1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

HELP - webwasher??

Discussion in 'Internet Explorer' started by silverfever, May 14, 2010.

  1. silverfever

    silverfever Flightless Bird

    I have no clue whats going on.

    Yesterday, when I went onto my bank website, using IE (8 I think?) I have
    windows vista - I was searching for general info, after I had logged in. But
    a "Webwasher - Notification" page stopped me from looking at the webpage. So
    I logged out of my online bank, and searched for the info again on the bank
    search bar and the same thing happened. Notification reads:

    Notification

    Request Blocked by Proactive Scanning

    Your request to URL "http://www.xxxxxxxx" has been blocked by Webwasher
    Proactive Scanning. The request indicates that a potentially unwanted program
    may be installed on your computer - please contact your administrator.
    Name: McAfeeGW: Unwanted.MyWebSearch.gen!92
    URL: "http:/www.xxxxxx" (I deleted url in this message for privacy)

    McAfee isnt even installed on this laptop, or any virus protection for that
    matter (so I know there is a risk for virus/spyware etc) I just want to
    remove whatever it is.

    I did a full scan using windows defender, which failed to find anything...
    I have used the online banking many times without issue, until yesterday
    I may have installed ActiveX recently for facebook games - if thats the
    cause :/
    Thanks :)
     
  2. Tom Willett

    Tom Willett Flightless Bird

    Webwasher is a program itself that someone has installed on that computer.

    "silverfever" <silverfever@discussions.microsoft.com> wrote in message
    news:A25E39B1-2BFA-4989-8BF0-D042BC17CB4F@microsoft.com...
    :I have no clue whats going on.
    :
    : Yesterday, when I went onto my bank website, using IE (8 I think?) I have
    : windows vista - I was searching for general info, after I had logged in.
    But
    : a "Webwasher - Notification" page stopped me from looking at the webpage.
    So
    : I logged out of my online bank, and searched for the info again on the
    bank
    : search bar and the same thing happened. Notification reads:
    :
    : Notification
    :
    : Request Blocked by Proactive Scanning
    :
    : Your request to URL "http://www.xxxxxxxx" has been blocked by Webwasher
    : Proactive Scanning. The request indicates that a potentially unwanted
    program
    : may be installed on your computer - please contact your administrator.
    : Name: McAfeeGW: Unwanted.MyWebSearch.gen!92
    : URL: "http:/www.xxxxxx" (I deleted url in this message for privacy)
    :
    : McAfee isnt even installed on this laptop, or any virus protection for
    that
    : matter (so I know there is a risk for virus/spyware etc) I just want to
    : remove whatever it is.
    :
    : I did a full scan using windows defender, which failed to find anything...
    : I have used the online banking many times without issue, until yesterday
    : I may have installed ActiveX recently for facebook games - if thats the
    : cause :/
    : Thanks :)
    :
    :
     
  3. Dan

    Dan Flightless Bird

    "silverfever" <silverfever@discussions.microsoft.com> wrote in message
    news:A25E39B1-2BFA-4989-8BF0-D042BC17CB4F@microsoft.com...
    > I have no clue whats going on.
    >
    > Yesterday, when I went onto my bank website, using IE (8 I think?) I have
    > windows vista - I was searching for general info, after I had logged in.
    > But
    > a "Webwasher - Notification" page stopped me from looking at the webpage.
    > So
    > I logged out of my online bank, and searched for the info again on the
    > bank
    > search bar and the same thing happened. Notification reads:
    >
    > Notification
    >
    > Request Blocked by Proactive Scanning
    >
    > Your request to URL "http://www.xxxxxxxx" has been blocked by Webwasher
    > Proactive Scanning. The request indicates that a potentially unwanted
    > program
    > may be installed on your computer - please contact your administrator.
    > Name: McAfeeGW: Unwanted.MyWebSearch.gen!92
    > URL: "http:/www.xxxxxx" (I deleted url in this message for privacy)
    >
    > McAfee isnt even installed on this laptop, or any virus protection for
    > that
    > matter (so I know there is a risk for virus/spyware etc) I just want to
    > remove whatever it is.


    WebWasher is installed on that PC - and WebWasher is the old name for Mcafee
    Web Gateway, hence the McafeeWG in the name.

