Malware

Viruses and worms
1

I have scanned with Avast numerous times and it doesn`t pick up anything,but when I scan with spy bot search and destroy I get MyWay.MyWebSearch as a threat,but even spybot sd. cannot get rid of it.How or what tools are out there to remove this threat?Please help .

2

Is there any infected file or just Windows registry keys?

I suggest:

  1. Clean your temporary files.
  2. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
  3. Use SUPERantispyware, MBAM or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete them. The first two could help you clean the Windows Registry also.
  4. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
  5. Make a HijackThis log to post here or this analysis site. Or even submit the RunScanner log to to on-line analysis.
  6. Disable System Restore and then reenable it again.
  7. Immunize your system with SpywareBlaster.
  8. Check if you have insecure applications with Secunia Software Inspector.
3

The MyWay.MyWebSearch stuff if a pain in the rear (adware), but not a security threat as such. However what is strange is that even after removal is is supposedly coming back and whilst this is common in some malware it is very uncommon in relation to MyWay.MyWebSearch.

This is now only the second time I have seen this and it is only earlier today that I said I had never seen it before, now we have a second one. See this post and topic, http://forum.avast.com/index.php?topic=41695.msg350750#msg350750.

What the two of you seem to have in common is S&D which is reporting MyWay.MyWebSearch, now in the other topic there was no reference in any of the 3 hijackthis logs for MyWay.MyWebSearch.

Several other anti-spyware/malware programs (the first two of line 3 and all those on line 4) were run and none of them reported anything on MyWay.MyWebSearch, so I’m getting to the point of saying this might be a false positive in S&D.

What exactly was the complete text of the S&D detection ?

Is there anything in the quarantine/recovery area of S&D ?

4

Maybe they are MyWay.MyWebsearch cookies?

Install a HOSTS file to block them.

See:
Blocking Unwanted Parasites with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm

5

Perhaps, but there was no mention of that and I don’t know if S&D actually looks for cookies.

6

That’s one of the reasons I do not use Spybot S&D anymore as that was the only things it found after the l o n g scan.

7

Thanks, it is a very long time since I used S&D, gave up on it long before the introduction of the new version.

8

Hi folks,

I also gave up about S&D, but I still like what info there is on their forums. Recently I have returned to a-squared free. Number of FPs went down drastically , new scanner powered by Icarus. So the program underwent a complete overhaul. My cocktail for the moment consists of avast resident, then MBAM and SAS non-resident, TrendMicro’s RUBotted, ComodoBOClean, SpywareBlaster, SecuniaPSI. And this formula works for me, well I have some non-resident additional scanning set aside and a brew of in-browser scanning tools, like ClamWin, DrWeb’s CureIt, finjan, WOT, firekeeper, NoScript, ABP Malware list, Perspectives, RequestPolicy and FoxBeacon, which are all Fx and Flock browser add-ons/extensions. Then a couple of forensic proggies to top it off, that is all, folks,

pol