2 Replies Latest reply on Feb 2, 2011 8:53 AM by Hayton

    Antivirus.net infection - wawmjrmsjmo.exe

      If you're dealing with something called antivirus.net, or saw something like 'wawmjrmsjmo.exe' in your processes, hopefully this will help.  It's a bit annoying.  Sets up its own server, and routes you to it, so you can't get online (good thing you have access to another computer... or somehow found a way on), and stops all exes, and after a while will block your taskmanager too.

       

      Dealt with this tonight on my desktop.  Luckily I have a laptop (which I'm on right now) to figure out how to get rid of it.  Definitely an annoying little scam program.  The way I got rid of it was by going to bleepingcomputer.com (through google), and they had a guide to deal with it.  http://www.bleepingcomputer.com/virus-removal/remove-antivirus-.net.  If you want to go there, they have a much more descriptive explantion.

       

      The first thing to do is to download Rkill -> http://www.bleepingcomputer.com/download/anti-virus/rkill.  They said to download from the iExplore.exe link.  Run that.  Be patient.  If it gets blocked by the program, then leave the block message up, and then try running Rkill again.  It should work this time (I didn't have this problem, but they said it's a possibility).  Antivirus.net should now be chained down. 

       

      Now you need to install Malwarebytes -> http://www.bleepingcomputer.com/download/anti-virus/malwarebytes-anti-malware.  Don't change any settings, just install it with default settings.  And make sure the 'update' and 'launch' checkboxes are selected at the end of the installation.  Now run a full scan with malwarebytes.  It could take a while, so make sure you've got the time.

       

      Hopefully I didn't skip anything, and it was descriptive enough.

       

      Good luck with everything.  God bless.

        • 1. Re: Antivirus.net infection - wawmjrmsjmo.exe

          hi,

           

          I saw your details.

          If you come across the same issue, just try entering into safe mode with networking and delete the Temperory Files from your computer and also reset your internet explorer settings and then restart the computer........Try this and relpy me

          • 2. Re: Antivirus.net infection - wawmjrmsjmo.exe
            Hayton

            Moved this out of Home General Discussion into Malware Discussion.

             

            There's already a thread here about Antivirus.Net so you've got company.

             

            As for bleepingcomputer and Malwarebytes, the first is an excellent site and we all rate it highly. The second is a good backup program to have on hand, since it specialises in catching these awkward infections that the majors (not just McAfee) miss or are slow to include in their detections. It has been suggested (not I hope seriously) that Intel/McAfee should buy up Malwarebytes, but we say leave it be, it keeps McAfee on its toes. The general rule is, run McAfee first, then if it persists run Malwarebytes, and then run a third scanner of your choice (SuperAntiSpyware, Spybot, a.n.other); between them they'll deal with just about anything, 99.99 per cent of the time.