• Welcome to Tux Reports: Where Penguins Fly. We hope you find the topics varied, interesting, and worthy of your time. Please become a member and join in the discussions.

HELP - webwasher??

S

silverfever

Flightless Bird
I have no clue whats going on.

Yesterday, when I went onto my bank website, using IE (8 I think?) I have
windows vista - I was searching for general info, after I had logged in. But
a "Webwasher - Notification" page stopped me from looking at the webpage. So
I logged out of my online bank, and searched for the info again on the bank
search bar and the same thing happened. Notification reads:

Notification

Request Blocked by Proactive Scanning

Your request to URL "http://www.xxxxxxxx" has been blocked by Webwasher
Proactive Scanning. The request indicates that a potentially unwanted program
may be installed on your computer - please contact your administrator.
Name: McAfeeGW: Unwanted.MyWebSearch.gen!92
URL: "http:/www.xxxxxx" (I deleted url in this message for privacy)

McAfee isnt even installed on this laptop, or any virus protection for that
matter (so I know there is a risk for virus/spyware etc) I just want to
remove whatever it is.

I did a full scan using windows defender, which failed to find anything...
I have used the online banking many times without issue, until yesterday
I may have installed ActiveX recently for facebook games - if thats the
cause :/
Thanks :)
 
T

Tom Willett

Flightless Bird
Webwasher is a program itself that someone has installed on that computer.

"silverfever" <silverfever@discussions.microsoft.com> wrote in message
news:A25E39B1-2BFA-4989-8BF0-D042BC17CB4F@microsoft.com...
:I have no clue whats going on.
:
: Yesterday, when I went onto my bank website, using IE (8 I think?) I have
: windows vista - I was searching for general info, after I had logged in.
But
: a "Webwasher - Notification" page stopped me from looking at the webpage.
So
: I logged out of my online bank, and searched for the info again on the
bank
: search bar and the same thing happened. Notification reads:
:
: Notification
:
: Request Blocked by Proactive Scanning
:
: Your request to URL "http://www.xxxxxxxx" has been blocked by Webwasher
: Proactive Scanning. The request indicates that a potentially unwanted
program
: may be installed on your computer - please contact your administrator.
: Name: McAfeeGW: Unwanted.MyWebSearch.gen!92
: URL: "http:/www.xxxxxx" (I deleted url in this message for privacy)
:
: McAfee isnt even installed on this laptop, or any virus protection for
that
: matter (so I know there is a risk for virus/spyware etc) I just want to
: remove whatever it is.
:
: I did a full scan using windows defender, which failed to find anything...
: I have used the online banking many times without issue, until yesterday
: I may have installed ActiveX recently for facebook games - if thats the
: cause :/
: Thanks :)
:
:
 
D

Dan

Flightless Bird
"silverfever" <silverfever@discussions.microsoft.com> wrote in message
news:A25E39B1-2BFA-4989-8BF0-D042BC17CB4F@microsoft.com...
> I have no clue whats going on.
>
> Yesterday, when I went onto my bank website, using IE (8 I think?) I have
> windows vista - I was searching for general info, after I had logged in.
> But
> a "Webwasher - Notification" page stopped me from looking at the webpage.
> So
> I logged out of my online bank, and searched for the info again on the
> bank
> search bar and the same thing happened. Notification reads:
>
> Notification
>
> Request Blocked by Proactive Scanning
>
> Your request to URL "http://www.xxxxxxxx" has been blocked by Webwasher
> Proactive Scanning. The request indicates that a potentially unwanted
> program
> may be installed on your computer - please contact your administrator.
> Name: McAfeeGW: Unwanted.MyWebSearch.gen!92
> URL: "http:/www.xxxxxx" (I deleted url in this message for privacy)
>
> McAfee isnt even installed on this laptop, or any virus protection for
> that
> matter (so I know there is a risk for virus/spyware etc) I just want to
> remove whatever it is.


WebWasher is installed on that PC - and WebWasher is the old name for Mcafee
Web Gateway, hence the McafeeWG in the name.

