donnaldgrogon
08-22-2012, 06:28 AM
I'm a huge fan of Freecorder. The older version worked flawlessly. I downloaded Freecorder 6 after purchasing a new computer. Freecorder 6 is riddled with spyware. During install the option to install add-ons are provided, however, these check boxes are for show only as the spyware is installed regardless. The install hijacked my IE, Firefox and Chrome. A virus scan discovered 40 Funmoods files throughout my computer including the registry. Trying to uninstall was a nightmare.
I've sent several messages to Applian requesting an explanation. Applian has not responded.
Fortunately Windows 7 can be restore to factory settings. I have one old computer with an older version of Freecorder and I'm looking for a way to transfer it to my new computer. I have no intention of using new Applian software until I hear their response.
Here is what you get with Freecorder 6
Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org
Database version: v2012.08.14.03
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
[administrator]
8/14/2012 8:31:33 AM
mbam-log-2012-08-14 (08-31-33).txt
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra |
Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 196992
Time elapsed: 2 minute(s), 51 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 26
HKCR\TypeLib\{D7EE8177-D51E-4F89-92B6-832EC40800} (PUP.Funmoods) -> No action
taken.
HKCR\CLSID\{75EBB0AA-4214-4CB4-90EC-E37ECD04F7} (PUP.Funmoods) -> Quarantined and
deleted successfully.
HKCR\funmoods.funmoodsHlpr.1 (PUP.Funmoods) -> Quarantined and deleted successfully.
HKCR\funmoods.funmoodsHlpr (PUP.Funmoods) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\Browser Helper
Objects\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} (PUP.Funmoods) -> Quarantined and
deleted successfully.
HKCR\CLSID\{75A4D144-506D-4BE5-81DB-EC7DE7F840} (PUP.Funmoods) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{960DF771-CFCB-4E53-A5B5-6EFBE6E706} (PUP.Funmoods) -> Quarantined
and deleted successfully.
HKCR\esrv.funmoodsESrvc.1 (PUP.Funmoods) -> Quarantined and deleted successfully.
HKCR\esrv.funmoodsESrvc (PUP.Funmoods) -> Quarantined and deleted successfully.
HKCR\CLSID\{965B9DBE-B104-44AC-950A-8A5F9FF439} (PUP.Funmoods) -> Quarantined and
deleted successfully.
HKCR\escort.escortIEPane.1 (PUP.Funmoods) -> Quarantined and deleted successfully.
HKCR\escort.escortIEPane (PUP.Funmoods) -> Quarantined and deleted successfully.
HKCR\CLSID\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} (PUP.Funmoods) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{4E1E9D45-8BF9-4139-915C-9F833D5921} (PUP.Funmoods) -> Quarantined
and deleted successfully.
HKCR\funmoods.dskBnd.1 (PUP.Funmoods) -> Quarantined and deleted successfully.
HKCR\funmoods.dskBnd (PUP.Funmoods) -> Quarantined and deleted successfully.
HKCR\CLSID\{A9DB719C-7156-415E-B49D-BAD03E4F13} (PUP.Funmoods) -> Quarantined and
deleted successfully.
HKCR\funmoodsApp.appCore.1 (PUP.Funmoods) -> Quarantined and deleted successfully.
HKCR\funmoodsApp.appCore (PUP.Funmoods) -> Quarantined and deleted successfully.
HKCR\CLSID\{F03FD9D0-4F2B-497C-8A71-DD41D70B07D9} (PUP.Funmoods) -> Quarantined and
deleted successfully.
HKCR\f (PUP.Funmoods) -> Quarantined and deleted successfully.
HKCR\Typelib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3} (PUP.Funmoods) -> Quarantined
and deleted successfully.
HKCR\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191} (PUP.Funmoods) -> Quarantined
and deleted successfully.HKCU\Software\Google\Chrome\Extension s\bbjciahceamgodcoidkjpchnokgfpphh
mbam-log-2012-08-14 (08-31-33)
(PUP.Funmoods) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Google\Chrome\Extensions\bbjciahceam godcoidkjpchnokgfpphh
(PUP.Funmoods) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall\funmoods (PUP.Funmoods) ->
Quarantined and deleted successfully.
Registry Values Detected: 2
HKLM\SOFTWARE\Microsoft\Internet
Explorer\Toolbar|{A4C272EC-ED9E-4ACE-A6F2-9558F29EF3} (PUP.Funmoods) -> Data:
Funmoods Toolbar -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet
Explorer\Toolbar\{A4C272EC-ED9E-4ACE-A6F2-9558F29EF3} (PUP.Funmoods) -> Data: ->
Quarantined and deleted successfully.
