whenu spyware

[chevy]

I cant get rid of the dam thing in my registry. I dl the microsoft spyware program hoping it would get rid of it , then I read somewhere that some spyware programs ignore the whenu bug because it's not on thier list...and wont be.
How can I get rid of this little pain.Iv'e quarantined it...tried to remove it.
I thought about giong in and manually removing it but I'm not sure what I'll mess up in the registry if I do.I was gonna shut off my system restore cause for some reason I cant do a system restore anyway.The save points are there...it just refuses to do it.Darn this computer is a mess :(
I have enclosed a pic of where 2 entries are in the registry...not sure if it's ok to shut off system restore and then manually remove these two...then search for the other?sorry pics are too small to see..

[rcdraft]

Checout Computer Associates for info on removing whenu, link http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453091138

[frostyone]

After Lavasoft (adaware) quietly removed Whenu from detection there was general disgust.
In response they made a whenu uninstaller available, but you have to look for it.

The page is here:
http://www.lavasoft.de/support/download/

Scroll down to:

Latest Uninstallers:
WhenU

Or here is direct download link:
http://updates.ls-servers.com/whenuremover.zip

[chevy]

Thanks :) seems to be gone....for now

[chevy]

darn thing is back again...it must not have removed it. GRRRR and I cant even do a sytem restore now. :(

[frostyone]

Hi Chevy.
Sorry to hear it's back, but I think that after 3 weeks it's probably a new infection.

Just try the uninstaller again, hopefully that takes care of it.

Housecall's online antispyware scan also detects and removes whenU
Doesn't take too long.
Could double check after running the uninstaller.
http://www.trendmicro.com/spyware-scan/

[chevy]

tried the uninstaller...worked at first...looked like it was gone...2 minutes later...there it is in the registry again after reboot.It wont go away...I'm afraid i'll have to take it back to the dude who did it and have them reformat it for free....cause he put it there...weathercast..ever since that it's been buggered.

[frostyone]

Well formatting would do it lol.

Should be able to get rid of it,though, without format.

First use add/remove programs to get rid of weather cast.

Then post a hijack this log here.
We'' see what's left behind and get rid of it.
Mitch has a sticky in this forum about HJT.

[chevy]

I removed the programs months ago...through uninstall...but I thought they were gone.
Then it keeps coming back.I tried the housecall and it found and said it removed it...it also found a trojan.Funny norton didnt catch it.Anyway...seems good for now...will scan again.Hijack this...nah I'll pass till I kill the problem.

[frostyone]

That's ok chevy.
If you still have problems , just copy'paste the HJT log here.
Someone will guide you through what to fix.

With spyware, there's a lot of semantics.
One person's trojan is another's valued updater.
Norton's gotten better, but:
They use what they call an " expanded threats" option.
Only available with Norton 2004 and later.
I believe you have to select it in the settings.

Virtually all the anti-viruses were left scrambling to cope with spyware.
They still don't do a great job, but are improving.
At least targetting the worst offenders.
The days a company would brag "we're a pure anti-virus" we don't prevent trojans, spyware etc." are fading.
Customers don't care about semantics.
Rightly considering it all trash.
But the avs have got a ways to go yet.
Generally speaking a dedicated anti-spyware app works better at detecting and cleaning.,