>
> I did a full scan using windows defender, which failed to find anything...
> I have used the online banking many times without issue, until yesterday
> I may have installed ActiveX recently for facebook games - if thats the
> cause :/
> Thanks :)
>


A virus scanner won't pick this up - it's malware, not a virus. You have
MyWebSearch installed which is a well known piece of malware, it can be a
pain to remove although I can recommend Malwarebytes Anti-Malware which you
can download here:

http://download.cnet.com/Malwarebyt...4572.html?part=dl-10804572&subj=dl&tag=button

You only need the free version, download and install it and then run a full
scan and follow the instructions for removal when it finishes.

--
Dan
 
P

PA Bear [MS MVP]

Flightless Bird
McAfee has acquired Secure Computing and renamed the latter's Webwasher to
McAfee Web Gateway (McAfeeGW).

cf. http://www.securecomputing.com/ &
http://www.mcafee.com/us/enterprise/products/email_and_web_security/web/web_gateway.html


Tom Willett wrote:
> Webwasher is a program itself that someone has installed on that computer.
>
>> I have no clue whats going on.
>>
>> Yesterday, when I went onto my bank website, using IE (8 I think?) I have
>> windows vista - I was searching for general info, after I had logged in.
>> But a "Webwasher - Notification" page stopped me from looking at the
>> webpage. So I logged out of my online bank, and searched for the info
>> again on the bank search bar and the same thing happened. Notification
>> reads:
>>
>> Notification
>>
>> Request Blocked by Proactive Scanning
>>
>> Your request to URL "http://www.xxxxxxxx" has been blocked by Webwasher
>> Proactive Scanning. The request indicates that a potentially unwanted
>> program may be installed on your computer - please contact your
>> administrator. Name: McAfeeGW: Unwanted.MyWebSearch.gen!92
>> URL: "http:/www.xxxxxx" (I deleted url in this message for privacy)
>>
>> McAfee isnt even installed on this laptop, or any virus protection for
>> that
>> matter (so I know there is a risk for virus/spyware etc) I just want to
>> remove whatever it is.
>>
>> I did a full scan using windows defender, which failed to find
>> anything...
>> I have used the online banking many times without issue, until yesterday
>> I may have installed ActiveX recently for facebook games - if thats the
>> cause :/
>> Thanks :)
 
S

silverfever

Flightless Bird
"Dan" wrote:

>
> "silverfever" <silverfever@discussions.microsoft.com> wrote in message
> news:A25E39B1-2BFA-4989-8BF0-D042BC17CB4F@microsoft.com...
> > I have no clue whats going on.
> >
> > Yesterday, when I went onto my bank website, using IE (8 I think?) I have
> > windows vista - I was searching for general info, after I had logged in.
> > But
> > a "Webwasher - Notification" page stopped me from looking at the webpage.
> > So
> > I logged out of my online bank, and searched for the info again on the
> > bank
> > search bar and the same thing happened. Notification reads:
> >
> > Notification
> >
> > Request Blocked by Proactive Scanning
> >
> > Your request to URL "http://www.xxxxxxxx" has been blocked by Webwasher
> > Proactive Scanning. The request indicates that a potentially unwanted
> > program
> > may be installed on your computer - please contact your administrator.
> > Name: McAfeeGW: Unwanted.MyWebSearch.gen!92
> > URL: "http:/www.xxxxxx" (I deleted url in this message for privacy)
> >
> > McAfee isnt even installed on this laptop, or any virus protection for
> > that
> > matter (so I know there is a risk for virus/spyware etc) I just want to
> > remove whatever it is.

>
> WebWasher is installed on that PC - and WebWasher is the old name for Mcafee
> Web Gateway, hence the McafeeWG in the name.
>
> >
> > I did a full scan using windows defender, which failed to find anything...
> > I have used the online banking many times without issue, until yesterday
> > I may have installed ActiveX recently for facebook games - if thats the
> > cause :/
> > Thanks :)
> >

>
> A virus scanner won't pick this up - it's malware, not a virus. You have
> MyWebSearch installed which is a well known piece of malware, it can be a
> pain to remove although I can recommend Malwarebytes Anti-Malware which you
> can download here:
>
> http://download.cnet.com/Malwarebyt...4572.html?part=dl-10804572&subj=dl&tag=button
>
> You only need the free version, download and install it and then run a full
> scan and follow the instructions for removal when it finishes.
>
> --
> Dan
>
>



Thanks a lot :D its now showing me the web page - I really needed that scan
lol


Scan type: Full scan (C:/|)
Objects scanned: 270653
Time elapsed: 1 hour(s), 12 minute(s), 50 second(s)

Memory Processes Infected: 2
Memory Modules Infected: 5
Registry Keys Infected: 151
Registry Values Infected: 8
Registry Data Items Infected: 0
Folders Infected: 15
>

Thank you Dan!
 
