Winantivirus, tried to remove and failed

Discussion in 'Malware Help (A Specialist Will Reply)' started by pipcraz84, Jul 4, 2006.

  1. pipcraz84

    pipcraz84 Private E-2

    First and foremost, thank you!

    I downloaded and ran everything from the thread 'READ & RUN ME...'. I attached all the logs to this thread.

    Everytime I used IE, I have a popup from 'Winantivirus'. After I ran all the logs, several things concerned me: conhook.aa, pmkjh.exe, drmept.dll, and agent.anm.

    I also ran ewido anti-spyware, which caught the conhook.aa and drmept.dll but failed to remove it. I also went in manually to the folder where drmept.dll is found and tried to delete it, again failed. If you need the ewido log, let me know.

    Hope someone can figure this out for me. Thank you!!!

    I saw the thread from "wonderpants" about "Winantivirus", can his/her fix work the same for mine? Or are all cases different?
     

    Attached Files:

    pipcraz84, Jul 4, 2006
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please follow the directions in step 7 of the READ & RUN ME exactly and attach a HijackThis log.

    Now run the below procedure and attach the newfiles.txt log.
     
    chaslang, Jul 6, 2006
    #2
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    C:\WINDOWS\system32\drmept.dll
     
    chaslang, Jul 6, 2006
    #3

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds