mywebsearch wowfx.dll and warning! spyware detected on your computer

I have a really strange spyware/adware/backdoor/trojan problem. The comp
was a
former Windowsme upgraded with winxp pro build 2600. A couple of days ago I
noticed everytime I
logged on I would get a msg "The application or DLL
c:\windows\system32\wowfx.dll is not a valid windows image. Please check
this against your installation diskette." I also notice for each startup
item or indeed for any program I run there is
this popup with not a valid windows image for the
named program.

I notice also that at the background when I load windows there is a msg that
says "Warning! spyware detected on your computer install an antivirus or
spyware
remover to clean your computer". I suspect this msg maybe the
trojan/backdoor/adware/virus. In my program files
there is a folder called mywebsearch, I also am unable to access my control
panel so I can uninstall whatever program I might have installed to
have caused this. I noticed the problems soon after installing panda
antivirus, first time I ran hijackthis it told me that the administrator
had disabled registry editing (except I am the only system admin, but didn't
create an administrator account called administrator when I installed winxp
pro
build 2600), it specifically says "Registry editing has been disabled by
your administrator",
and programs take an age to load if at all, most of the times, I get an RPC
call
error and the system reboots.

Each time I log in, I see a network connection is being attempted to various
sites by the spyware/adware/backdoor/trojan (however I and it is unable to
access the internet even with my isp user/pass).

Any help will be greatly appreciated.

"nospam" <nospam@nospam.com> wrote in message
news:FOxjk.53240$9I1.21751@newsfe16.ams2...
>I have a really strange spyware/adware/backdoor/trojan problem. The
>comp was a
> former Windowsme upgraded with winxp pro build 2600. A couple of days
> ago I noticed everytime I
> logged on I would get a msg "The application or DLL
> c:\windows\system32\wowfx.dll is not a valid windows image. Please
> check
> this against your installation diskette." I also notice for each
> startup item or indeed for any program I run there is
> this popup with not a valid windows image for the
> named program.
> I notice also that at the background when I load windows there is a
> msg that
> says "Warning! spyware detected on your computer install an antivirus
> or spyware
> remover to clean your computer". I suspect this msg maybe the
> trojan/backdoor/adware/virus. In my program files
> there is a folder called mywebsearch, I also am unable to access my
> control panel so I can uninstall whatever program I might have
> installed to
> have caused this. I noticed the problems soon after installing panda
> antivirus, first time I ran hijackthis it told me that the
> administrator
> had disabled registry editing (except I am the only system admin, but
> didn't
> create an administrator account called administrator when I installed
> winxp pro
> build 2600), it specifically says "Registry editing has been disabled
> by your administrator",
> and programs take an age to load if at all, most of the times, I get
> an RPC call
> error and the system reboots.
> Each time I log in, I see a network connection is being attempted to
> various
> sites by the spyware/adware/backdoor/trojan (however I and it is
> unable to
> access the internet even with my isp user/pass).
> Any help will be greatly appreciated.

You need *expert* help with this nasty...

Download and run HijackThis;
(http://www.trendsecure.com/portal/en...age=hijackthis)
Read this Tutorial *before* first use;
(http://www.bleepingcomputer.com/foru...howtutorial=42)
Once done > run HijackThis > save a scan log and post it to /any/ of the
following (expert) forums for analysis.
*Note, //registration// *is* required prior to posting a log.
- Not listed in any particular order -
(http://aumha.net/viewforum.php?f=30)
(http://forums.spywareinfo.com/index.php?&showforum=18)
(http://www.spywarewarrior.com/viewforum.php?f=5)
(http://www.bleepingcomputer.com/forums/forum22.html)
(http://www.dslreports.com/forum/cleanup)
(http://forum.malwareremoval.com/viewforum.php?f=11)
(http://www.cybertechhelp.com/forums/...splay.php?f=25)
(http://www.atribune.org/forums/index.php?showforum=9)
(http://www.geekstogo.com/forum/Malwa..._Here-f37.html)
(http://forums.spywareinfo.com/index.php?showforum=18)
(http://www.techmonkeys.co.uk/forums/viewforum.php?f=8)
(http://forum.networktechs.com/forumdisplay.php?f=130)
(http://forums.maddoktor2.com/index.php?showforum=17)
(http://forums.spywaretimes.com/index.php?showforum=2)
(http://www.bluetack.co.uk/forums/ind...?showforum=172)
(http://forums.techguy.org/f54-s.html)
(http://forums.tomcoyote.org/index.php?showforum=27)
(http://forums.subratam.org/index.php?showforum=7)
(http://www.5starsupport.com/ipboard/...p?showforum=18)

