winwebsecurity????

fedupnow

This sort of pounced on us today.

It looked like a stripey bug thing in bottom bar - gone now - but it is still on my c drive and won't delete.

Malwarebytes antimalware tool finds nothing
cc cleaner finds nothing
avast finds nothing
comodo doesn't seem to mind - but I have blocked it

beginning to think it is supposed to be there.

please help

Browntoa

try combifix

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

you might find its brand new , in which case we may get you to upload it somewhere for analysis

Browntoa

then do a hijackthis log for me

http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

Reluctant_spender

Do you have anything is Add/remove in the Control Panel?

Browntoa

seems to have surfaced over the weekend according to the Prevx web site

http://www.prevx.com/filenames/406189711232039034-0/WINWEBSECURITY2EEXE.html

The filename WINWEBSECURITY.EXE was first seen on Nov 23 2008

Marty_J

Start in safe mode and try deleting it.

Reluctant_spender

I was just looking at that.

Might be worth uploading it to virustotal and Malwarebytes.

fedupnow

Thanks Browntoa

I am a bit of a coward though and it all looks so scarey. Can I try that prevx website tool first - seems more simple. I am terrified of wrecking everything.

How do I upload it to malwarebytes? I can find it on a search and can get the address but when I try exploring for it I can't find it. It won't drag across. Virustotal????

And no it isn't in the add/remove control panel.

I guess I am going to have to brave the combofix.

I'll have a crack later when I have more time

I can't believe we are one of the first!!! I'm never picked first for anything!!!

Browntoa

prevx will not remove it for free I'm afraid, combifix is worse than it looks

mel_mel

I had the same thing on mine WinWebSecurity,and a few others, I found it when I ran Spybot, I took them off but didn't delete them, just put them on hold to make sure they weren't needed for something (only because got this computer from my daughter and didn't know what they were). Then I ran scan next day with spybot, came up again and a few more, so deleted them. Never seen them since.

Reluctant_spender

This is a fairly new programme - if someone could post a Hijack log or combofix they it may be possible to upload the bad files to Malwarebytes and the like for future detections.