Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I think my PC running windows7 is infected by webwatcher, or similiar.


  • Please log in to reply
5 replies to this topic

#1 DuffDuff

DuffDuff

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:03 PM

Posted 23 September 2014 - 05:36 AM

Webwatcher removal help?

Edited by Queen-Evie, 23 September 2014 - 09:59 AM.
moved from Windows 7 to the appropriate forum


BC AdBot (Login to Remove)

 


m

#2 buddy215

buddy215

  • BC Advisor
  • 12,614 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:12:03 AM

Posted 23 September 2014 - 06:53 AM

What makes you think you have Webwatcher or other keylogger installed? Are you the only user of this

computer? Are you the administrator?

 

Looking on the web, Norton Power Eraser may find and uninstall Webwatcher. They also list a large number of

files installed by Webwatcher. You may want to use it. But read the tutorial on its use FIRST!

 

WebWatcher Technical Details | Symantec

 

Norton Power Eraser Tutorials

 

Norton Power Eraser | Free Tool | Easily remove scamware that traditional virus scanning can’t detect.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss

A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”


#3 DuffDuff

DuffDuff
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:03 PM

Posted 23 September 2014 - 08:20 AM

I have Norton360. But my power eraser is out of date, When I try to download the newer version, a window pops and says something like, a program is stopping the newer download, contact your administrator. I am the administrator, and I cannot boot in safe mode????

#4 buddy215

buddy215

  • BC Advisor
  • 12,614 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:12:03 AM

Posted 23 September 2014 - 10:09 AM

Malware can block the download, installing and scanning of security programs. Download Rkill. There are several different file names/ aliases  in the link below. If one is blocked then try another.

RKill Download

 

RKill is a program that was developed at BleepingComputer.com that attempts to terminate known malware processes so that your normal security software can then run and clean your computer of infections. When RKill runs it will kill malware processes and then removes incorrect executable associations and fixes policies that stop us from using certain tools. When finished it will display a log file that shows the processes that were terminated while the program was running.

As RKill only terminates a program's running process, and does not delete any files, after running it you should not reboot your computer as any malware processes that are configured to start automatically will just be started again. Instead, after running RKill you should immediately scan your computer using some sort of anti-malware or anti-virus program so that the infections can be properly removed.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss

A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”


#5 DuffDuff

DuffDuff
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:03 PM

Posted 23 September 2014 - 04:35 PM

Thank You very much!!!

I will do as you've said, hopefully come out with a working clean computer.

If I were to re-set the computer to factory settings, will the malware stay attached?

#6 buddy215

buddy215

  • BC Advisor
  • 12,614 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:12:03 AM

Posted 23 September 2014 - 06:02 PM

If I were to re-set the computer to factory settings, will the malware stay attached?

 

No.....reformatting the drive and reinstalling will remove malware. You will lose whatever data, images, etc.

that you have not saved to other media than your hdd.

 

If you do decide to re-install, there is one website that hosts many popular programs that do not contain

adware that seems to be the norm these days. The site will perform updates for the programs you choose when needed.

Even updates for many popular programs attempt to install adware.

Ninite - Install or Update Multiple Apps at Once


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss

A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users