[HOME] 7:57 AM April 13, 2015

Games Desktop Malware

My brother recently got a piece of Malware on his computer called Games Desktop that seemed to be putting a toolbar on the desktop and installing a bunch of junk, browser hijackers for example. I was talking to him on the phone so I didn't have access to the actual computer. So I suggested and talked him through running a number of scanners that included;

  • Adwcleaner - www.bleepingcomputer.com/download/adwcleaner/
  • Malwarebytes - www.malwarebytes.org/
  • Superantispyware - www.superantispyware.com/index.html
  • Tdsskiller - www.bleepingcomputer.com/download/tdsskiller/
  • Combofix - www.bleepingcomputer.com/combofix/how-to-use-combofix

    He seemed to have gotten rid of it but it would keep coming back after he restarted. So I suggested he download Hijackthis - www.bleepingcomputer.com/download/hijackthis/

    Warning this is not a program that automatically removes any malware. It is for manually removing junk you don't want running in the background. I've had a little experience with this one so I know a few things to look out for.

    After running a scan and saving the log file I got him to send the log to me on a email.

    The following two items I suggested he remove:

  • O4 - HKCU\..\Run: [DeskBar] C:\Users\easyhome\AppData\Local\DeskBar\DeskBar.exe
  • O4 - Startup: Setup_232841.lnk = C:\ProgramData\{91633d3f-f45b-68e9-9163-33d3ff45f4ff}\Setup_232841.exe

    Restarting the computer the toolbar was gone and so far so good.

    My YouTube Subscriptions

    I decided to share my list of YouTube subscription channels with you. One of my problems was trying to save a copy of the list to post here. So here is how I did it.

    First I open up my subscription list on Youtube. Click on the 3 lines in the top left hard corner right after the logo. Then scroll down to Manage subscriptions. This will give you a list of all your subscriptions. Then, in my case I went to the Opera dropdown menu and clicked on Page and then Save as - you can rename it if you like. I left it as Subscription manager - YouTube.htm and changed the save as type: to Webpage Complete.

    This gave me an editable HTML file to use which I opened in a program called AddrView - www.nirsoft.net/utils/addrview.html . You'll get a list of all detected URL's.

    You can save it as is but you get a lot of junk URL's and duplicates. So I clicked on one that I wanted to save and then while holding down Ctrl I clicked on another allowing me to select more than one at a time. I repeated until all was selected.

    Then I went to view in AddrView and clicked on HTML Report - Selected Items - warning this creates a HTML file that is deleted when the program is closed. So save it through your browser first or use File - Save selected Items in AddrView. If you use the save option the output is slightly different than through the view option.

    Not necessary but I also edited the HTML file to remove the Type column. I accidentally included some duplicates and dead channels and weeded them out. I wish this program gave me a few more options like putting them in alphabetical order. Already tired of fooling around with it so here it is -

    The following is the end result and a list of my current subscriptions.

