Mighty Magoo

Mighty Magoo or also known as Adware.Magoo is an adware that will display pop-up advertisements on the computer while user is browsing the Internet. Mighty Magoo will modify Windows registry so that it will run on itself each time the computer is started.

TypeAdware
Sub-TypeAds
AliasesAdware.Magoo
OS AffectedWindows
Detected BySymantec

What are the Symptoms of Mighty Magoo Infection?

It will modify Windows Registry and add the following entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”Mightymagoo” = “%ProgramFiles%\Mighty Magoo\mightymagoo32.exe a”
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\MightyMagooText.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{97E74A14-E5F1-40cc-9B0F-0D11946E5469}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEAD004E-7E2D-49f8-831C-A01647E85B53}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MightyMagooText.Linker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{97E74A14-E5F1-40cc-9B0F-0D11946E5469}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEAD004E-7E2D-49f8-831C-A01647E85B53}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MightyMagoo
HKEY_CURRENT_USER\[SID]\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEAD004E-7E2D-49f8-831C-A01647E85B53}
HKEY_CURRENT_USER\[SID]\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{97E74A14-E5F1-40CC-9B0F-0D11946E5469}
HKEY_CURRENT_USER\[SID]\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEAD004E-7E2D-49F8-831C-A01647E85B53}
HKEY_CURRENT_USER\[SID]\Software\AppDataLow\mmagootl

The threat will drop the following malicious files:
%ProgramFiles%\Mighty Magoo\ars.cfg
%ProgramFiles%\Mighty Magoo\icon.ico
%ProgramFiles%\Mighty Magoo\mightymagoo32.exe
%ProgramFiles%\Mighty Magoo\mightymagoolib32.dll
%ProgramFiles%\Mighty Magoo\mmagootl.dll
%ProgramFiles%\Mighty Magoo\mmagooun.exe
%UserProfile%\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\textlinks@mmagoo.com\chrome\mmtextlinks.jar
%UserProfile%\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\textlinks@mmagoo.com\chrome.manifest
%UserProfile%\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\textlinks@mmagoo.com\components\mmagootlf.dll
%UserProfile%\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\textlinks@mmagoo.com\components\mmagootlf.xpt
%UserProfile%\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\textlinks@mmagoo.com\install.rdf

How to Remove Mighty Magoo Manually

1. Restart your computer in SafeMode
- After Power-On the computer, just before Windows start, press F8
- From the selections, Select SafeMode

2. Remove Registry entries that the threat added. You MUST BACKUP YOUR REGISTRY FIRST.
- Click Start > Run
- Type in the field, regedit
- Navigate and look for the registry entries mentioned above and delete if necessary

3. Delete malicious files that the threat added:
- Base on the given location above, browse and delete the file
- If no location is given, click Start>Search> and search for the files.
- If cannot be deleted, press Ctrl+Alt+Del to access Task Manager, see if the file is running in the process. If it is, select the file and click End Process. Perform file delete again.

4. Scan computer with Antivirus Program
- Update antivirus program
- Scan computer and delete all detected threats.

How to Easily Remove Mighty Magoo

1. Download and run Removal Tool to remove Mighty Magoo

14 Responses to“Mighty Magoo”

  1. blah
    January 23, 2011 at 10:14 pm #

    THANK YOU! This worked perfectly!

  2. The Magooroo
    March 2, 2011 at 5:52 pm #

    This is Mighty Magoo Support. In the wake of some negative comments that have been made about our website, we want to reinforce that the Mighty Magoo site, downloads, and games are formally TRUSTe certified and audited. Mighty Magoo is not spyware, malware, a virus, or a hijacker of anything, nor has it ever been.

    Our business model is to develop and publish free-to-play games to our site by requiring our audience to download the Mighty Magoo ad-supported software so as to become a member, unlock the site, and make the entire game library available. If you uninstall the software, the site will lock and the games will be unavailable to you.

    In order to install the Mighty Magoo advertising software, you must respond to one of our owned and controlled landing pages that provide full disclosure in the About Us, Terms, and Privacy sections links. Since we recognize that many consumers may not read one of these three available selections, we also provide, at the first step of downloading, a fully detailed disclosure screen that clearly states what activities and actions the Mighty Magoo ad software performs. This ad software is not bundled with any other software. It has fully-branded disclosure on each ad unit and does not attempt to hide or obscure its activities. In addition, there is a toll-free customer service hotline number on the mightymagoo.com site to assist you.