    >
    > I did a full scan using windows defender, which failed to find anything...
    > I have used the online banking many times without issue, until yesterday
    > I may have installed ActiveX recently for facebook games - if thats the
    > cause :/
    > Thanks :)
    >


    A virus scanner won't pick this up - it's malware, not a virus. You have
    MyWebSearch installed which is a well known piece of malware, it can be a
    pain to remove although I can recommend Malwarebytes Anti-Malware which you
    can download here:

    http://download.cnet.com/Malwarebyt...4572.html?part=dl-10804572&subj=dl&tag=button

    You only need the free version, download and install it and then run a full
    scan and follow the instructions for removal when it finishes.

    --
    Dan
     
  4. PA Bear [MS MVP]

    PA Bear [MS MVP] Flightless Bird

    McAfee has acquired Secure Computing and renamed the latter's Webwasher to
    McAfee Web Gateway (McAfeeGW).

    cf. http://www.securecomputing.com/ &
    http://www.mcafee.com/us/enterprise/products/email_and_web_security/web/web_gateway.html


    Tom Willett wrote:
    > Webwasher is a program itself that someone has installed on that computer.
    >
    >> I have no clue whats going on.
    >>
    >> Yesterday, when I went onto my bank website, using IE (8 I think?) I have
    >> windows vista - I was searching for general info, after I had logged in.
    >> But a "Webwasher - Notification" page stopped me from looking at the
    >> webpage. So I logged out of my online bank, and searched for the info
    >> again on the bank search bar and the same thing happened. Notification
    >> reads:
    >>
    >> Notification
    >>
    >> Request Blocked by Proactive Scanning
    >>
    >> Your request to URL "http://www.xxxxxxxx" has been blocked by Webwasher
    >> Proactive Scanning. The request indicates that a potentially unwanted
    >> program may be installed on your computer - please contact your
    >> administrator. Name: McAfeeGW: Unwanted.MyWebSearch.gen!92
    >> URL: "http:/www.xxxxxx" (I deleted url in this message for privacy)
    >>
    >> McAfee isnt even installed on this laptop, or any virus protection for
    >> that
    >> matter (so I know there is a risk for virus/spyware etc) I just want to
    >> remove whatever it is.
    >>
    >> I did a full scan using windows defender, which failed to find
    >> anything...
    >> I have used the online banking many times without issue, until yesterday
    >> I may have installed ActiveX recently for facebook games - if thats the
    >> cause :/
    >> Thanks :)
     
  5. silverfever

    silverfever Flightless Bird

    "Dan" wrote:

    >
    > "silverfever" <silverfever@discussions.microsoft.com> wrote in message
    > news:A25E39B1-2BFA-4989-8BF0-D042BC17CB4F@microsoft.com...
    > > I have no clue whats going on.
    > >
    > > Yesterday, when I went onto my bank website, using IE (8 I think?) I have
    > > windows vista - I was searching for general info, after I had logged in.
    > > But
    > > a "Webwasher - Notification" page stopped me from looking at the webpage.
    > > So
    > > I logged out of my online bank, and searched for the info again on the
    > > bank
    > > search bar and the same thing happened. Notification reads:
    > >
    > > Notification
    > >
    > > Request Blocked by Proactive Scanning
    > >
    > > Your request to URL "http://www.xxxxxxxx" has been blocked by Webwasher
    > > Proactive Scanning. The request indicates that a potentially unwanted
    > > program
    > > may be installed on your computer - please contact your administrator.
    > > Name: McAfeeGW: Unwanted.MyWebSearch.gen!92
    > > URL: "http:/www.xxxxxx" (I deleted url in this message for privacy)
    > >
    > > McAfee isnt even installed on this laptop, or any virus protection for
    > > that
    > > matter (so I know there is a risk for virus/spyware etc) I just want to
    > > remove whatever it is.

