Possible malware

[helen99]

I found a folder called F3C1DE9E5E164BA9B8547B53A45E3579.TMP in my home directory (running Vista Home Premium). The folder contained the application file "Wise Custom Calla 44.exe". Checked forums, and found a thread started by someone who'd found a similar folder in the Windows directory with 'Wise Custom Calla.dll" in it. (Read more... )

Comments

[actingbunny]

i will pass it on to chad.:D

[jarandhel]

I believe it's malware pretending to be a McAfee component. Spybot seems to be able to detect and remove it.

[helen99]

Yup, further searches revealed it's part of MyWebSearch, which is very annoying spyware. I picked it up from something posted on Facebook (a design your own cartoon face site). Luckily I recognized something had gone wrong and never linked anyone else to it.

I've been trying to clean Mywebsearch out of my system for a while now. Spybot SD took care of it. I never had McAfee on my system, so there was no way it could have been what it was pretending to be.

Thanks.

[helen99]

Facebook doesn't check the integrity of any of the ad sites that link to it. Once a site is reported as a virus hatchery, then I think Facebook gets rid of them (but by then it's too late for whoever clicked the link).

[actingbunny]

so says the chad
Its a left over link from an installed program:
http://forums.techguy.org/all-other-software/238135-17bb7031b6d94d27a3a1b0e672a0972c.html

[helen99]

Thanks! I saw that one. I think it was something else, tho, since my spy busting program detected and destroyed it...

[stillvisions]

I had a similar file at home, looked it up, belonged to some software I'd installed, like AVG or something. Not there so I can't look up the specifics.... didn't have the "Wise Custome Calla" part so I can't comment on that part. I'll see if I can find it again when I get home...

[helen99]

Actually it's part of some malware that masquerades as leftover install temp files. Everyone seems to think it's part of a different software install. Some say McAfee, others say something else... In fact it's part of something called MyWebSearch, which is an adware program.