    Created by using AddrView

    Address Caption
     https://www.youtube.com/channel/UC-Awt2UIyTjw3WzF9gfcI9A  CreepyPastaJr
     https://www.youtube.com/channel/UC0vBXGSyV14uvJ4hECDOl0Q  Techquickie
     https://www.youtube.com/channel/UC1BWMtZbNLVMSFgwSukjqCw  Armoured Skeptic
     https://www.youtube.com/channel/UC1n_T1PzjU9EryQiPGLjl9A  Guiding Tech
     https://www.youtube.com/channel/UC1qojyEex8dhtkDxBbMGd1w  The Ricky Gervais Show
     https://www.youtube.com/channel/UC2C_jShtL725hvbm1arSV9w  CGP Grey
     https://www.youtube.com/channel/UC2TT4PdhvEBgdAmrGv-2QuA  Samination
     https://www.youtube.com/channel/UC3XTzVzaHQEd30rQbuvCtTQ  LastWeekTonight
     https://www.youtube.com/channel/UC4gON4eBraggD3DiO3ttlIg  Amit Agarwal
     https://www.youtube.com/channel/UC5MkxrHWkLDDnToq_ZTYGlA  Vancouver Film School
     https://www.youtube.com/channel/UC6nSFpj9HTCZ5t-N3Rm3-HA  Vsauce
     https://www.youtube.com/channel/UC7Fbw-51KYYkBppNwc2ybpA  newgrounds
     https://www.youtube.com/channel/UC9-wz8Md_X6V3BCihYW3jig  majorgeeks
     https://www.youtube.com/channel/UC9BqPtCcSyHvQsbl2rumM4w  dottotech
     https://www.youtube.com/channel/UC_mmB9WkzXQAQmwj6EPmXQw  #Software
     https://www.youtube.com/channel/UCa35qyNpnlZ_u8n9qoAZbMQ  HowStuffWorks
     https://www.youtube.com/channel/UCA6dwGRo2WEJTRQTvrSfXBw  Source Vibrations
     https://www.youtube.com/channel/UCaGev0JRG7Dp5c_R4ROADLw  David Firth
     https://www.youtube.com/channel/UCAiHBfTJRAKJH38XDUQaZeQ  Isochronic Tones
     https://www.youtube.com/channel/UCapylecM6otqmrNBE4YGGrg  Cartoons and Anime
     https://www.youtube.com/channel/UCAqVlzKQAkaoZiM56GVBc_g  TheFullmovies2013
     https://www.youtube.com/channel/UCar_bY7XJzraedRZ3IdyYVQ  FulLengthBinaurals
     https://www.youtube.com/channel/UCBBa9ITxN-uPgQLEFmWuzoQ  FilmStreamOnline
     https://www.youtube.com/channel/UCBHn_qVrfMmPNhqiqQyrQLQ  Anime 2
     https://www.youtube.com/channel/UCbZR3sw_mgZI2NV6WbPXoZg  mellowb1rd
     https://www.youtube.com/channel/UCC552Sd-3nyi_tk2BudLUzA  AsapSCIENCE
     https://www.youtube.com/channel/UCCoZkjM94dWZ9fSm8Iioa3w  SophosLabs
     https://www.youtube.com/channel/UCCRMI6LFFY7gh_EdV3QM8OA  Stuff to Blow Your Mind - HowStuffWorks
     https://www.youtube.com/channel/UCD4qMoFPUEzSn4CurFLJkIQ  Steve Shives
     https://www.youtube.com/channel/UCD_q5tRxbImtvzMoH1V1jnw  GhostWatching
     https://www.youtube.com/channel/UCDK383lJK27zxYhgabPilCA  Sh├Ądman
     https://www.youtube.com/channel/UCdQCVI9XYaDv4E69FX8L5wA  Revision3
     https://www.youtube.com/channel/UCDXjzOeZRqLxhYaaEhWLb_A  Profmth Mitch
     https://www.youtube.com/channel/UCDyWzuw_u0TBnRaoAcVg0jw  NonStampCollector
     https://www.youtube.com/channel/UCeHGGfhRUiH5wBpjjzbRNXg  CreepsMcPasta
     https://www.youtube.com/channel/UCeiYXex_fwgYDonaTcSIk6w  MinuteEarth
     https://www.youtube.com/channel/UCeYP27qLtfUMY1b1Cyy3WdQ  TheThinkingAtheist
     https://www.youtube.com/channel/UCf6Xh4wIqcfkJ2uSABem8pw  paranormaltvchannel
     https://www.youtube.com/channel/UCfsX0iFWcdefP78zQpYRnvQ  43alley
     https://www.youtube.com/channel/UCGePOjk9Pf1NeF9tjypmkZA  iGodMind Subliminal and Meditation Mind Movies
     https://www.youtube.com/channel/UCgGgkVyadk0TdxmVzYcAM-Q  TheBibleReloaded
     https://www.youtube.com/channel/UCGi_crMdUZnrcsvkCa8pt-g  Alltime10s
     https://www.youtube.com/channel/UCgJjd8J5moTQSwnCIx4WSIw  Danger Dolan
     https://www.youtube.com/channel/UCgPClNr5VSYC3syrDUIlzLw  Adult Swim
     https://www.youtube.com/channel/UCgtCzZXV1JuT0aFDDL2IQSA  Toonocracy
     https://www.youtube.com/channel/UCHCph-_jLba_9atyCZJPLQQ  How It Should Have Ended
     https://www.youtube.com/channel/UCj3NRzD4qFJ-zN2iPeF_fMg  FlyingLotusVEVO
     https://www.youtube.com/channel/UCj_ClXIsDa03L-WpilnPAQQ  BobisWeirdTV
     https://www.youtube.com/channel/UCjD2KyAEm84yVH8cTilID7Q  Cracked