-jen

[computer_doc]

hi I am a computer tech I have been tracking this virus for about a year now its not the tool bar that is the virus. but when you search on the tool bar thats when you get spyware and viruses this what you can do if you still need help first I will need to know what kind of antivirus you have then send me an email at computerrepairks7517 @yahoo.com I will help you get the things you need to remove it :-)

computer_doc wrote:

> hi I am a computer tech

who needs to "buy some punctuation."

> computer_doc
> ------------------------------------------------------------------------
> computer_doc's Profile: http://forums.techarena.in/members/computer_doc.htm

Forum Info

Join Date: 04-11-2008 <-- today
Posts
Total Posts: 1 (1 posts per day)


This is not a web forum, doc. This is Usenet. Get a proper newsreader.
And check the date of the (ancient) post you replied to...

--
-bts
-Friends don't let friends drive Windows

On Tue, 4 Nov 2008 20:03:01 +0530, computer_doc
<computer_doc.3icwzb@DoNotSpam.com> wrote:

>
>hi I am a computer tech

<snip>

Lol.
I like your so-called "profile".
How old are you?

hi I am compooter user and speak much more better than you
i take english course at nite skool to lern haha


"computer_doc" <computer_doc.3icwzb@DoNotSpam.com> wrote in message
news:computer_doc.3icwzb@DoNotSpam.com...
>
> hi I am a computer tech I have been tracking this virus for about a year
> now its not the tool bar that is the virus. but when you search on the
> tool bar thats when you get spyware and viruses this what you can do if
> you still need help first I will need to know what kind of antivirus you
> have then send me an email at computerrepairks7517 @yahoo.com I
> will help you get the things you need to remove it :-)
>
>
> --
> computer_doc
> ------------------------------------------------------------------------
> computer_doc's Profile:
> http://forums.techarena.in/members/computer_doc.htm
> View this thread:
> http://forums.techarena.in/anonymity...am/1010918.htm
>
> http://forums.techarena.in
>

Beauregard T. Shagnasty wrote:

>This is not a web forum, doc. This is Usenet. Get a proper newsreader.
>And check the date of the (ancient) post you replied to...

Judging by the "forum" contents [1], it looks like they've bastardized
the entire Usenet into a keyword search. They appear to be taking any
post with a key word in the subject and then creating forums based on
a subsets of key words [2]. I don't know if they can inject an
original posts into the group, but it appears that they will inject
any posts made at the "forum" into Usenet groups. I wonder what the
crosspost limit is... ;-)

[1] http://forums.techarena.in/anonymity-privacy-spam/
[2] http://forums.techarena.in/computer-safety/

TINF

[computer_doc]

sorry unlike you people I have two jobs I am a senior tech /trainer so I dont always have time to play on the computer so if your going to say some thing then you need to email me thru my email
I am 20 years old and I have been working on computers for 5 years I have 17 certification so I probly know more than the people that replyed to my last post I will leave my email on my profile for those of you that want to talk to me

From: "computer_doc" <computer_doc.3imhfb@DoNotSpam.com>

| sorry unlike you people I have two jobs I am a senior tech /trainer so I dont always
| have time to play on the computer so if your going to say some thing then you need to
| email me thru my email
| I am 20 years old and I have been working on computers for 5 years I have 17
| certification so I probly know more than the people that replyed to my last post I will
| leave my email on my profile for those of you that want to talk to me --
| computer_doc

Your posting of information is unimpressive.
You said "I have been tracking this virus". It is NOT a virus.