P

PA Bear [MS MVP]

Flightless Bird
Always state your full Windows version (e.g., WinXP SP3; WinXP 64-bit SP2;
Vista SP1; Vista 64-bit SP2; Win7; Win7 64-bit) as well as your IE version
when posting in an IE-specific forum or newsgroup. Please do so in your next
reply.

What anti-virus application or security suite is installed and is your
subscription current? What anti-spyware applications (other than Defender)?
What third-party firewall (if any)?

Has a(another) Norton or McAfee application ever been installed on the
computer (e.g., a free-trial version that came preinstalled when you bought
it)?

~~~~~~~~~~~~~~~~~~~~~~~~~~~

Judging from your follow-up post, you are seeing the effects of a hijackware
infection!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1

Also available via the Consumer Security Support home page:
https://consumersecuritysupport.microsoft.com/

Otherwise...

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

2b. Vista or Win7=> Run this scan instead:
http://onecare.live.com/site/en-us/center/whatsnew.htm

3. Now run a thorough check for hijackware, including posting requested logs
in an appropriate forum, not here. DO NOT SKIP THIS STEP!!

Checking for/Help with Hijackware:
• http://mvps.org/winhelp2002/unwanted.htm
• http://inetexplorer.mvps.org/tshoot.html
• http://www.mvps.org/sramesh2k/Malware_Defence.htm
• http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.

--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002


silverfever wrote:
> I have no clue whats going on.
>
> Yesterday, when I went onto my bank website, using IE (8 I think?) I have
> windows vista - I was searching for general info, after I had logged in.
> But a "Webwasher - Notification" page stopped me from looking at the
> webpage. So I logged out of my online bank, and searched for the info
> again
> on the bank search bar and the same thing happened. Notification reads:
>
> Notification
>
> Request Blocked by Proactive Scanning
>
> Your request to URL "http://www.xxxxxxxx" has been blocked by Webwasher
> Proactive Scanning. The request indicates that a potentially unwanted
> program may be installed on your computer - please contact your
> administrator.
> Name: McAfeeGW: Unwanted.MyWebSearch.gen!92
> URL: "http:/www.xxxxxx" (I deleted url in this message for privacy)
>
> McAfee isnt even installed on this laptop, or any virus protection for
> that
> matter (so I know there is a risk for virus/spyware etc) I just want to
> remove whatever it is.
>
> I did a full scan using windows defender, which failed to find anything...
> I have used the online banking many times without issue, until yesterday
> I may have installed ActiveX recently for facebook games - if thats the
> cause :/
> Thanks :)
 
S

silverfever

Flightless Bird
I said I had IE 8 and Windows Vista - If I still had problems, I would have
posted all the technical info.
It seems the Malwarebytes scan has removed a LOT of adware from
mywebsearch...I was trying to find mywebsearch in the system to remove it,
but havent found it yet.

Im sure there was a security application that came with the laptop but I had
searched and couldnt find what one - must have been McAfee judging by the
webwasher notification.
My husband deleted a bunch of stuff from this laptop, to make space. Its
falling apart, it has been taken apart and put back together by us lol until
it finally breaks we will get a new one. So its not the life of the laptop I
was trying to save, it was the present usage I wanted.

I posted in this discussion group as I thought it was something to do with
IE so apologies if the outcome was malware which meant I posted in the wrong
topic.

Thank you so much for all the info though, I will go through your links and
save them for future attacks - as I am sure there will be some :/ or when we
get a new laptop when hopefully we will have an unexpired security
application.

:eek:)


"PA Bear [MS MVP]" wrote:

> Always state your full Windows version (e.g., WinXP SP3; WinXP 64-bit SP2;
> Vista SP1; Vista 64-bit SP2; Win7; Win7 64-bit) as well as your IE version
> when posting in an IE-specific forum or newsgroup. Please do so in your next
> reply.
>
> What anti-virus application or security suite is installed and is your
> subscription current? What anti-spyware applications (other than Defender)?
> What third-party firewall (if any)?
>
> Has a(another) Norton or McAfee application ever been installed on the
> computer (e.g., a free-trial version that came preinstalled when you bought
> it)?
>
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
> Judging from your follow-up post, you are seeing the effects of a hijackware
> infection!
>
> NB: If you had no anti-virus application installed or the subscription had
> expired *when the machine first got infected* and/or your subscription has
> since expired and/or the machine's not been kept fully-patched at Windows
> Update, don't waste your time with any of the below: Format & reinstall
> Windows. A Repair Install will NOT help!
>
> Microsoft PCSafety provides home users (only) with no-charge support in
> dealing with malware infections such as viruses, spyware (including unwanted
> software), and adware.
> https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1
>
> Also available via the Consumer Security Support home page:
> https://consumersecuritysupport.microsoft.com/
>
> Otherwise...
>
> 1. See if you can download/run the MSRT manually:
> http://www.microsoft.com/security/malwareremove/default.mspx
>
> NB: Run the FULL scan, not the QUICK scan! You may need to download the
> MSRT on a non-infected machine, then transfer MRT.EXE to the infected
> machine and rename it to SCAN.EXE before running it.
>
> 2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
> in Safe Mode with Networking, if need be:
> http://onecare.live.com/site/en-us/center/howsafe.htm
>
> 2b. Vista or Win7=> Run this scan instead:
> http://onecare.live.com/site/en-us/center/whatsnew.htm
>
> 3. Now run a thorough check for hijackware, including posting requested logs
> in an appropriate forum, not here. DO NOT SKIP THIS STEP!!
>
> Checking for/Help with Hijackware:
> • http://mvps.org/winhelp2002/unwanted.htm
> • http://inetexplorer.mvps.org/tshoot.html
> • http://www.mvps.org/sramesh2k/Malware_Defence.htm
> • http://www.elephantboycomputers.com/page2.html#Removing_Malware
>
> **Chances are you will need to seek expert assistance in
> http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
> http://www.spywarewarrior.com/viewforum.php?f=5,
> http://www.dslreports.com/forum/cleanup,
> http://www.bluetack.co.uk/forums/index.php,
> http://aumha.net/viewforum.php?f=30 or other appropriate forums.**
>
> If these procedures look too complex - and there is no shame in admitting
> this isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
>
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Client - since 2002
>
>
> silverfever wrote:
> > I have no clue whats going on.
> >
> > Yesterday, when I went onto my bank website, using IE (8 I think?) I have
> > windows vista - I was searching for general info, after I had logged in.
> > But a "Webwasher - Notification" page stopped me from looking at the
> > webpage. So I logged out of my online bank, and searched for the info
> > again
> > on the bank search bar and the same thing happened. Notification reads:
> >
> > Notification
> >
> > Request Blocked by Proactive Scanning
> >
> > Your request to URL "http://www.xxxxxxxx" has been blocked by Webwasher
> > Proactive Scanning. The request indicates that a potentially unwanted
> > program may be installed on your computer - please contact your
> > administrator.
> > Name: McAfeeGW: Unwanted.MyWebSearch.gen!92
> > URL: "http:/www.xxxxxx" (I deleted url in this message for privacy)
> >
> > McAfee isnt even installed on this laptop, or any virus protection for
> > that
> > matter (so I know there is a risk for virus/spyware etc) I just want to
> > remove whatever it is.
> >
> > I did a full scan using windows defender, which failed to find anything...
> > I have used the online banking many times without issue, until yesterday
> > I may have installed ActiveX recently for facebook games - if thats the
> > cause :/
> > Thanks :)

>
> .
>
 
S

silverfever

Flightless Bird
BTW Robear sounds like its Irish for Robert (the Irish translation is spelt
Roibeard though and I think the d is pronounced softly) :)


"PA Bear [MS MVP]" wrote:

> Always state your full Windows version (e.g., WinXP SP3; WinXP 64-bit SP2;
> Vista SP1; Vista 64-bit SP2; Win7; Win7 64-bit) as well as your IE version
> when posting in an IE-specific forum or newsgroup. Please do so in your next
> reply.
>
> What anti-virus application or security suite is installed and is your
> subscription current? What anti-spyware applications (other than Defender)?
> What third-party firewall (if any)?
>
> Has a(another) Norton or McAfee application ever been installed on the
> computer (e.g., a free-trial version that came preinstalled when you bought
> it)?
>
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
> Judging from your follow-up post, you are seeing the effects of a hijackware
> infection!
>
> NB: If you had no anti-virus application installed or the subscription had
> expired *when the machine first got infected* and/or your subscription has
> since expired and/or the machine's not been kept fully-patched at Windows
> Update, don't waste your time with any of the below: Format & reinstall
> Windows. A Repair Install will NOT help!
>
> Microsoft PCSafety provides home users (only) with no-charge support in
> dealing with malware infections such as viruses, spyware (including unwanted
> software), and adware.
> https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1
>
> Also available via the Consumer Security Support home page:
> https://consumersecuritysupport.microsoft.com/
>
> Otherwise...
>
> 1. See if you can download/run the MSRT manually:
> http://www.microsoft.com/security/malwareremove/default.mspx
>
> NB: Run the FULL scan, not the QUICK scan! You may need to download the
> MSRT on a non-infected machine, then transfer MRT.EXE to the infected
> machine and rename it to SCAN.EXE before running it.
>
> 2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
> in Safe Mode with Networking, if need be:
> http://onecare.live.com/site/en-us/center/howsafe.htm
>
> 2b. Vista or Win7=> Run this scan instead:
> http://onecare.live.com/site/en-us/center/whatsnew.htm
>
> 3. Now run a thorough check for hijackware, including posting requested logs
> in an appropriate forum, not here. DO NOT SKIP THIS STEP!!
>
> Checking for/Help with Hijackware:
> • http://mvps.org/winhelp2002/unwanted.htm
> • http://inetexplorer.mvps.org/tshoot.html
> • http://www.mvps.org/sramesh2k/Malware_Defence.htm
> • http://www.elephantboycomputers.com/page2.html#Removing_Malware
>
> **Chances are you will need to seek expert assistance in
> http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
> http://www.spywarewarrior.com/viewforum.php?f=5,
> http://www.dslreports.com/forum/cleanup,
> http://www.bluetack.co.uk/forums/index.php,
> http://aumha.net/viewforum.php?f=30 or other appropriate forums.**
>
> If these procedures look too complex - and there is no shame in admitting
> this isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
>
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Client - since 2002
>
>
> silverfever wrote:
> > I have no clue whats going on.
> >
> > Yesterday, when I went onto my bank website, using IE (8 I think?) I have
> > windows vista - I was searching for general info, after I had logged in.
> > But a "Webwasher - Notification" page stopped me from looking at the
> > webpage. So I logged out of my online bank, and searched for the info
> > again
> > on the bank search bar and the same thing happened. Notification reads:
> >
> > Notification
> >
> > Request Blocked by Proactive Scanning
> >
> > Your request to URL "http://www.xxxxxxxx" has been blocked by Webwasher
> > Proactive Scanning. The request indicates that a potentially unwanted
> > program may be installed on your computer - please contact your
> > administrator.
> > Name: McAfeeGW: Unwanted.MyWebSearch.gen!92
> > URL: "http:/www.xxxxxx" (I deleted url in this message for privacy)
> >
> > McAfee isnt even installed on this laptop, or any virus protection for
> > that
> > matter (so I know there is a risk for virus/spyware etc) I just want to
> > remove whatever it is.
> >
> > I did a full scan using windows defender, which failed to find anything...
> > I have used the online banking many times without issue, until yesterday
> > I may have installed ActiveX recently for facebook games - if thats the
> > cause :/
> > Thanks :)

>
> .
>
 
P

PA Bear [MS MVP]

Flightless Bird
Repost: What anti-virus application or security suite is installed and is
your subscription current?


silverfever wrote:
> I said I had IE 8 and Windows Vista - If I still had problems, I would
> have
> posted all the technical info.
> It seems the Malwarebytes scan has removed a LOT of adware from
> mywebsearch...I was trying to find mywebsearch in the system to remove it,
> but havent found it yet.
>
> Im sure there was a security application that came with the laptop but I
> had
> searched and couldnt find what one - must have been McAfee judging by the
> webwasher notification.
> My husband deleted a bunch of stuff from this laptop, to make space. Its
> falling apart, it has been taken apart and put back together by us lol
> until
> it finally breaks we will get a new one. So its not the life of the laptop
> I
> was trying to save, it was the present usage I wanted.
>
> I posted in this discussion group as I thought it was something to do with
> IE so apologies if the outcome was malware which meant I posted in the
> wrong
> topic.
>
> Thank you so much for all the info though, I will go through your links
> and
> save them for future attacks - as I am sure there will be some :/ or when
> we
> get a new laptop when hopefully we will have an unexpired security
> application.
>
>> o)

>
>
> "PA Bear [MS MVP]" wrote:
>
>> Always state your full Windows version (e.g., WinXP SP3; WinXP 64-bit
>> SP2;
>> Vista SP1; Vista 64-bit SP2; Win7; Win7 64-bit) as well as your IE
>> version
>> when posting in an IE-specific forum or newsgroup. Please do so in your
>> next reply.
>>
>> What anti-virus application or security suite is installed and is your
>> subscription current? What anti-spyware applications (other than
>> Defender)? What third-party firewall (if any)?
>>
>> Has a(another) Norton or McAfee application ever been installed on the
>> computer (e.g., a free-trial version that came preinstalled when you
>> bought
>> it)?
>>
>> ~~~~~~~~~~~~~~~~~~~~~~~~~~~
>>
>> Judging from your follow-up post, you are seeing the effects of a
>> hijackware infection!
>>
>> NB: If you had no anti-virus application installed or the subscription
>> had
>> expired *when the machine first got infected* and/or your subscription
>> has
>> since expired and/or the machine's not been kept fully-patched at Windows
>> Update, don't waste your time with any of the below: Format & reinstall
>> Windows. A Repair Install will NOT help!
>>
>> Microsoft PCSafety provides home users (only) with no-charge support in
>> dealing with malware infections such as viruses, spyware (including
>> unwanted software), and adware.
>> https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1
>>
>> Also available via the Consumer Security Support home page:
>> https://consumersecuritysupport.microsoft.com/
>>
>> Otherwise...
>>
>> 1. See if you can download/run the MSRT manually:
>> http://www.microsoft.com/security/malwareremove/default.mspx
>>
>> NB: Run the FULL scan, not the QUICK scan! You may need to download the
>> MSRT on a non-infected machine, then transfer MRT.EXE to the infected
>> machine and rename it to SCAN.EXE before running it.
>>
>> 2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan
>> (only!)
>> in Safe Mode with Networking, if need be:
>> http://onecare.live.com/site/en-us/center/howsafe.htm
>>
>> 2b. Vista or Win7=> Run this scan instead:
>> http://onecare.live.com/site/en-us/center/whatsnew.htm
>>
>> 3. Now run a thorough check for hijackware, including posting requested
>> logs in an appropriate forum, not here. DO NOT SKIP THIS STEP!!
>>
>> Checking for/Help with Hijackware:
>> • http://mvps.org/winhelp2002/unwanted.htm
>> • http://inetexplorer.mvps.org/tshoot.html
>> • http://www.mvps.org/sramesh2k/Malware_Defence.htm
>> • http://www.elephantboycomputers.com/page2.html#Removing_Malware
>>
>> **Chances are you will need to seek expert assistance in
>> http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
>> http://www.spywarewarrior.com/viewforum.php?f=5,
>> http://www.dslreports.com/forum/cleanup,
>> http://www.bluetack.co.uk/forums/index.php,
>> http://aumha.net/viewforum.php?f=30 or other appropriate forums.**
>>
>> If these procedures look too complex - and there is no shame in admitting
>> this isn't your cup of tea - take the machine to a local, reputable and
>> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair
>> shop.
>>
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Client - since 2002
>>
>>
>> silverfever wrote:
>>> I have no clue whats going on.
>>>
>>> Yesterday, when I went onto my bank website, using IE (8 I think?) I
>>> have
>>> windows vista - I was searching for general info, after I had logged in.
>>> But a "Webwasher - Notification" page stopped me from looking at the
>>> webpage. So I logged out of my online bank, and searched for the info
>>> again
>>> on the bank search bar and the same thing happened. Notification reads:
>>>
>>> Notification
>>>
>>> Request Blocked by Proactive Scanning
>>>
>>> Your request to URL "http://www.xxxxxxxx" has been blocked by Webwasher
>>> Proactive Scanning. The request indicates that a potentially unwanted
>>> program may be installed on your computer - please contact your
>>> administrator.
>>> Name: McAfeeGW: Unwanted.MyWebSearch.gen!92
>>> URL: "http:/www.xxxxxx" (I deleted url in this message for privacy)
