Spyware, viruses, & security forum: WinWeb Security

Hi. When I click on the link you gave me I get Internet Explorer cannot open. I cannot access web sites, it won't let me. Can I download the fix to another computer and then copy to a disk?

Hi, Thanks for all the help, but finally got it to download but it will not open.

Robyn/Marianna:

I encountered this problem on 12/22/2008 with one important difference. The purported 'product' was not named WinWeb, it was named System Security. Everything else (look, feel, list of alleged problem files, etc.) was the same.

When I booted the computer and System Security began its scan, I opened the Task Manager and noticed a file called 83314392.exe using a bunch of CPU resources. I searched for this file on my computer's hard drive and found a folder called 1372029626 containing the executable along with a few other files. The executable's icon matched System Security's logo and the folder's creation date was 12/22/2008. The search turned up another file as well located in file called 'PREFETCH.' I deleted both the folder (1372029626) and the other random file in PREFETCH and then rebooted. This solved the problem.

The interesting thing here is that the hacker has changed the name of the product from WinWeb to System Security and has buried the executable in an inconspicuous folder. The hacker will probably continue to change the name of the product so searching on the latest name will likely prove unhelpful. I am not sure how Spyware programs like the one referenced on bleepingcomputer.com will handle this. The key here is to run Task Manager whenever the rogue program is running to identify the name of the offending executable (by seeing which process is chewing up CPU resources), then search for that executable and delete the appropriate folder(s) and file(s).

Good luck everyone!

TK