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 2
C:\Program Files (x86)\Funmoods\1.5.23.22 (PUP.Funmoods) -> Quarantined and deleted
successfully.
C:\Program Files (x86)\Funmoods\1.5.23.22\bh (PUP.Funmoods) -> Quarantined and
deleted successfully.
Files Detected: 13
C:\Program Files (x86)\Funmoods\1.5.23.22\bh\escort.dll (PUP.Funmoods) ->
Quarantined and deleted successfully.
C:\Program Files (x86)\Funmoods\1.5.23.22\funmoodssrv.exe (PUP.Funmoods) ->
Quarantined and deleted successfully.
C:\Program Files (x86)\Funmoods\1.5.23.22\escorTlbr.dll (PUP.Funmoods) ->
Quarantined and deleted successfully.
C:\Program Files (x86)\Funmoods\1.5.23.22\escortApp.dll (PUP.Funmoods) ->
Quarantined and deleted successfully.
C:\Program Files (x86)\Funmoods\1.5.23.22\escortEng.dll (PUP.Funmoods) ->
Quarantined and deleted successfully.
C:\Users\Kenneth\Downloads\applianflv.exe (PUP.BundleOffers.IIQ) -> Quarantined and
deleted successfully.
C:\Users\Kenneth\Downloads\gimp_958.exe (PUP.BundleOffers.IIQ) -> Quarantined and
deleted successfully.
C:\Users\Kenneth\Downloads\SoftonicDownloader_for_ secure-folder.exe
(PUP.ToolbarDownloader) -> Quarantined and deleted successfully.
C:\Users\Kenneth\AppData\Local\funmoods.crx (PUP.Funmoods) -> Quarantined and
deleted successfully.
C:\Users\Kenneth\Local Settings\Application Data\funmoods.crx (PUP.Funmoods) ->
Quarantined and deleted successfully.
C:\Program Files (x86)\Funmoods\1.5.23.22\escortShld.dll (PUP.Funmoods) ->
Quarantined and deleted successfully.
C:\Program Files (x86)\Funmoods\1.5.23.22\FavIcon.ico (PUP.Funmoods) -> Quarantined
and deleted successfully.
C:\Program Files (x86)\Funmoods\1.5.23.22\uninstall.exe (PUP.Funmoods) ->
Quarantined and deleted successfully.
(end)
Page
I've sent several messages to Applian requesting an explanation. Applian has not responded.
Fortunately Windows 7 can be restore to factory settings. I have one old computer with an older version of Freecorder and I'm looking for a way to transfer it to my new computer. I have no intention of using new Applian software until I hear their response.
Here is what you get with Freecorder 6
Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org
Database version: v2012.08.14.03
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
[administrator]
8/14/2012 8:31:33 AM
mbam-log-2012-08-14 (08-31-33).txt
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra |
Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 196992
Time elapsed: 2 minute(s), 51 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 26
HKCR\TypeLib\{D7EE8177-D51E-4F89-92B6-832EC40800} (PUP.Funmoods) -> No action
taken.
HKCR\CLSID\{75EBB0AA-4214-4CB4-90EC-E37ECD04F7} (PUP.Funmoods) -> Quarantined and
deleted successfully.
HKCR\funmoods.funmoodsHlpr.1 (PUP.Funmoods) -> Quarantined and deleted successfully.
HKCR\funmoods.funmoodsHlpr (PUP.Funmoods) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\Browser Helper
Objects\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} (PUP.Funmoods) -> Quarantined and
deleted successfully.
HKCR\CLSID\{75A4D144-506D-4BE5-81DB-EC7DE7F840} (PUP.Funmoods) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{960DF771-CFCB-4E53-A5B5-6EFBE6E706} (PUP.Funmoods) -> Quarantined
and deleted successfully.
HKCR\esrv.funmoodsESrvc.1 (PUP.Funmoods) -> Quarantined and deleted successfully.
HKCR\esrv.funmoodsESrvc (PUP.Funmoods) -> Quarantined and deleted successfully.
HKCR\CLSID\{965B9DBE-B104-44AC-950A-8A5F9FF439} (PUP.Funmoods) -> Quarantined and
deleted successfully.
HKCR\escort.escortIEPane.1 (PUP.Funmoods) -> Quarantined and deleted successfully.
HKCR\escort.escortIEPane (PUP.Funmoods) -> Quarantined and deleted successfully.
