WinAnitSpyWare

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by awood2401, Sep 28, 2005.

  1. awood2401

    awood2401 Private E-2

    I have tried every spyware removal tool that I know of to get rid of my spyware. Whenever I look at a webpage I get a box that says that my computer has been infected and that I need to download WinAntiSpyWare. I click cancel and it takes me to their download page. I close that window and I get another box that says the scan is not complete and that WinAntiSpyWare will not be downloaded. I "x" out of that box and another window pops-up and stays that WinAntiSpyWare has been downloaded and to click "Run" to continue. Another box pops-up that allows me to "Save" "Run" or "Cancel" the download. I always click cancel but the above process occurs everyime I open my browser and about every 10 mins. I am also getting random pop-ups for matchmaker.com and other sites. Thanks for the help!

    Here is my Hijack This log:

    Edit by bjgarrick: Unrequested, Inline HJT log removed!
     
    Last edited by a moderator: Sep 28, 2005
  2. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Please follow standard cleanup procedures as given below:

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above and you still have a problem, make sure you have booted to normal mode and run the steps below:



    http://www.majorgeeks.com/images/grenade.gif Download HijackThis 1.99.1

    http://www.majorgeeks.com/images/grenade.gif Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    http://www.majorgeeks.com/images/grenade.gif Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the ZIP file as your backups will not be safely stored.

    http://www.majorgeeks.com/images/grenade.gifBefore running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    http://www.majorgeeks.com/images/grenade.gifRun HijackThis and save your log file.

    http://www.majorgeeks.com/images/grenade.gif Post your log as an ATTACHMENT to your next post. (Do NOT copy/paste the log into your post as it will be removed).

    http://www.majorgeeks.com/images/grenade.gifNeed help with HJT? See this thread: NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting
     
  3. awood2401

    awood2401 Private E-2

    I have run all of the scans. Nothing is found.

    Here is my Hijack This! log:
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    No you did not! At a minimum it is easy to see you even skipped the first step of the cleaning process (the two online scanners). Anything else not run? You do have a Virtumundo problem BJ can help you with. But run ALL the steps in the READ ME.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds