Win32/WebDir - OneCare and Dr.Web - Please help

Win32/WebDir - OneCare and Dr.Web - Please help

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Win32/WebDir - OneCare and Dr.Web - Please help Akash 04-13-2007
Posted by =?Utf-8?B?QWthc2g=?= on April 13, 2007, 2:00 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hey there guys,

Recently, it seems like i got a spyware on my computer. It keeps on giving
me popups and a security warning that TELLS me I have a spyware on my
computer and should immediately download one of the anti-spyware softwares
from this site: http://www.hwgate.com/gatevc.php?id=icn02.

I was using a programme called Dr.Web to block out spyware and viruses, but
somehow this one got through. Dr.Web spots the spyware and tells me that I
have atleast 1 infected item on my computer, but it doesnt seem to be able to
get rid of it.

I then downloaded Windows Live OneCare. It tells me that the spyware is:

Win32/WebDir

Yet, it cant delete it. Anyone else had this problem with this piece of
spyware? Does anyone know any other anti-spyware programme and any steps I
can take to protect my PC? Btw, I am working as an administrator on my
computer...please help me out. Your support is VERY much appreciated.

Thanks,

Akash

Posted by Frank Saunders, MS-MVP OE/WM on April 13, 2007, 4:10 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> Hey there guys,
>
> Recently, it seems like i got a spyware on my computer. It keeps on giving
> me popups and a security warning that TELLS me I have a spyware on my
> computer and should immediately download one of the anti-spyware softwares
> from this site: http://www.hwgate.com/gatevc.php?id=icn02.
>
> I was using a programme called Dr.Web to block out spyware and viruses,
> but
> somehow this one got through. Dr.Web spots the spyware and tells me that I
> have atleast 1 infected item on my computer, but it doesnt seem to be able
> to
> get rid of it.
>
> I then downloaded Windows Live OneCare. It tells me that the spyware is:
>
> Win32/WebDir
>
> Yet, it cant delete it. Anyone else had this problem with this piece of
> spyware? Does anyone know any other anti-spyware programme and any steps I
> can take to protect my PC? Btw, I am working as an administrator on my
> computer...please help me out. Your support is VERY much appreciated.
>
> Thanks,
>
> Akash

Do a thorough check for malware, following all of the steps at one of these
Web pages.
Help with malware:
All MS-MVP Sites.
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/darnit.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm

Unexplained computer behavior may be caused by deceptive software.
http://support.microsoft.com/kb/827315

So How Did I Get Infected Anyway?
For quite a few people it's by installing Messenger Plus, whose ads for
malware don't identify the malware as such and try to convince you that you
owe it to the author. See also:
http://www.wilderssecurity.com/showthread.php?t=27971
Don't ever do a "default" install of anything. Always choose Custom and see
what else is being carried along. Don't install any extras you're not sure
of.

--
Frank Saunders, MS-MVP OE/WM
http://www.fjsmjs.com
Answer in newsgroup. Don't expect an answer to email.



Posted by David H. Lipman on April 13, 2007, 5:12 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| Hey there guys,
|
| Recently, it seems like i got a spyware on my computer. It keeps on giving
| me popups and a security warning that TELLS me I have a spyware on my
| computer and should immediately download one of the anti-spyware softwares
| from this site: http://www.hwgate.com/gatevc.php?id=icn02.
|
| I was using a programme called Dr.Web to block out spyware and viruses, but
| somehow this one got through. Dr.Web spots the spyware and tells me that I
| have atleast 1 infected item on my computer, but it doesnt seem to be able to
| get rid of it.
|
| I then downloaded Windows Live OneCare. It tells me that the spyware is:
|
| Win32/WebDir
|
| Yet, it cant delete it. Anyone else had this problem with this piece of
| spyware? Does anyone know any other anti-spyware programme and any steps I
| can take to protect my PC? Btw, I am working as an administrator on my
| computer...please help me out. Your support is VERY much appreciated.
|
| Thanks,
|
| Akash

Do yourself a favour and REMOVE OneCare and re-install Dr.Web or some other
quality anti
virus product (such as Kaspersky and NOD32).
OneCare has one of the WORST catch rates in the anti virus industry and it is
NOT a
recommended product.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by PA Bear on April 13, 2007, 5:28 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
The machine /is/ infected.

You cannot have both OneCare and Dr. Web installed and loading at boot.

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin; DTS-L.org


Akash wrote:
> Hey there guys,
>
> Recently, it seems like i got a spyware on my computer. It keeps on giving
> me popups and a security warning that TELLS me I have a spyware on my
> computer and should immediately download one of the anti-spyware softwares
> from this site: http://www.hwgate.com/gatevc.php?id=icn02.
>
> I was using a programme called Dr.Web to block out spyware and viruses,
> but
> somehow this one got through. Dr.Web spots the spyware and tells me that I
> have atleast 1 infected item on my computer, but it doesnt seem to be able
> to get rid of it.
>
> I then downloaded Windows Live OneCare. It tells me that the spyware is:
>
> Win32/WebDir
>
> Yet, it cant delete it. Anyone else had this problem with this piece of
> spyware? Does anyone know any other anti-spyware programme and any steps I
> can take to protect my PC? Btw, I am working as an administrator on my
> computer...please help me out. Your support is VERY much appreciated.
>
> Thanks,
>
> Akash


Similar ThreadsPosted
Onecare vs. alternatives July 12, 2006, 8:20 pm
Windows OneCAre October 2, 2006, 6:23 am
OneCare Subscriptions November 15, 2006, 9:52 pm
OneCare forums August 21, 2007, 6:42 pm
OneCare to be discontinued November 18, 2008, 6:48 pm
Re: OneCare to be discontinued November 18, 2008, 7:44 pm
OneCare slows system February 19, 2006, 1:47 pm
Windows OneCare Firewall October 11, 2006, 11:41 pm
Is this the place to post a Q regarding OneCare? January 28, 2007, 6:29 pm
Live OneCare Backups December 23, 2007, 3:31 pm

The site map in XML format XML site map

Contact Us | Privacy Policy