Windows Security Tutorials - Herong's Tutorial Examples

∟Malware Manual Removal Experience

∟Removing "WebSpecials" - webspec.dll

This section provides a tutorial example on remove spyware 'WebSpecials' and related files webspec.dll.

Symptom: Unknown.

HijackThis Report: 

O4 - HKLM\..\Run: [WebSpecials] rundll32 
   "C:\Program Files\WebSpecials\webspec.dll",run

Quick Research: I did a Google search on "WebSpecials remove" and located a good description from http://www.scanspyware.net/info/WebSpecials.htm. It says that "WebSpecials is an adware that brings frequent advertisements to your computer screen."

What I Did:

1. Looked at c:\program files\WebSpecials, found the file, and failed to delete it directly: 

>dir c:\program files\WebSpecials
   webspec.dll
   ...

>rmdir c:\program files\WebSpecials
   webspec.dll in use

2. Run HijackThis > "Open the Misc Tools section" > "Delete a file on reboot", select c:\program files\WebSpecials\webspec.dll, and reboot the system.

Result: WebSpecials is gone.

Table of Contents

 About This Windows Security Book

 Windows 8: System Security Review

 Windows 8: System Security Protection

 Windows 8 System Recovery

 Windows 8 Defender for Real-Time Protection

 Windows 7: System Security Review

 Windows 7: System Security Protection

 Windows 7 System Recovery

 Windows 7 Forefront Client Security

 Norton Power Eraser - Anti-Virus Scan Tool

 McAfee Virus and Malware Protection Tools

 Spybot - Spyware Blocker, Detection and Removal

 Keeping Firefox Secure

 Keeping IE (Internet Explorer) Secure

 Malware (Adware, Spyware, Trojan, Worm, and Virus)

 HijackThis - Browser Hijacker Diagnosis Tool

 IE Add-on Program Listing and Removal

 "Conduit Search" - Malware Detection and Removal

 "Tube Dimmer", "Scorpion Saver" or "Adpeak" Malware

►Malware Manual Removal Experience

 Removing Malware "Social Privacy DNS"

 Removing "WebBar" - htwtb.bin and bar.dll

 Removing "SurfBuddy" - sbuddy.dll

►Removing "WebSpecials" - webspec.dll

 Removing "DSSAgent" - DSSAgent.exe

 Removing "Best Offer" - farmmext.exe

 Removing "dinst.exe" - dsr.dll

 Removing "deSrcAs.dll" - MyWay Search Assistant

 WinAntiVirusPRO 2006 Faked Security Popup

 WinFixer 2006 Faked Security Popup

 Removing "WinFixer" - Rogue Security Popups

 Vundo (VirtuMonde/VirtuMundo) - vtsts.dll Removal

 Trojan and Malware "Puper" Description and Removal

 VSToolbar (VSAdd-in.dll) - Description and Removal

 PWS (Password Stealer) Trojan Infection Removal

 MS08-001 Vulnerability on Windows Systems

 Antivirus System PRO

 References

 Full Version in PDF/ePUB