    >
    > WebWasher is installed on that PC - and WebWasher is the old name for Mcafee
    > Web Gateway, hence the McafeeWG in the name.
    >
    > >
    > > I did a full scan using windows defender, which failed to find anything...
    > > I have used the online banking many times without issue, until yesterday
    > > I may have installed ActiveX recently for facebook games - if thats the
    > > cause :/
    > > Thanks :)
    > >

    >
    > A virus scanner won't pick this up - it's malware, not a virus. You have
    > MyWebSearch installed which is a well known piece of malware, it can be a
    > pain to remove although I can recommend Malwarebytes Anti-Malware which you
    > can download here:
    >
    > http://download.cnet.com/Malwarebyt...4572.html?part=dl-10804572&subj=dl&tag=button
    >
    > You only need the free version, download and install it and then run a full
    > scan and follow the instructions for removal when it finishes.
    >
    > --
    > Dan
    >
    >



    Thanks a lot :D its now showing me the web page - I really needed that scan
    lol


    Scan type: Full scan (C:/|)
    Objects scanned: 270653
    Time elapsed: 1 hour(s), 12 minute(s), 50 second(s)

    Memory Processes Infected: 2
    Memory Modules Infected: 5
    Registry Keys Infected: 151
    Registry Values Infected: 8
    Registry Data Items Infected: 0
    Folders Infected: 15
    >

    Thank you Dan!
     
  6. PA Bear [MS MVP]

    PA Bear [MS MVP] Flightless Bird

    Always state your full Windows version (e.g., WinXP SP3; WinXP 64-bit SP2;
    Vista SP1; Vista 64-bit SP2; Win7; Win7 64-bit) as well as your IE version
    when posting in an IE-specific forum or newsgroup. Please do so in your next
    reply.

    What anti-virus application or security suite is installed and is your
    subscription current? What anti-spyware applications (other than Defender)?
    What third-party firewall (if any)?

    Has a(another) Norton or McAfee application ever been installed on the
    computer (e.g., a free-trial version that came preinstalled when you bought
    it)?

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~

    Judging from your follow-up post, you are seeing the effects of a hijackware
    infection!

    NB: If you had no anti-virus application installed or the subscription had
    expired *when the machine first got infected* and/or your subscription has
    since expired and/or the machine's not been kept fully-patched at Windows
    Update, don't waste your time with any of the below: Format & reinstall
    Windows. A Repair Install will NOT help!

    Microsoft PCSafety provides home users (only) with no-charge support in
    dealing with malware infections such as viruses, spyware (including unwanted
    software), and adware.
    https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1

    Also available via the Consumer Security Support home page:
    https://consumersecuritysupport.microsoft.com/

    Otherwise...

    1. See if you can download/run the MSRT manually:
    http://www.microsoft.com/security/malwareremove/default.mspx

    NB: Run the FULL scan, not the QUICK scan! You may need to download the
    MSRT on a non-infected machine, then transfer MRT.EXE to the infected
    machine and rename it to SCAN.EXE before running it.

    2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
    in Safe Mode with Networking, if need be:
    http://onecare.live.com/site/en-us/center/howsafe.htm

    2b. Vista or Win7=> Run this scan instead:
    http://onecare.live.com/site/en-us/center/whatsnew.htm

    3. Now run a thorough check for hijackware, including posting requested logs
    in an appropriate forum, not here. DO NOT SKIP THIS STEP!!

    Checking for/Help with Hijackware:
    • http://mvps.org/winhelp2002/unwanted.htm
    • http://inetexplorer.mvps.org/tshoot.html
    • http://www.mvps.org/sramesh2k/Malware_Defence.htm
    • http://www.elephantboycomputers.com/page2.html#Removing_Malware

    **Chances are you will need to seek expert assistance in
    http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
    http://www.spywarewarrior.com/viewforum.php?f=5,
    http://www.dslreports.com/forum/cleanup,
    http://www.bluetack.co.uk/forums/index.php,
    http://aumha.net/viewforum.php?f=30 or other appropriate forums.**

    If these procedures look too complex - and there is no shame in admitting
    this isn't your cup of tea - take the machine to a local, reputable and
    independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.