HKCR\CLSID\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} (PUP.Funmoods) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{4E1E9D45-8BF9-4139-915C-9F833D5921} (PUP.Funmoods) -> Quarantined
and deleted successfully.
HKCR\funmoods.dskBnd.1 (PUP.Funmoods) -> Quarantined and deleted successfully.
HKCR\funmoods.dskBnd (PUP.Funmoods) -> Quarantined and deleted successfully.
HKCR\CLSID\{A9DB719C-7156-415E-B49D-BAD03E4F13} (PUP.Funmoods) -> Quarantined and
deleted successfully.
HKCR\funmoodsApp.appCore.1 (PUP.Funmoods) -> Quarantined and deleted successfully.
HKCR\funmoodsApp.appCore (PUP.Funmoods) -> Quarantined and deleted successfully.
HKCR\CLSID\{F03FD9D0-4F2B-497C-8A71-DD41D70B07D9} (PUP.Funmoods) -> Quarantined and
deleted successfully.
HKCR\f (PUP.Funmoods) -> Quarantined and deleted successfully.
HKCR\Typelib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3} (PUP.Funmoods) -> Quarantined
and deleted successfully.
HKCR\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191} (PUP.Funmoods) -> Quarantined
and deleted successfully.HKCU\Software\Google\Chrome\Extension s\bbjciahceamgodcoidkjpchnokgfpphh
mbam-log-2012-08-14 (08-31-33)
(PUP.Funmoods) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Google\Chrome\Extensions\bbjciahceam godcoidkjpchnokgfpphh
(PUP.Funmoods) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall\funmoods (PUP.Funmoods) ->
Quarantined and deleted successfully.
Registry Values Detected: 2
HKLM\SOFTWARE\Microsoft\Internet
Explorer\Toolbar|{A4C272EC-ED9E-4ACE-A6F2-9558F29EF3} (PUP.Funmoods) -> Data:
Funmoods Toolbar -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet
Explorer\Toolbar\{A4C272EC-ED9E-4ACE-A6F2-9558F29EF3} (PUP.Funmoods) -> Data: ->
Quarantined and deleted successfully.
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 2
C:\Program Files (x86)\Funmoods\1.5.23.22 (PUP.Funmoods) -> Quarantined and deleted
successfully.
C:\Program Files (x86)\Funmoods\1.5.23.22\bh (PUP.Funmoods) -> Quarantined and
deleted successfully.
Files Detected: 13
C:\Program Files (x86)\Funmoods\1.5.23.22\bh\escort.dll (PUP.Funmoods) ->
Quarantined and deleted successfully.
C:\Program Files (x86)\Funmoods\1.5.23.22\funmoodssrv.exe (PUP.Funmoods) ->
Quarantined and deleted successfully.
C:\Program Files (x86)\Funmoods\1.5.23.22\escorTlbr.dll (PUP.Funmoods) ->
Quarantined and deleted successfully.
C:\Program Files (x86)\Funmoods\1.5.23.22\escortApp.dll (PUP.Funmoods) ->
Quarantined and deleted successfully.
C:\Program Files (x86)\Funmoods\1.5.23.22\escortEng.dll (PUP.Funmoods) ->
Quarantined and deleted successfully.
C:\Users\Kenneth\Downloads\applianflv.exe (PUP.BundleOffers.IIQ) -> Quarantined and
deleted successfully.
C:\Users\Kenneth\Downloads\gimp_958.exe (PUP.BundleOffers.IIQ) -> Quarantined and
deleted successfully.
C:\Users\Kenneth\Downloads\SoftonicDownloader_for_ secure-folder.exe
(PUP.ToolbarDownloader) -> Quarantined and deleted successfully.
C:\Users\Kenneth\AppData\Local\funmoods.crx (PUP.Funmoods) -> Quarantined and
deleted successfully.
C:\Users\Kenneth\Local Settings\Application Data\funmoods.crx (PUP.Funmoods) ->
Quarantined and deleted successfully.
C:\Program Files (x86)\Funmoods\1.5.23.22\escortShld.dll (PUP.Funmoods) ->
Quarantined and deleted successfully.
C:\Program Files (x86)\Funmoods\1.5.23.22\FavIcon.ico (PUP.Funmoods) -> Quarantined
and deleted successfully.
C:\Program Files (x86)\Funmoods\1.5.23.22\uninstall.exe (PUP.Funmoods) ->
Quarantined and deleted successfully.
(end)
Page