Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Web Specials/web Spec.dll


  • Please log in to reply
2 replies to this topic

#1 Jim Russ

Jim Russ

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 04 May 2006 - 06:46 PM

please help! I've been stuck since yesterday trying to remove this annoying spyware that tries to start up every time I start my computer. It says Rundll32 C:Programs/Web Specials/WebSpec.dll I've tried everything like running both spyware and ad-ware programs after booting up in safe mode. Then rebooting several times in safe mode and runnig both programs again. Can someone please help me figure out how to remove this annoying bleeping program. Thank you.

BC AdBot (Login to Remove)

 


m

#2 Herk

Herk

  • Members
  • 1,609 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:S.E. Idaho, USA
  • Local time:04:35 AM

Posted 04 May 2006 - 09:26 PM

In our HijackThis! forum, we have a guide for preparation for posting a Hijack log. Even if you don't post a log, it would be good to read through the list of scanners and programs recommended to be run first. Just running the scans may solve your problem. Keeping and using good antispyware programs and antivirus can save you a lot of grief.

#3 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:35 AM

Posted 05 May 2006 - 06:24 AM

TROJ_DLOADER.CI creates the folder WebSpecials in the Program Files directory and adds webspec.dll to the registry startup keys.

In addition to Herk's recommendations, try the following:

Check to see if WebSpecials is listed in Add/Remove Programs in Control Panel. Is so uninstall the program from there. If its not listed, then do the following:

Download and scan with Sysclean Package.
1. Create a new folder on drive "C:\" ("C:\New Folder") and rename it Sysclean.
2. Place the sysclean.com inside that folder.
3. Then download the latest Virus Pattern Files [lptXXX.zip].
4. Extract the lptXXX.zip pattern file into the same folder you created for sysclean.com.
5. Close all open applications and DISABLE your current anti-virus software. Some anti-virus programs such as Avast will alert you to a virus attack when running sysclean so it's best to disable them first.
6. Open the Sysclean folder and double-click on sysclean.com to run.
7. It will take some time to complete. Be patient and let it clean whatever it finds.
8. Exit when done and re-enable your anti-virus program.

If your running Win XP/2000, download and scan with Ewido Anti-Malware v3.5 in "SAFE MODE".
Ewido Install and Scan Instructions.

While still in safe mode browse to and delete the following folder:
C:\Program Files\WebSpecials\ <- this folder

Reboot in normal mode and perform this online Virus scan:
[Watch the Address bar in IE. You may receive alerts that "This site might require the following ActiveX control...Click here to install...". Click on that alert and then Click Install ActiveX component.]
Trend Micro Housecall Scan
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users