    --
    ~Robear Dyer (PA Bear)
    MS MVP-IE, Mail, Security, Windows Client - since 2002


    silverfever wrote:
    > I have no clue whats going on.
    >
    > Yesterday, when I went onto my bank website, using IE (8 I think?) I have
    > windows vista - I was searching for general info, after I had logged in.
    > But a "Webwasher - Notification" page stopped me from looking at the
    > webpage. So I logged out of my online bank, and searched for the info
    > again
    > on the bank search bar and the same thing happened. Notification reads:
    >
    > Notification
    >
    > Request Blocked by Proactive Scanning
    >
    > Your request to URL "http://www.xxxxxxxx" has been blocked by Webwasher
    > Proactive Scanning. The request indicates that a potentially unwanted
    > program may be installed on your computer - please contact your
    > administrator.
    > Name: McAfeeGW: Unwanted.MyWebSearch.gen!92
    > URL: "http:/www.xxxxxx" (I deleted url in this message for privacy)
    >
    > McAfee isnt even installed on this laptop, or any virus protection for
    > that
    > matter (so I know there is a risk for virus/spyware etc) I just want to
    > remove whatever it is.
    >
    > I did a full scan using windows defender, which failed to find anything...
    > I have used the online banking many times without issue, until yesterday
    > I may have installed ActiveX recently for facebook games - if thats the
    > cause :/
    > Thanks :)
     
  7. silverfever

    silverfever Flightless Bird

    I said I had IE 8 and Windows Vista - If I still had problems, I would have
    posted all the technical info.
    It seems the Malwarebytes scan has removed a LOT of adware from
    mywebsearch...I was trying to find mywebsearch in the system to remove it,
    but havent found it yet.

    Im sure there was a security application that came with the laptop but I had
    searched and couldnt find what one - must have been McAfee judging by the
    webwasher notification.
    My husband deleted a bunch of stuff from this laptop, to make space. Its
    falling apart, it has been taken apart and put back together by us lol until
    it finally breaks we will get a new one. So its not the life of the laptop I
    was trying to save, it was the present usage I wanted.

    I posted in this discussion group as I thought it was something to do with
    IE so apologies if the outcome was malware which meant I posted in the wrong
    topic.

    Thank you so much for all the info though, I will go through your links and
    save them for future attacks - as I am sure there will be some :/ or when we
    get a new laptop when hopefully we will have an unexpired security
    application.

    :eek:)


    "PA Bear [MS MVP]" wrote:

    > Always state your full Windows version (e.g., WinXP SP3; WinXP 64-bit SP2;
    > Vista SP1; Vista 64-bit SP2; Win7; Win7 64-bit) as well as your IE version
    > when posting in an IE-specific forum or newsgroup. Please do so in your next
    > reply.
    >
    > What anti-virus application or security suite is installed and is your
    > subscription current? What anti-spyware applications (other than Defender)?
    > What third-party firewall (if any)?
    >
    > Has a(another) Norton or McAfee application ever been installed on the
    > computer (e.g., a free-trial version that came preinstalled when you bought
    > it)?
    >
    > ~~~~~~~~~~~~~~~~~~~~~~~~~~~
    >
    > Judging from your follow-up post, you are seeing the effects of a hijackware
    > infection!
    >
    > NB: If you had no anti-virus application installed or the subscription had
    > expired *when the machine first got infected* and/or your subscription has
    > since expired and/or the machine's not been kept fully-patched at Windows