I suggest two thinks.

Keep on learning. You have *much* to learn.

The second adds to the first in that you need to learn how to access Usenet properly.
Not through http://forums.techarena.in that acts as a front-end to usenet news groups but
using a news client accessing alt.privacy.spyware through your ISP or via a NSP.

BTW: I have more experience than you have been alive ! When I started accessing Usenet
you were still sucking your mama's tit.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

On Mon, 10 Nov 2008 00:16:42 +0530, computer_doc
<computer_doc.3imhfb@DoNotSpam.com> wrote:

>
>sorry unlike you people I have two jobs I am a senior tech

No one is perfect.
Keep the day jobs.

computer_doc wrote:

> From: computer_doc <computer_doc.3imhfb@DoNotSpam.com>
> Newsgroups: alt.privacy.spyware
> Subject: Re: mywebsearch wowfx.dll and warning! spyware detected on your computer
> Date: Mon, 10 Nov 2008 00:16:42 +0530
> Message-ID: <computer_doc.3imhfb@DoNotSpam.com>
> Organization: Computer Help - http://forums.techarena.in
> User-Agent: vBulletin USENET gateway
> X-Newsreader: vBulletin USENET gateway
> X-Originating-IP: 74.234.57.137

Are you Michael Niederer of Burlington, Vermont, who is the owner of the
domain name 'donotspam.com'? Or are you just abusing his domain?

http://tekrider.net/general/misctips.php#mung

> .. so if your going to say some thing then you need to email me thru
> my email

This is USENET. There are no profiles.

Or did you mean use: computerepairks7517@yahoo.com

repairks ? <lol>

> I am 20 years old

...old enough to be my grandbaby.

--
-bts
-Friends don't let friends drive Windows

In article <computer_doc.3imhfb@DoNotSpam.com>,
computer_doc.3imhfb@DoNotSpam.com says...
>
> sorry unlike you people I have two jobs I am a senior tech /trainer so I
> dont always have time to play on the computer so if your going to say
> some thing then you need to email me thru my email
> I am 20 years old and I have been working on computers for 5 years I
> have 17 certification so I probly know more than the people that replyed
> to my last post I will leave my email on my profile for those of you
> that want to talk to me

Maybe you need to get a Usenet certification as the standard in Usenet
is to NOT REPLY BY EMAIL.

Usenet is a generic medium for posting to a GROUP, it's not to specific
individuals, but the Subjects are how we communicate.

At 20, you're just a kid, and you need to learn to listen instead of
running your mouth.

Usenet is for open/non-private communications - if you post in usenet
then keep it in usenet.

--
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam999free@rrohio.com (remove 999 for proper email address)

In article <computer_doc.3imhfb@DoNotSpam.com>,
computer_doc.3imhfb@DoNotSpam.com says...
>
> sorry unlike you people I have two jobs I am a senior tech /trainer so I
> dont always have time to play on the computer so if your going to say
> some thing then you need to email me thru my email
> I am 20 years old and I have been working on computers for 5 years I
> have 17 certification so I probly know more than the people that replyed
> to my last post I will leave my email on my profile for those of you
> that want to talk to me
>

Impertinence is frequently the mark of the very young and
inexperienced. Many of the professionals whom we are privileged to have
posting to these groups have been working on real computers in the real
world since the dawn of the computing age.

It is almost always poor form in Usenet to ask that one be emailed. It
is at best presumptuous.

Profile? We ain't got no profiles. We don't need no profiles. We don't
need no stinken profiles!


--
James E. Morrow
Email to: jamesemorrow@email.com