PDA

View Full Version : Webwatcher atww removal


freonr22
10-23-2009, 8:58 AM
Any thoughts on how to remove webwatcher atww? http://webwatchernow.com/

also was awareness technology

I can get into system32 cache? and delete the folder, but spybot s &d keeps finding it.

they will remove it for $80

ilbob
10-23-2009, 12:08 PM
do some googling

freonr22
10-23-2009, 12:14 PM
thanks i have

Dr Pete
10-23-2009, 12:45 PM
Couple of programs to try.
Bare in mind this program is listed at a "rootkit"

Freeware & other stuff that is real good:
Revo uninstaller Free and opensource (Might detect it and uninstall completely)
Malwarebytes
SUPERAntiSpyware (they have a free edition)
CrapCleaner (Freeware program that probably won't fix your problem but is a nice tool)
Last resort go here:
http://www.techsupportalert.com/best-free-rootkit-scanner-remover.htm
Be careful installing anything new especially from the gizmo site, they offer free stuff but I prefer getting directly from the source.
Use the page as information.

Post back if you have success or need more help.
Good luck

"Go slow you'll get farther ahead"

freonr22
10-23-2009, 1:14 PM
Thank you! I soo forgot to add, I have malwarebytes, ccleaner, spybot Search and destroy, microsoft security essentials, I also went to spybots forum, but didnt click well, tried the hijackthis and post, but the lag between resonses was too great

Dr Pete
10-23-2009, 1:37 PM
Ya some of those "bugs" can be hard to remove.
The revo uninstaller does a good job of seeing installed programs and removing the leftover stuff which is what is giving you troubles.

Another thought, try a GOOD anti-virus program.
I personally use NOD32 & Kaspersky are both top rated.

Removing the registry entries might work also, crap cleaner has the registry cleaner.

Last resort (I have done this)
C:Format :(
Back up your important stuff and reinstall!!
Sometimes it's faster and you know it's clean.

freonr22
10-26-2009, 1:15 PM
36225

by the way I know where it is, just when I delete that folder, it comes back upon reboot

Super Spy
10-26-2009, 1:24 PM
+1 Revo
Used it before to get rid of a stubborn root kit and it worked well, did run it several times to get rid of all traces, run, boot, run, boot, until it stays clean......

freonr22
10-26-2009, 1:37 PM
revo doesnt pick it up unless im not doing it right? for unistaller anyways, when I click hunter mode, it was going to microsoft essentials, i turned realtime protection off and now when I click hunter mode it closes....btw xp pro sp3

freonr22
10-26-2009, 1:45 PM
36226 notice the nomenclature on the right??

freonr22
10-27-2009, 3:15 PM
eee
ttt

SmokinMr2
10-27-2009, 4:19 PM
Rootkits are nasty...

Here's a few tools. You will need to remove the rootkit first or the files/directories will keep coming back :(

http://download.cnet.com/AVG-Anti-Rootkit-Free/3000-8022_4-10662685.html

Here's a link with a big list.
http://www.antirootkit.com/software/index.htm
There are download links. Make sure you only download stuff from the creator's site ;)

Dr Pete
10-27-2009, 6:06 PM
Take a look at this forum.
Do your searching and post, someone will help you.http://forums.whatthetech.com/Infections_Removal_f27.html

Macadelic4
10-29-2009, 1:54 AM
Oh, the joys of DBAN (http://www.dban.org/) holocaust, for those times when the process of conventional ethnic rootkit cleansing is too tedious.

I bet those WebWatcher guys never thought of the "atomic option" when claiming nothing could beat them. Remember to back everything up first or your precious files will become little more than shadows on the pavement from the DOD-level wipe.

freonr22
10-29-2009, 8:52 AM
Thank you guys, I will be working on it this weekend. wouldnt backing up somehow include the atww? and the dban (ill do some reading) wipe ie format everything?

Dr Pete
10-29-2009, 9:17 AM
If you just back up your data then wipe hard drive you will be OK.
I would sure write this co a real Nasty letter. Looks like they have enough bad reviews. Sorry you got screwed by them.
Just go through your list of things to back up.
E-mail
Browser bookmarks
Any picture and downloads you want to save.
Any other data files you need.
Take your time and back up only your data that you need or use.
Then format and reinstall o/s
I do know the people on the hijack site will be able to help, just might take a day or so plus you sending them your log files of whats running.
Your choice, if me I backup and format.
Good luck, let us know how you work things out.

ThomasThompson
11-15-2009, 3:41 AM
Any thoughts on how to remove webwatcher atww? http://webwatchernow.com/

also was awareness technology

I can get into system32 cache? and delete the folder, but spybot s &d keeps finding it.

they will remove it for $80

Dude,
FYI (in case you didn't already know) - Someone installed this program on your PC to monitor you. Here is what they installed to keep an eye on things:
http://www.awarenesstech.com/

BB63Squid
11-15-2009, 5:35 AM
Freon...

Looks as if you have a Keylogger installed. Some keyloggers are pretty simple and others quite complicated. One technique they use is to install into a non-descript directory which the installer creates (names). At boot the system will create the directory that you are seeing but the directory that spawns the whole process is an unknown.

The reason Webwatcher will delete it is that they have a backdoor I am betting. IMHO I would save yourself the grief and the lingering doubt and flatten the drive and re-install the OS. That way you know you have a clean system.

bg
11-15-2009, 7:01 AM
Can you go "run" and disable from starting up via msconfig ?
Or go in as Admin and hunt the root down and delete that way ?

If still having probs, take a visit here. They are helpful getting nasty
bugs out. Nice folks.

www.geekstogo.com
http://www.geekstogo.com/forum/forums.html

JDay
11-15-2009, 11:50 PM
Its a rootkit, you need to reinstall the OS... its the only way to be sure.