    > Update, don't waste your time with any of the below: Format & reinstall
    > Windows. A Repair Install will NOT help!
    >
    > Microsoft PCSafety provides home users (only) with no-charge support in
    > dealing with malware infections such as viruses, spyware (including unwanted
    > software), and adware.
    > https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1
    >
    > Also available via the Consumer Security Support home page:
    > https://consumersecuritysupport.microsoft.com/
    >
    > Otherwise...
    >
    > 1. See if you can download/run the MSRT manually:
    > http://www.microsoft.com/security/malwareremove/default.mspx
    >
    > NB: Run the FULL scan, not the QUICK scan! You may need to download the
    > MSRT on a non-infected machine, then transfer MRT.EXE to the infected
    > machine and rename it to SCAN.EXE before running it.
    >
    > 2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
    > in Safe Mode with Networking, if need be:
    > http://onecare.live.com/site/en-us/center/howsafe.htm
    >
    > 2b. Vista or Win7=> Run this scan instead:
    > http://onecare.live.com/site/en-us/center/whatsnew.htm
    >
    > 3. Now run a thorough check for hijackware, including posting requested logs
    > in an appropriate forum, not here. DO NOT SKIP THIS STEP!!
    >
    > Checking for/Help with Hijackware:
    > • http://mvps.org/winhelp2002/unwanted.htm
    > • http://inetexplorer.mvps.org/tshoot.html
    > • http://www.mvps.org/sramesh2k/Malware_Defence.htm
    > • http://www.elephantboycomputers.com/page2.html#Removing_Malware
    >
    > **Chances are you will need to seek expert assistance in
    > http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
    > http://www.spywarewarrior.com/viewforum.php?f=5,
    > http://www.dslreports.com/forum/cleanup,
    > http://www.bluetack.co.uk/forums/index.php,
    > http://aumha.net/viewforum.php?f=30 or other appropriate forums.**
    >
    > If these procedures look too complex - and there is no shame in admitting
    > this isn't your cup of tea - take the machine to a local, reputable and
    > independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
    >
    > --
    > ~Robear Dyer (PA Bear)
    > MS MVP-IE, Mail, Security, Windows Client - since 2002
    >
    >
    > silverfever wrote:
    > > I have no clue whats going on.
    > >
    > > Yesterday, when I went onto my bank website, using IE (8 I think?) I have
    > > windows vista - I was searching for general info, after I had logged in.
    > > But a "Webwasher - Notification" page stopped me from looking at the
    > > webpage. So I logged out of my online bank, and searched for the info
    > > again
    > > on the bank search bar and the same thing happened. Notification reads:
    > >
    > > Notification
    > >
    > > Request Blocked by Proactive Scanning
    > >
    > > Your request to URL "http://www.xxxxxxxx" has been blocked by Webwasher
    > > Proactive Scanning. The request indicates that a potentially unwanted
    > > program may be installed on your computer - please contact your
    > > administrator.
    > > Name: McAfeeGW: Unwanted.MyWebSearch.gen!92
    > > URL: "http:/www.xxxxxx" (I deleted url in this message for privacy)
    > >
    > > McAfee isnt even installed on this laptop, or any virus protection for
    > > that
    > > matter (so I know there is a risk for virus/spyware etc) I just want to
    > > remove whatever it is.
    > >
    > > I did a full scan using windows defender, which failed to find anything...
    > > I have used the online banking many times without issue, until yesterday
    > > I may have installed ActiveX recently for facebook games - if thats the
    > > cause :/
    > > Thanks :)