>>>
>>> McAfee isnt even installed on this laptop, or any virus protection for
>>> that
>>> matter (so I know there is a risk for virus/spyware etc) I just want to
>>> remove whatever it is.
>>>
>>> I did a full scan using windows defender, which failed to find
>>> anything...
>>> I have used the online banking many times without issue, until yesterday
>>> I may have installed ActiveX recently for facebook games - if thats the
>>> cause :/
>>> Thanks :)

>>
>> .
 
T

Twayne

Flightless Bird
In news:A25E39B1-2BFA-4989-8BF0-D042BC17CB4F@microsoft.com,
silverfever <silverfever@discussions.microsoft.com> typed:
> I have no clue whats going on.
>
> Yesterday, when I went onto my bank website, using IE (8 I
> think?) I have windows vista - I was searching for general
> info, after I had logged in. But a "Webwasher -
> Notification" page stopped me from looking at the webpage.
> So I logged out of my online bank, and searched for the
> info again on the bank search bar and the same thing
> happened. Notification reads:
>
> Notification
>
> Request Blocked by Proactive Scanning
>
> Your request to URL "http://www.xxxxxxxx" has been blocked
> by Webwasher Proactive Scanning. The request indicates that
> a potentially unwanted program may be installed on your
> computer - please contact your administrator.
> Name: McAfeeGW: Unwanted.MyWebSearch.gen!92
> URL: "http:/www.xxxxxx" (I deleted url in this message for
> privacy)
>
> McAfee isnt even installed on this laptop, or any virus
> protection for that matter (so I know there is a risk for
> virus/spyware etc) I just want to remove whatever it is.
>
> I did a full scan using windows defender, which failed to
> find anything...
> I have used the online banking many times without issue,
> until yesterday
> I may have installed ActiveX recently for facebook games -
> if thats the cause :/
> Thanks :)


I started by trying to read the responses so far but they're a little obtuse
sometimes so decided to just answer as though they weren't there, so forgive
me if I'm repeating things.

The message is saying that McAfeeGW (a new version of plain McAfee) is
running on the bank's computer, not yours. It's also saying that in your
digital transaction, it is seeing something it doesn't like; specifically it
is saying that you have malware on your machine that might infect their
computers, steal your banking information, or worse. So rather than take a
chance on allowing that, they are forbidding your entry. It is NOT an
unusual policy; they need to be pretty strict about things.

Now: You say you have no anti-virus protection. THEN STOP ACCESSING PLACES
LIKE YOUR OWN BANKS!!!! Unless of course, you don't mind giving away all
your personal information, bank balances, and passwords. Since they think
you are infected, you aren't going to get access to their servers.
GET ANTIVIRUS SOFTWARE! Soon! It is folly to go on the internet without
it. Chances are excellent you're infected with multiple malwares and are
passing them on to other sites you visit and/or by e-mail.
Also get three or four spyware detectors to detect other malware that
antivirus programs can't or aren't good at detecting. Instead of a virus you
may be infected with more than one trojan, worm and other types of malware.
Windows Defender is OK, but it ONLY defends Microsoft products. It
doesn't really do very much for a computer overall, especially if it's all
you use. Adaware, Spybot Search & Destroy, AntiMalwareBytes and whatever
else you like; no single program can as yet do the complete job of
protecting you. Each has their own individual strengths and weaknesses, so
multiple programs should be used. Be sure every program is updated,
including AV, before you use it for scans, and do the deepest scans they
allow if there is a choice.
If those programs find something and can't remove it for you, aske here
for further advice. Be sure to include the exact error messages or
informational messages, if any, when you respond.
Another big item you didn't mention was a firewall. If you aren't running
a firewall, do so ASAP as well as getting an Anti-Virus Protection program
installed. There are excellent free and pay-for versions of both available
online that will work great for you. Being as unprotected as you are, I
find it mildly amusing that you can even get on the internet at all.
Feel free to post back with any questions you may have; we all have to
start someplace and there are folk here to help you along the way.

HTH,

Twayne`
 
Top