     https://www.youtube.com/channel/UCJNpM63pyQtKW07zBJ9eRBA  TwistedGrimTV
     https://www.youtube.com/channel/UCjNxszyFPasDdRoD9J6X-sw  The Amazing Atheist
     https://www.youtube.com/channel/UCKmqYReXoCMbVgxaT5XuM4w  This Is Genius
     https://www.youtube.com/channel/UCKPAF7Ud5sF1tiVA5iTDcFg  GrapplingIgnorance
     https://www.youtube.com/channel/UCKt6dYzHqHfpcp1lgj4bl1A  ScienceAtNASA
     https://www.youtube.com/channel/UCLhtZqdkjshgq8TqwIjMdCQ  DarkMatter2525
     https://www.youtube.com/channel/UCMcVRw4Ix0g-Ek0WPyfnIWQ  1A4 STUDIO
     https://www.youtube.com/channel/UCmUNy7Ry5VAZH-8qojtYaTg  OMGFactsOfficial
     https://www.youtube.com/channel/UCmWNCO9wSjzOz1UV8jCvIHA  CareyHolzman
     https://www.youtube.com/channel/UCnK2OWvbajOoBbkf0NArWhg  PureEducation
     https://www.youtube.com/channel/UCofgf2p-zH4vejw0qysrfKA  KMACK TIME
     https://www.youtube.com/channel/UCoPWgUVC4FIp9EJ7SU_vxvg  blogroopr
     https://www.youtube.com/channel/UCoTqgJgTw3_c-9S065BDBOg  Craig Chamberlin
     https://www.youtube.com/channel/UCoxcjq-8xIDTYp3uz647V5A  Numberphile
     https://www.youtube.com/channel/UCPCXkblP_0h5NFQTGIgSoZw  AllVintageFilms
     https://www.youtube.com/channel/UCplFctwMj80bMtHa8XNFJpg  Dishoom Movies
     https://www.youtube.com/channel/UCpZ5qUqpW4hW4zdfuBxMSJA  Mental Floss
     https://www.youtube.com/channel/UCPZiqlNI3RLyF47QTdq93GQ  Alltime Conspiracies
     https://www.youtube.com/channel/UCQ50KwJ849bO4DN4rMoSNpg  CookingwithKarma
     https://www.youtube.com/channel/UCqtnid-MHfOL9fw7ZKVK4hQ  ParanormalCamera & CrazyTape
     https://www.youtube.com/channel/UCRQebyNJm9YRyO5h0eWEVhw  Dark5
     https://www.youtube.com/channel/UCRQp1p7uuOjS2Xo_FRQ0XBA  GERMAN EROTICA
     https://www.youtube.com/channel/UCrrOic-og4HzhleZqOq4L-A  Stuff They Don't Want You To Know - HowStuffWorks
     https://www.youtube.com/channel/UCsH5OVHHO4hgfRmM3ghuIRQ  NQGHOSTHUNTER
     https://www.youtube.com/channel/UCSiOsLpjqSEQoPt8THw0k5A  DeistPaladin
     https://www.youtube.com/channel/UCsT0YIqwnpJCM-mx7-gSA4Q  TEDx Talks
     https://www.youtube.com/channel/UCSUMyPPmunaDKk0YHxCK-cw  Viewster
     https://www.youtube.com/channel/UCT_FWaZuqgw5QOjqtgsoTxw  LiveSciFi
     https://www.youtube.com/channel/UCtMWK1mQz3K269hioYnPs1g  "Believe" A Paranormal Experience
     https://www.youtube.com/channel/UCtqXzHl6Mmrur8OsyNevvxQ  MMAP
     https://www.youtube.com/channel/UCUHW94eEFW7hkUMVaZz4eDg  minutephysics
     https://www.youtube.com/channel/UCvq1bzvA8uHtq0feFX-FBdQ  Paranormal Zone TV - Do You Believe Web Series
     https://www.youtube.com/channel/UCvsye7V9psc-APX6wV1twLg  The Alex Jones Channel
     https://www.youtube.com/channel/UCVud_MZwkxnrexsvO7tisjg  Grindhouse Guru
     https://www.youtube.com/channel/UCWqJpFqlX59OML324QIByZA  list25
     https://www.youtube.com/channel/UCWz034JI79z5mvFw3c2vZjQ  The Bible Skeptic
     https://www.youtube.com/channel/UCXhSCMRRPyxSoyLSPFxK7VA  Matthew Santoro
     https://www.youtube.com/channel/UCxLpKibphYqXrXpxAnR8MfA  MondoMedia
     https://www.youtube.com/channel/UCXoz50lww8yf0_q4tpq3WWQ  Musiime Chris
     https://www.youtube.com/channel/UCYEmrvpn6qA4jLuuTcNaZAg  MyCouplesRockHard
     https://www.youtube.com/channel/UCyjTUNqX_vasRG4AAaM34jA  Animation Domination High-Def
     https://www.youtube.com/channel/UCYUQQgogVeQY8cMQamhHJcg  CinemaSins
     https://www.youtube.com/channel/UCYxrnDjNQZIs_aAcdhqSveg  Rob Dyke
     https://www.youtube.com/channel/UCZDA1kA3y3EIg25BpcHSpwQ  Tinkernut
     https://www.youtube.com/channel/UCzjCUH-MqVQUQryi1fVJ1tA  aniBOOM
     https://www.youtube.com/channel/UCZjdtJqy8gQoorbHNhwQHtA  ONF
     https://www.youtube.com/channel/UCzLvgr_ACm8gUOMVw0MCXXA  GervaisShowRicky
     https://www.youtube.com/channel/UCZNevA-EjLRTzmJyhs2zczg  MaxGilardi
     https://www.youtube.com/channel/UCZYTClx2T1of7BRZ86-8fow  SciShow