Help!
I'll attach the files showing that it won't disinfect instead moved to quarantine folder. I know it's alright if it was moved to quarantine folder. The problem is as I restart my computer, there is an "ERROR message box" that one of my module in C:\Program files\MyWebSearch\bar\3.bin\MWSBAR.DLL was lost or cannot be found. This was infected by Application.MWS. I restored this file already but as I rescan my PC it again moved to quarantine folder it won't disinfect. I already sent it to BitDefender Labs but still no disinfection occurs just moved to quarantine folder. What should I do? Will I delete the files on the quarantine folder? Will I delete the MyWebSearch folder in my C:\Program files? I already checked the virus in the internet http://www.bitdefender.com/VIRUS-1000148-en--Application.MWS.html. I'm still learning this stuff and I need your guidance.
Hoping for your reply. Thank You!
please see attached files: (You may scan it first to make sure that it has no threats.)
Comments
-
HELP0
-
Hello Fredriech Mutia,
MyWebSearch is usually a spyware. If you installed it, you know about it and you WANT it to be on your computer, then just restore all files back where they were and, on every scan, ignore that particular alert.
The file cannot be disinfected. Only a very small percentage of infected files can be really disinfected. Most of them have to be completely removed (deleted). This file is one of them: it cannot be disinfected, because it is the spyware itself.
If you have no idea how MyWebSearch got there, then that means you have to remove it. Go to Control Panel -> Add/Remove Programs and see if there's an entry there called something like MyWebSearch. If it is, uninstall it.
Also, please post here a HijackThis! log. It is the easiest way to clean this spyware (do NOT fix anything with HijackThis, unless you know what you're doing! You can easily break something).
Cris.
P.S.: I'll move this topic to a more appropriate section (Malware Talk). In that section, only BD Virus Analysts have access to attached files, so don't attach the HijackThis! log as a file (because I won't be able to access it). Instead, just copy it's content and paste it, as text, in your next post.0 -
THANKS!!!!
I think I'll have to restore the said file. Like you've said it is part of the MyWebSearch so I'll just ignore the said virus. Right? Please correct me if I am wrong.
I really don't know where and when I downloaded MyWebSearch but I think its useful (I'm not that sure). I don't know if I'll delete the program or not. But anyway, thanks so much.
Maybe I'll buy the BD v2008 as soon as my credit card arrives.THANKS AGAIN AND MORE POWER!0 -
I think I'll have to restore the said file. Like you've said it is part of the MyWebSearch so I'll just ignore the said virus. Right? Please correct me if I am wrong.
I really don't know where and when I downloaded MyWebSearch but I think its useful (I'm not that sure). I don't know if I'll delete the program or not. But anyway, thanks so much.
Umm...I think you didn't fully understand what I meant.
MyWebSearch is a spyware. It is used to track everything you do on web (what pages you visit, what you download, etc...).
There's a chance that it's used for bad reasons (like traking down what pages you visit, and stealing private information about you...because it can capture everything you type on web-forms).
Also, there is a chance that it is used for good reasons (e.g it's used by a particular application for...I don't know...to gather information that will help the developer improve the application).
But, even if this is the case, it's still a violation of privacy if you didn't agree to run this spyware on your PC. (and because you say you have no idea where it came from, I understand you didn't agree with it's installation).
As I said, it's your choice if you remove it or not. But one thing's for sure: it doesn't help YOU. (the best case scenario: you help someone else to improve something. The worst case scenario: you help someone else to invade your privacy).
Cris.0