    The Mighty Magoo advertising software can be fully removed by using the Add/Remove Programs within Control Panel or using our “deactivation” software provided on the mightymagoo.com site. Removal of the software using various unsanctioned virus or spyware removal tools may not work properly and could cause greater problems for your Add/Remove Programs feature, browser, or operating system. We strongly recommend that you choose to remove the software using Add/Remove Programs or our deactivation software and not using third-party spyware, malware, or antivirus tools. This will completely remove all components of the Mighty Magoo advertising software.

    If you have further questions or need support, please contact our toll-free number located on the About Us section of mightymagoo.com.

  3. Lisa
    June 7, 2011 at 5:01 pm #

    My laptop got infected with Mighty Magoo as my daughter was trying to sign up for some free game or advertising. I had Norton on my computer and it indicated that my computer was being attacked by Mighty Magoo very dangerous virus, and that Norton stopped it. So I assumed everything was OK. But as there have been many reports, I was getting a million pop ups. So I used the Add/Remove programs on my computer to remove it, and restarted the computer. This send my computer going crazy and crashed my hard drive. I got a message saying that NTLDR was missing and to restart the computer, but every time I would restart the computer same message would pop up. I am pretty certain that Mighty Magoo was the cause of the crash. I read many posts on the Internet that people had similar problems. I had to take the laptop to Best Buy to get fixed.

  4. David
    June 24, 2011 at 5:07 pm #

    Mighty Mangoo claims they are not a virus, as they are Trust-e certified, but to remove the program, the best solution is to use the uninstaller on the Mighty Mangoo site. http:// mightymagoo. com/deactivate/ and click the little button that says click here, and it will download the uninstaller. It worked fine for me.

  5. chris
    July 14, 2011 at 4:14 pm #

    Help!

    I downloaded it and my malware picked it up, now it says it quarantined the key logger but then I reran it and it found it again!
    help!

  6. helper2009
    July 14, 2011 at 4:36 pm #

    The company claims that it is not a virus. They provided a removal procedure on this page:
    http://mightymagoo.com/deactivate/

    Hope it can help.

  7. chris
    July 14, 2011 at 9:36 pm #

    It’s not a virus its a key logger trying to steal my passwords and I already uninstalled it….
    yet this key logger just wont go!

  8. Donna & Jerry Imbiorski
    December 24, 2011 at 5:02 pm #

    PLEASE PLEASE PLEASE TAKE THIS “MIGTHY MAGOO” off our e-mails. We are very elderly fooks and can’t get through your directions. Please take THIS CRAMP off our e-mails.

  9. Donna & Jerry Imbiorski
    December 24, 2011 at 5:04 pm #

    PLEASE PLEASE PLEASE TAKE THIS “MIGHTY MAGOO” OFF OUR E-MAILS. WE ARE VERY ELDERLY FOLKS AND CAN’T GET THROUGH YOUR DIRECTIONS. PLEASE TAKE THIS CRAMP OFF OUR E-MAILS: sheila0348@yahoo.com and the e-mail: pollock102@blackfoot.net

  10. christine
    December 29, 2011 at 4:21 pm #

    I’m getting very nervous about your emails/company/nonsense. I WANT TO REMOVE EVERYTHING FROM MY COMPUTER THAT YOU HAVE IN IT. You have negative advertising methods – which are illegal in Canada (ontario) and if you do not provide an easy removal method, I will be inclined to file a class action law suit against your company for all the problems you have created. Don’t tell me that I signed up for your ads because I haven’t – i might play games but because you didn’t tell me that you would INVADE MY COMPUTER WITH THINGS I DID NOT AGREE TO, you have attempted to steal my identity. IMMEDIATELY PLEASE TELL ME HOW TO REMOVE THIS.

  11. MKC
    January 29, 2012 at 7:00 am #

    Christine – step 1 get a clue and rip the right person’s ass – this is im infected NOT the magoo website….

    now proceed to law suit

  12. M
    December 8, 2012 at 10:13 am #

    Scan your computer with Spybot Search & Destroy and Malware Bytes Anti-malware to get rid of Mighty Magoo (just google them for their websites). Worked for me, although it seems that some users may have to do more than that. Visit Ask-Leo.com for more help.

  13. M
    December 8, 2012 at 10:16 am #

    Also, D&J – it’s not a good idea to display your email publicly like that!

  14. Neopets
    January 21, 2013 at 9:39 pm #

    Thank you a lot for sharing this with all people you actually realize what you’re speaking approximately! Bookmarked. Kindly additionally consult with my website =). We may have a hyperlink exchange contract between us

Leave a Reply

Your email address will not be published. Required fields are marked *

(Required)

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>