Ad: Manage updates with the Download App
ie8 fix

Windows Live forum: TROJAN:Win32/Winwebsec-Looks like official Windows Security

by: Susie Senior June 23, 2009 9:13 AM PDT

Like this

0 people like this thread

Staff pick

TROJAN:Win32/Winwebsec-Looks like official Windows Security

by Susie Senior - 6/23/09 9:13 AM

I accidently became a sucker and reacted to a pop up "Security Warning"that looked like an official Windows security warning. I've tried downloading Microsoft Malaware yesterday, though it identified the virus it could not remove it. The suggestion was to try and find another virus detection program. I already have Zone Labs, Zone Alarm Security Suite, and it has not been able to detect it. It is very invasive and keeps popping up with a Security warning window about every 3 minutes. How can I get rid of this thing?


Reply
Report offensive post
Email to friend

I'll advise you to try the following programns

by xxmuppetxx - 6/26/09 5:15 AM

In Reply to: TROJAN:Win32/Winwebsec-Looks like official Windows Security by Susie Senior

Firstly there's Malwarebytes' Anti-Malware which tends to be one of the best programns for this sort of issue...download it off the following link:
http://www.malwarebytes.org/mbam.php
The second one is super anti-spyware...ideally you should have both programns on your computer because they do work well together....a plus side is there both free and don't take too much space up...you can download it off the following link:
http://www.superantispyware.com/
scan you local disk with both programns and they should be able to get rid of it...I'll like to hear back from you if unsuccessful because there are a few other things to do...


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

Resolution to Trojan Rogue Virus

by Susie Senior - 6/28/09 2:18 PM

In Reply to: I'll advise you to try the following programns by xxmuppetxx

Well--Zone Alarm finally found it! I reset my preferances to a deep, complete system scan(8.5 hrs) and sure enough there it was. Thanks for any of you who responded.


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

Feedback on the steps to remove trojan in on my XP computer

by tkipperman - 3/8/11 6:53 PM

In Reply to: I'll advise you to try the following programns by xxmuppetxx

I followed your instructions to download both software programs. I ran them both and the problem is all set. Thank you very much!!!


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

Win32/Winwebsec removal

by glenda0seven - 9/26/09 2:26 PM

In Reply to: TROJAN:Win32/Winwebsec-Looks like official Windows Security by Susie Senior

I got a headsup from defender that this had gotten into computer. I have an antivirus but it had apparently been disabled. Defender said it had been removed....not so. This can appear in your program data file on C/ as a string of numbers.dll eg 2745311199.dll. You will probably find it in the computers start-up directory as a new addition. It will be stared up everytime you start the computer. I just went to program data and deleted it. I am not that computer savvy but I am nosey around my own computer and found that a backdoor virus had been put in too. Which among other things is a keylogger and can take over desktop etc. This was Tr/Crypt.xpack.gen. This was hidden inside something called ctfnon.exe a bogus file in the windows file. I only found this after I had uninstalled and re-installed a new version of my antivirus program. Done with great difficulty I might add because the trojan kept interfering with accessing the download of the new version. I had almost totally lost control of my computer. The scary thing is that on later checking with logs etc. is that microsoft was the only one doing things in my computer then and was downloading and doing updates even though all updates have been switched off and they are able to do this with internet wireless turned off. I have saved some of the logs and printed them out because it looks as if they have done this via defender.

Any thoughts?


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

READ THIS

by IHATEVIRUSESSOMUCH - 2/14/11 6:31 PM

In Reply to: Win32/Winwebsec removal by glenda0seven

Hey Susie,

I got this same virus the other day. AND I FIXED IT.

All you need to do is turn the computer off by Holding the Button, and then, on the reboot, when it asks you if you want to start windows normally, DO NOT. open it in safe mode. Also, disconnect the internet. Now, Search SYSTEM RESTORE and a wizard should pop up. it will guide you through the steps to restoring it to an earlier date. Now, this is important. Pick a date BEFORE YOU GOT THE VIRUS. it is better to pick a date a couple days before. now, click through to do the rest. It should take about 15-25 mins. Now, login normal. THen, go to windows security essentials from windows.com, and run a FULL SCAN. it should pop up as a severe thing, called WinWebSec (but you already knew that). Click the delete button, and then continue the scan. I am doing this right now, and it seems to be working. all my documents are still there, and the wallpaper is back to normal.

Hope this helped!!! Please tell me how it goes!!!


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

"Windows security" Virus

by Frustratedoflondon - 3/4/11 8:23 AM

In Reply to: READ THIS by IHATEVIRUSESSOMUCH

Glenda

I did exactly what you said yesterday and today it was back. You may need to run malwarebytes or spybot and see if it has really gone. It's more persistent than headlice!!!


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

still has folders

by yardbird.dana - 12/12/11 11:03 AM

In Reply to: "Windows security" Virus by Frustratedoflondon

I did a system restore and the folders are still there. You cant delete them because they are "running." Im not tech savvy enough to delete them... I changed the file that opens one of them to paint, dont know if that will work or not...


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

More Discussions

Forum Icon Legend

  • UnreadUnread
  • ReadRead
  • Locked threadLocked thread
  •   
  •   
  •   
  •   
  •   
  •   
  •   
  • ModeratorModerator
  • CNET StaffCNET Staff
  • Samsung StaffSamsung Staff
  • Norton Authorized Support TeamNorton Authorized Support Team
  • AVG StaffAVG Staff
  • avast! Staffavast! Staff
  • Webroot Support TeamWebroot Support Team
  • Acer Customer Experience TeamAcer Customer Experience Team
  • Windows Outreach TeamWindows Outreach Team
  • DISH staffDISH staff
  • Dell StaffDell Staff
  • Intel StaffIntel Staff
  • QuestionQuestion
  • Resolved questionResolved question
  • General discussionGeneral discussion
  • TipTip
  • Alert or warningAlert or warning
  • PraisePraise
  • RantRant

You are e-mailing the following post: Post Subject

Your e-mail address is used only to let the recipient know who sent the e-mail and in case of transmission error. Neither your address nor the recipient's address will be used for any other purpose.

Sorry, there was a problem emailing this post. Please try again.

Submit Email Cancel

Thank you. Sent email to

Close

Thank you. Sent email to

Close

You are reporting the following post: Post Subject

If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.

Offensive: Sexually explicit or offensive language

Spam: Advertisements or commercial links

Disruptive posting: Flaming or offending other users

Illegal activities: Promote cracked software, or other illegal content

Sorry, there was a problem submitting your post. Please try again.

Submit Report Cancel

Your message has been submitted and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.

Close

Your message has been submitted and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.

Close

You are posting a reply to: Post Subject

The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to the CNET Forums policies for details. All submitted content is subject to CBS Interactive Site Terms of Use.

You are currently tracking this discussion. Click here to manage your tracked discussions.

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

Sorry, there was a problem submitting your post. Please try again.

Sorry, there was a problem generating the preview. Please try again.

Duplicate posts are not allowed in the forums. Please edit your post and submit again.

Submit Reply Preview Cancel

Thank you, , your post has been submitted.

> Click here to view your post. > Manage your tracked discussions. > Track this discussion. Close

Thank you, , your post has been submitted and will appear on our site shortly.

Close