slide
and regular G tuning guitar) . Playing for 55 years and still counting.
and regular G tuning guitar) . Playing for 55 years and still counting.
- Wiz Feinberg
- Posts: 6103
- Joined: 8 Jan 1999 1:01 am
- Location: Mid-Michigan, USA
- Contact:
In the case of partially removed PUPs, sometimes it is easier to reinstall them, then immediately uninstall via Control Panel, or the Start Menu uninstaller they create. Otherwise, remove with MBAM and clean Registry with CCleaner.
"Wiz" Feinberg, Moderator SGF Computers Forum
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog
- Richard Sinkler
- Posts: 17676
- Joined: 15 Aug 1998 12:01 am
- Location: aka: Rusty Strings -- Missoula, Montana
I am having no luck with this. The website is blocked by Trend as a confirmed malicious site. I am afraid to allow it to access that site. I have seen videos on how to remove it. I have found lots of links, but the are mostly just ads for whatever product they are selling.
cCleaner doesn't even see the things that MBAM reports, so it can't do anything about them.
I am now resetting my browser to default settings in Chrome. That is my primary browser qnd the only one affected.
If that doesn't work, would restoring my computer to a last known good date help?
cCleaner doesn't even see the things that MBAM reports, so it can't do anything about them.
I am now resetting my browser to default settings in Chrome. That is my primary browser qnd the only one affected.
If that doesn't work, would restoring my computer to a last known good date help?
Carter D10 8p/7k, Dekley S10 3p/4k C6 setup, Regal RD40 Dobro, Recording King Professional Dobro, NV400, NV112, Ibanez Gio guitar, Epiphone SG Special (open G slide
and regular G tuning guitar) . Playing for 55 years and still counting.
and regular G tuning guitar) . Playing for 55 years and still counting.
- Wiz Feinberg
- Posts: 6103
- Joined: 8 Jan 1999 1:01 am
- Location: Mid-Michigan, USA
- Contact:
Richard;
I found a great article on Lavasoft on manually removing Binkiland software and settings. Try it and let us know if it was successful. Follow every step!
I also found a Binkiland removal guide on Malwarebytes.org, the owners of MBAM.
I found a great article on Lavasoft on manually removing Binkiland software and settings. Try it and let us know if it was successful. Follow every step!
I also found a Binkiland removal guide on Malwarebytes.org, the owners of MBAM.
"Wiz" Feinberg, Moderator SGF Computers Forum
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog
- Richard Sinkler
- Posts: 17676
- Joined: 15 Aug 1998 12:01 am
- Location: aka: Rusty Strings -- Missoula, Montana
I saw the Lavasoft one. Can't remember if I tried it though. I'll check the MBAM one. I wish there was a way to print the log from MBAM so I could manually go into the register and get rid of those files. Resetting Chrome didn't help. Although I really like Chrome the best, I may just switch to Firefox on my desktop, which is now my secondary computer.
This all started when I tried to re-install Quicken on the desktop. I had replaced my C drive in it, upgraded to Win7, and Quicken would not install, saying I needed an upgrade to run on Win7. So I searched for a replacement, and found GnuCash in a search, and was highly recommended. I usually catch the "extra" install items in freeware, but this one got by me. Turns out that my installation of Quicken on my Laptop, which came with Win7 installed, works fine.
This all started when I tried to re-install Quicken on the desktop. I had replaced my C drive in it, upgraded to Win7, and Quicken would not install, saying I needed an upgrade to run on Win7. So I searched for a replacement, and found GnuCash in a search, and was highly recommended. I usually catch the "extra" install items in freeware, but this one got by me. Turns out that my installation of Quicken on my Laptop, which came with Win7 installed, works fine.
Carter D10 8p/7k, Dekley S10 3p/4k C6 setup, Regal RD40 Dobro, Recording King Professional Dobro, NV400, NV112, Ibanez Gio guitar, Epiphone SG Special (open G slide
and regular G tuning guitar) . Playing for 55 years and still counting.
and regular G tuning guitar) . Playing for 55 years and still counting.
- Michael Haselman
- Posts: 1292
- Joined: 23 Aug 2002 12:01 am
- Location: St. Paul
- Contact:
Seems to me you can't download any freeware anymore without getting a host of these parasite programs. Today I downloaded CD Wave Editor, a really handy little program for chopping up Wave files. I've been using it for at least 10 years. I've always downloaded it when I've changed computers or hard drives with no problems. Today it installed a couple of these parasite programs. Malwarebytes popped up pretty quick and I was able to get rid of them, but this has happened several times from programs downloaded from Cnet and other freeware sites. What a world, what a world, to quote the Wicked Witch of the West.
Mullen RP D10, Peavey NV112, Hilton volume. Hound Dog reso. Piles of other stuff.
- Bo Borland
- Posts: 3993
- Joined: 20 Dec 1999 1:01 am
- Location: South Jersey -
- Contact:
- Richard Sinkler
- Posts: 17676
- Joined: 15 Aug 1998 12:01 am
- Location: aka: Rusty Strings -- Missoula, Montana
I finally got rid of Binkiland. Between some uninstall program in an additional folder that Binkiland puts on your hard drive, and some manual edits in the registry, I finally beat it.
I have heard some really bad things about CNET. I always trusted them because they had a great TV show. Turns out they are just crap. I won't download anything from them. If I can't get what I want somewhere else, then I really don't want it.
I have heard some really bad things about CNET. I always trusted them because they had a great TV show. Turns out they are just crap. I won't download anything from them. If I can't get what I want somewhere else, then I really don't want it.
Carter D10 8p/7k, Dekley S10 3p/4k C6 setup, Regal RD40 Dobro, Recording King Professional Dobro, NV400, NV112, Ibanez Gio guitar, Epiphone SG Special (open G slide
and regular G tuning guitar) . Playing for 55 years and still counting.
and regular G tuning guitar) . Playing for 55 years and still counting.
- Michael Haselman
- Posts: 1292
- Joined: 23 Aug 2002 12:01 am
- Location: St. Paul
- Contact:
I read up a little more on this modern problem. As always, the almighty $ rules. Apparently Cnet and others get paid to allow the crapware to be installed along with what you want. I also found that instead of hitting the big green "Download Now" button and instead search for the tiny "direct download" button and click that you will get your program free of the junk.
Mullen RP D10, Peavey NV112, Hilton volume. Hound Dog reso. Piles of other stuff.