    >
    > .
    >
     
  8. silverfever

    silverfever Flightless Bird

    BTW Robear sounds like its Irish for Robert (the Irish translation is spelt
    Roibeard though and I think the d is pronounced softly) :)


    "PA Bear [MS MVP]" wrote:

    > Always state your full Windows version (e.g., WinXP SP3; WinXP 64-bit SP2;
    > Vista SP1; Vista 64-bit SP2; Win7; Win7 64-bit) as well as your IE version
    > when posting in an IE-specific forum or newsgroup. Please do so in your next
    > reply.
    >
    > What anti-virus application or security suite is installed and is your
    > subscription current? What anti-spyware applications (other than Defender)?
    > What third-party firewall (if any)?
    >
    > Has a(another) Norton or McAfee application ever been installed on the
    > computer (e.g., a free-trial version that came preinstalled when you bought
    > it)?
    >
    > ~~~~~~~~~~~~~~~~~~~~~~~~~~~
    >
    > Judging from your follow-up post, you are seeing the effects of a hijackware
    > infection!
    >
    > NB: If you had no anti-virus application installed or the subscription had
    > expired *when the machine first got infected* and/or your subscription has
    > since expired and/or the machine's not been kept fully-patched at Windows
    > Update, don't waste your time with any of the below: Format & reinstall
    > Windows. A Repair Install will NOT help!
    >
    > Microsoft PCSafety provides home users (only) with no-charge support in
    > dealing with malware infections such as viruses, spyware (including unwanted
    > software), and adware.
    > https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1
    >
    > Also available via the Consumer Security Support home page:
    > https://consumersecuritysupport.microsoft.com/
    >
    > Otherwise...
    >
    > 1. See if you can download/run the MSRT manually:
    > http://www.microsoft.com/security/malwareremove/default.mspx
    >
    > NB: Run the FULL scan, not the QUICK scan! You may need to download the
    > MSRT on a non-infected machine, then transfer MRT.EXE to the infected
    > machine and rename it to SCAN.EXE before running it.
    >
    > 2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
    > in Safe Mode with Networking, if need be:
    > http://onecare.live.com/site/en-us/center/howsafe.htm
    >
    > 2b. Vista or Win7=> Run this scan instead:
    > http://onecare.live.com/site/en-us/center/whatsnew.htm
    >
    > 3. Now run a thorough check for hijackware, including posting requested logs
    > in an appropriate forum, not here. DO NOT SKIP THIS STEP!!
    >
    > Checking for/Help with Hijackware:
    > • http://mvps.org/winhelp2002/unwanted.htm
    > • http://inetexplorer.mvps.org/tshoot.html
    > • http://www.mvps.org/sramesh2k/Malware_Defence.htm
    > • http://www.elephantboycomputers.com/page2.html#Removing_Malware
    >
    > **Chances are you will need to seek expert assistance in
    > http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
    > http://www.spywarewarrior.com/viewforum.php?f=5,
    > http://www.dslreports.com/forum/cleanup,
    > http://www.bluetack.co.uk/forums/index.php,
    > http://aumha.net/viewforum.php?f=30 or other appropriate forums.**
    >
    > If these procedures look too complex - and there is no shame in admitting
    > this isn't your cup of tea - take the machine to a local, reputable and
    > independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
    >
    > --
    > ~Robear Dyer (PA Bear)
    > MS MVP-IE, Mail, Security, Windows Client - since 2002
    >
    >
    > silverfever wrote:
    > > I have no clue whats going on.
    > >
    > > Yesterday, when I went onto my bank website, using IE (8 I think?) I have
    > > windows vista - I was searching for general info, after I had logged in.
    > > But a "Webwasher - Notification" page stopped me from looking at the
    > > webpage. So I logged out of my online bank, and searched for the info
    > > again
    > > on the bank search bar and the same thing happened. Notification reads:
    > >
    > > Notification
    > >
    > > Request Blocked by Proactive Scanning
    > >
    > > Your request to URL "http://www.xxxxxxxx" has been blocked by Webwasher
    > > Proactive Scanning. The request indicates that a potentially unwanted
    > > program may be installed on your computer - please contact your
    > > administrator.
    > > Name: McAfeeGW: Unwanted.MyWebSearch.gen!92
    > > URL: "http:/www.xxxxxx" (I deleted url in this message for privacy)
    > >
    > > McAfee isnt even installed on this laptop, or any virus protection for
    > > that
    > > matter (so I know there is a risk for virus/spyware etc) I just want to
    > > remove whatever it is.
    > >
    > > I did a full scan using windows defender, which failed to find anything...
    > > I have used the online banking many times without issue, until yesterday
    > > I may have installed ActiveX recently for facebook games - if thats the
    > > cause :/
    > > Thanks :)

    >
    > .
    >
     
  9. PA Bear [MS MVP]

    PA Bear [MS MVP] Flightless Bird

    Repost: What anti-virus application or security suite is installed and is
    your subscription current?


    silverfever wrote:
    > I said I had IE 8 and Windows Vista - If I still had problems, I would
    > have
    > posted all the technical info.
    > It seems the Malwarebytes scan has removed a LOT of adware from
    > mywebsearch...I was trying to find mywebsearch in the system to remove it,
    > but havent found it yet.
    >
    > Im sure there was a security application that came with the laptop but I
    > had
    > searched and couldnt find what one - must have been McAfee judging by the
    > webwasher notification.
    > My husband deleted a bunch of stuff from this laptop, to make space. Its
    > falling apart, it has been taken apart and put back together by us lol
    > until
    > it finally breaks we will get a new one. So its not the life of the laptop
    > I
    > was trying to save, it was the present usage I wanted.
    >
    > I posted in this discussion group as I thought it was something to do with
    > IE so apologies if the outcome was malware which meant I posted in the
    > wrong
    > topic.
    >
    > Thank you so much for all the info though, I will go through your links
    > and
    > save them for future attacks - as I am sure there will be some :/ or when
    > we
    > get a new laptop when hopefully we will have an unexpired security
    > application.
    >
    >> o)

