AboutLorry Expertise I can answer most questions regarding viruses/Trojans and help to remove them.
Experience This happens to be of interest to me as it boggles my mind that people have nothing better to do than to write a virus. Wish these people, the ones who write viruses would put the knowledge to good use instead. My job as a local tech involves removing viruses and/or spyware.
My workstation and laptop have both had webwatcher installed (by my husband!) I removed the offending 'awtt' files and ran spybot to check and clean everything.
My concern though is that when I run the 'netstat -a' command from the command prompt I am still getting TCP webwatcherdata.com:https as an 'established' link.
Does this mean that I'm still infected and that data is still being transmitted?
Also - does webwatcher need to be downloaded and installed directly onto the PC being monitored - or can this be done remotely?
Kind Regards
Marie
Answer Hi Marie,
I know of the program WebWatcher but never used it, saying that I cannot answer your question are you still infected. What I would suggest to verify that any threats have been removed from the computer would be to use Internet Explorer, go to:
Click "Continue to Symantec Security Check", in the next window click No when asked if you want to close this window, that will bring you to a window where you should click Virus Detection.
Write down exactly anything it finds, then go to: http://www.symantec.com/search/ and do a search for what was found. Symantec usually has a removal tool and/or directions for removing manually. Make sure that you follow the instructions for removal, step by step, especially the part regarding disabling System Restore.
I would also suggest downloading Malwarebytes Anti-Malware from:
