WSNPOEM Trojan - how do I remove it? 2

[MeGustaXL]

As per the subject folks; I suspect I may have WSNPOEM on my laptop, so how do I diagnose and disinfect?


Chris

So you ride yourselves over the fields,
and you make all your animal deals,
and your wise men don't know how it feels...

Ian Anderson

 

[BadBigBen]

Malwarebytes’ Anti-Malware

http://malwarebytes.org/mbam.php

Ben
"If it works don't fix it! If it doesn't use a sledgehammer..."
How to ask a question, when posting them to a professional forum.
Only ask questions with yes/no answers if you want "yes" or "no"

 

[MeGustaXL]

Thanks Ben.

And...?

Chris

So you ride yourselves over the fields,
and you make all your animal deals,
and your wise men don't know how it feels...

Ian Anderson

 

[kjv1611]

Download and run these 2 if you can within Windows:

MalwareBytes Antimalware as suggested by Ben
SuperAntiSpyware

If you can't get them to run normally, try running Windows in safe mode. Also, you can try renaming the files before installing if necessary.

If none of that works, you might want to try:
DrWeb CureIt LiveCD - the download link is at the bottom of the page. If you need an app for burning the ISO image to CD, check out ImgBurn.

If/when you think you've gotten your system clean:
1. Run a "system cleaner", such as Iobit Advanced System Care and/or Glary Utilities.
2. Turn off System Restore
3. Reboot
4. Turn System Restore Back on.
5. Install a good AV (paid = Eset Nod32, pbbly best, followed by Khaspersky) or (free = Antivir, AVG, or Avast)
6. Install Windows Defender if you don't already have it.
7. Install SpywareBlaster if you don't already have it - make sure all protection is enabled after updates.
8. Spybot Search and Destroy may still be good from a system protection standpoint - though I just don't just it anymore, b/c it got so stinking slow on scans.
9. Defrag after everything's done - Advanced System Care can do this automatically for you with all the other stuff if you just run it, and click the "Care" button. Also Smart Defrag - same company, Iobit, made it - is a good defrag program - seems better than Windows built-in defrag.

Some links are in the list above, but you can find all of them at download.com, as well as many other sites.

--

"If to err is human, then I must be some kind of human!" -Me

 

[kjv1611]

Also, see here:

http://www.symantec.com/security_response/writeup.jsp?docid=2008-072400-0415-99&tabid=3

And/or possibly here:

http://www.websecurity.mobi/computer-help/186-how-get-rid-wsnpoem-made-win32agent-pz.html

And really, Google is your friend, since you already know the specific virus name:

http://lmgtfy.com/?q=WSNPOEM+remove

--

"If to err is human, then I must be some kind of human!" -Me

 

[MeGustaXL]

Sorted!

Stars to Ben and kjv1611 for the links...I downloaded both, ran them in safe mode with System restore turned off, and between them they found and eradicated 48 baddies, including WSNPOEM!

Hijack this and Spybot Search and Destroy had missed all of those - but now all is squeaky clean.

Chris

So you ride yourselves over the fields,
and you make all your animal deals,
and your wise men don't know how it feels...

Ian Anderson

 

[kjv1611]

Glad to hear you got it cleaned up.

Yeah, I don't think Spybot is near as good as it used to be. After I myself got tired of its slowness, and a couple others complained to me about it on their computers, I just quit using it, almost totally. Now after finding out about Malwarebytes and SuperAntispyware... oh, and DrWeb, those seem to be almost able to cure anything.

I suppose that'll be the case for a couple years, and then they'll be popular enough that we'll have to look elsewhere.

--

"If to err is human, then I must be some kind of human!" -Me

 

[BadBigBen]

Am also glad to hear that your puter is clean once again...



Ben
"If it works don't fix it! If it doesn't use a sledgehammer..."
How to ask a question, when posting them to a professional forum.
Only ask questions with yes/no answers if you want "yes" or "no"