    >
    >
    > "PA Bear [MS MVP]" wrote:
    >
    >> Always state your full Windows version (e.g., WinXP SP3; WinXP 64-bit
    >> SP2;
    >> Vista SP1; Vista 64-bit SP2; Win7; Win7 64-bit) as well as your IE
    >> version
    >> when posting in an IE-specific forum or newsgroup. Please do so in your
    >> next reply.
    >>
    >> What anti-virus application or security suite is installed and is your
    >> subscription current? What anti-spyware applications (other than
    >> Defender)? What third-party firewall (if any)?
    >>
    >> Has a(another) Norton or McAfee application ever been installed on the
    >> computer (e.g., a free-trial version that came preinstalled when you
    >> bought
    >> it)?
    >>
    >> ~~~~~~~~~~~~~~~~~~~~~~~~~~~
    >>
    >> Judging from your follow-up post, you are seeing the effects of a
    >> hijackware infection!
    >>
    >> NB: If you had no anti-virus application installed or the subscription
    >> had
    >> expired *when the machine first got infected* and/or your subscription
    >> has
    >> since expired and/or the machine's not been kept fully-patched at Windows
    >> Update, don't waste your time with any of the below: Format & reinstall
    >> Windows. A Repair Install will NOT help!
    >>
    >> Microsoft PCSafety provides home users (only) with no-charge support in
    >> dealing with malware infections such as viruses, spyware (including
    >> unwanted software), and adware.
    >> https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1
    >>
    >> Also available via the Consumer Security Support home page:
    >> https://consumersecuritysupport.microsoft.com/
    >>
    >> Otherwise...
    >>
    >> 1. See if you can download/run the MSRT manually:
    >> http://www.microsoft.com/security/malwareremove/default.mspx
    >>
    >> NB: Run the FULL scan, not the QUICK scan! You may need to download the
    >> MSRT on a non-infected machine, then transfer MRT.EXE to the infected
    >> machine and rename it to SCAN.EXE before running it.
    >>
    >> 2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan
    >> (only!)
    >> in Safe Mode with Networking, if need be:
    >> http://onecare.live.com/site/en-us/center/howsafe.htm
    >>
    >> 2b. Vista or Win7=> Run this scan instead:
    >> http://onecare.live.com/site/en-us/center/whatsnew.htm
    >>
    >> 3. Now run a thorough check for hijackware, including posting requested
    >> logs in an appropriate forum, not here. DO NOT SKIP THIS STEP!!
    >>
    >> Checking for/Help with Hijackware:
    >> • http://mvps.org/winhelp2002/unwanted.htm
    >> • http://inetexplorer.mvps.org/tshoot.html
    >> • http://www.mvps.org/sramesh2k/Malware_Defence.htm
    >> • http://www.elephantboycomputers.com/page2.html#Removing_Malware
    >>
    >> **Chances are you will need to seek expert assistance in
    >> http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
    >> http://www.spywarewarrior.com/viewforum.php?f=5,
    >> http://www.dslreports.com/forum/cleanup,
    >> http://www.bluetack.co.uk/forums/index.php,
    >> http://aumha.net/viewforum.php?f=30 or other appropriate forums.**
    >>
    >> If these procedures look too complex - and there is no shame in admitting
    >> this isn't your cup of tea - take the machine to a local, reputable and
    >> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair
    >> shop.
    >>
    >> --
    >> ~Robear Dyer (PA Bear)
    >> MS MVP-IE, Mail, Security, Windows Client - since 2002
    >>
    >>
    >> silverfever wrote:
    >>> I have no clue whats going on.
    >>>
    >>> Yesterday, when I went onto my bank website, using IE (8 I think?) I
    >>> have
    >>> windows vista - I was searching for general info, after I had logged in.
    >>> But a "Webwasher - Notification" page stopped me from looking at the
    >>> webpage. So I logged out of my online bank, and searched for the info
    >>> again
    >>> on the bank search bar and the same thing happened. Notification reads:
    >>>
    >>> Notification
    >>>
    >>> Request Blocked by Proactive Scanning
    >>>
    >>> Your request to URL "http://www.xxxxxxxx" has been blocked by Webwasher
    >>> Proactive Scanning. The request indicates that a potentially unwanted
    >>> program may be installed on your computer - please contact your
    >>> administrator.
    >>> Name: McAfeeGW: Unwanted.MyWebSearch.gen!92
    >>> URL: "http:/www.xxxxxx" (I deleted url in this message for privacy)
    >>>
    >>> McAfee isnt even installed on this laptop, or any virus protection for
    >>> that
    >>> matter (so I know there is a risk for virus/spyware etc) I just want to
    >>> remove whatever it is.
    >>>
    >>> I did a full scan using windows defender, which failed to find
    >>> anything...
    >>> I have used the online banking many times without issue, until yesterday
    >>> I may have installed ActiveX recently for facebook games - if thats the
    >>> cause :/
    >>> Thanks :)

    >>
    >> .
     
  10. Twayne

    Twayne Flightless Bird

    In news:A25E39B1-2BFA-4989-8BF0-D042BC17CB4F@microsoft.com,
    silverfever <silverfever@discussions.microsoft.com> typed:
    > I have no clue whats going on.
    >
    > Yesterday, when I went onto my bank website, using IE (8 I
    > think?) I have windows vista - I was searching for general
    > info, after I had logged in. But a "Webwasher -
    > Notification" page stopped me from looking at the webpage.
    > So I logged out of my online bank, and searched for the
    > info again on the bank search bar and the same thing
    > happened. Notification reads:
    >
    > Notification
    >
    > Request Blocked by Proactive Scanning
    >
    > Your request to URL "http://www.xxxxxxxx" has been blocked
    > by Webwasher Proactive Scanning. The request indicates that
    > a potentially unwanted program may be installed on your
    > computer - please contact your administrator.
    > Name: McAfeeGW: Unwanted.MyWebSearch.gen!92
    > URL: "http:/www.xxxxxx" (I deleted url in this message for
    > privacy)
    >
    > McAfee isnt even installed on this laptop, or any virus
    > protection for that matter (so I know there is a risk for
    > virus/spyware etc) I just want to remove whatever it is.
    >
    > I did a full scan using windows defender, which failed to
    > find anything...
    > I have used the online banking many times without issue,
    > until yesterday
    > I may have installed ActiveX recently for facebook games -
    > if thats the cause :/
    > Thanks :)


    I started by trying to read the responses so far but they're a little obtuse
    sometimes so decided to just answer as though they weren't there, so forgive
    me if I'm repeating things.

    The message is saying that McAfeeGW (a new version of plain McAfee) is
    running on the bank's computer, not yours. It's also saying that in your
    digital transaction, it is seeing something it doesn't like; specifically it
    is saying that you have malware on your machine that might infect their
    computers, steal your banking information, or worse. So rather than take a
    chance on allowing that, they are forbidding your entry. It is NOT an
    unusual policy; they need to be pretty strict about things.

    Now: You say you have no anti-virus protection. THEN STOP ACCESSING PLACES
    LIKE YOUR OWN BANKS!!!! Unless of course, you don't mind giving away all
    your personal information, bank balances, and passwords. Since they think
    you are infected, you aren't going to get access to their servers.
    GET ANTIVIRUS SOFTWARE! Soon! It is folly to go on the internet without
    it. Chances are excellent you're infected with multiple malwares and are
    passing them on to other sites you visit and/or by e-mail.
    Also get three or four spyware detectors to detect other malware that
    antivirus programs can't or aren't good at detecting. Instead of a virus you
    may be infected with more than one trojan, worm and other types of malware.
    Windows Defender is OK, but it ONLY defends Microsoft products. It
    doesn't really do very much for a computer overall, especially if it's all
    you use. Adaware, Spybot Search & Destroy, AntiMalwareBytes and whatever
    else you like; no single program can as yet do the complete job of
    protecting you. Each has their own individual strengths and weaknesses, so
    multiple programs should be used. Be sure every program is updated,
    including AV, before you use it for scans, and do the deepest scans they
    allow if there is a choice.
    If those programs find something and can't remove it for you, aske here
    for further advice. Be sure to include the exact error messages or
    informational messages, if any, when you respond.
    Another big item you didn't mention was a firewall. If you aren't running
    a firewall, do so ASAP as well as getting an Anti-Virus Protection program
    installed. There are excellent free and pay-for versions of both available
    online that will work great for you. Being as unprotected as you are, I
    find it mildly amusing that you can even get on the internet at all.
    Feel free to post back with any questions you may have; we all have to
    start someplace and there are folk here to help you along the way.

    HTH,

    Twayne`
     

Share This Page