Hi All, I came in to work this morning to find my Bosses home PC on the floor of my office? So I asked him what he had done he said on the weekend his PC popedup up the old msantispywhere saying it was out of date so the clicked a link in the message and it took him to microsoft site (he says )then he clicked this link there that said recommended antispyware this took him to WinAnitSpyware site which he purchased downloaded and installed.

Is this program spyware? I did a google search and a lot of sites are saying it is and there website link in google said This Site May Harm Your Computer!. I think it maybe spyware but I havn't heard of the program before. Please Help

Hey Madd,

Can you run the drill on this please, (PreWork in my signature), if he has that one, chances are he has more, post back with the logs, and we'll take a look.

Looking forward to your reply,

TTFN

LGW

*butts in*
Yup, I myself have aquired this one on my laptop, it's easy enough to remove...but it has different levels of infection.

One of our clients computers got hit, and it put a block between the network card, and the internet...so it detected the card was plugged in, and it was connected...but wouldn't let anything in or out...

very tricky indeed

*back to LGW*

Hi my PCHF buddies , Did the standard prepwork as I normaly would since I was shown it in this forum it has been very usefull. It has appears to have removed all of the spyware I'm runniing a final scan now. I have attached the hijack this log to look at. Thanks Guy's

hijack this log opps!

Also just to get this clear so it duz seem to be spywhere but he did pay for the download is this sound right is this what is happening to other users? I'll show you the invoice so you know what I'm talking about. Don't use theses links

Thank you for purchase!
Congratulation


You've successfully bought your copy of product(s).
Your Order ID:
4179425
Product:
WinAntiSpyware 2007 + DriveCleaner
Quantity:
1 item(s)
Charged amount:
AU$49.46
Billed as:
virussw.com 8007555909
Order date:
2007-03-31 19:33:29

Download Links


Remember! Your computer is not secure unless software is downloaded and instalation is completed! Please, download and open file(s) below and follow the installatio hints:
Install now:
WinAntiSpyware 2007
FAQ:
http://winantispyware.com/members/2007/faq.html
Installation Guide:
http://winantispyware.com/members/2007/member_guide1.html
Install now:
DriveCleaner

FAQ:
http://drivecleaner.com/members/2006/faq.html
Installation Guide:
http://drivecleaner.com/members/2006/guide.html

Shipping of a product CD is not available with this offer.
Members Area


Now you have acces to Member's Area where you always may find up-to-date versions of the product, installation steps and contact information.
For product:
WinAntiSpyware 2007
URL:
http://www.winantispyware.com/members/login.html
Login:
@telfords.com.au
Password:
pw5122pw


For product:
DriveCleaner
URL:
http://www.drivecleaner.com/members/
Login:
@telfords.com.au
Password:
pw5122pw


Customer Support


For any assistance please contact our Customer Support:
E-mail:
support@winantispyware.com
Toll-Free:
+1.(800) 755-5909 (USA) (24/7)
+1.(800) 889-5113 (Canada) (24/7)
Phone:
+1.(202) 904-2212


© 2006, WinAntiSpyware Inc.
Terms and Conditions
Privacy Policy
All trademarks are the property of their respective companies.







Chia: I edited out the hyperlinks to those rogue websites.

Attached Files

hijackthis.log (4.6 KB, 0 views)

Hey Guys,

@Madd Matt - Yup, people pay for bogus spyware software all of the time. Do your boss a favor, print him out a copy of PCHF Protect Your PC, and have him follow it. You would also do him a big favor by getting this junk off of his computer.

I'm going to need all three of the logs please. Just HJT doesn't give me all of the information that I need.

Looking forward to your reply,

TTFN

LGW