OT "winfavorites.exe" & Virus Alert.

  • Thread starter Thread starter Robert J. Stevens
  • Start date Start date
R

Robert J. Stevens

Every morning when I first startup I get an Error message from NORTON
A/V saying I have "winfavorites.exe" with a Virus in my Windows Temp
folder. I ask for it to be deleted and all is OK till next day. Looks
like it might be coming via IE. Does anyone have a suggestion as to how
to locate the HOOK;
It must be in the Register.
TIA
 
Robert said:
Every morning when I first startup I get an Error message from NORTON
A/V saying I have "winfavorites.exe" with a Virus in my Windows Temp
folder. I ask for it to be deleted and all is OK till next day. Looks
like it might be coming via IE. Does anyone have a suggestion as to how
to locate the HOOK;
It must be in the Register.
TIA
Click to expand...
Or you could turn off system restore, rescan, and reboot.
 
Every morning when I first startup I get an Error message from NORTON
A/V saying I have "winfavorites.exe" with a Virus in my Windows Temp
folder. I ask for it to be deleted and all is OK till next day. Looks
like it might be coming via IE. Does anyone have a suggestion as to how
to locate the HOOK;
It must be in the Register.
TIA
Click to expand...

You might start here since you use Norton
http://securityresponse.symantec.com/avcenter/venc/data/adware.winfavorites.html
A quick search on Google for "winfavorites.exe" found 80 some hits and
it sounds like spyware.
 
I recently got infected with this one which I believe came into my computer
from a web page.
Go here for some reading
http://www.pestpatrol.com/pestinfo/w/winfavorites_bridge.asp
The offending files seemed to be the bridge.dll and the bridge.ini file
which were in my downloaded programs file. The bridge.ini file cannot be
seen in the file even if you set your computer to show hidden files.
Running Adaware cleared up some of it.
Adaware removed some of it right away, then asked to run on start up to
remove the rest. I have never had this happen before. Adaware loads itself
into memory on boot up and runs before the desktop is loaded so it can be a
little disconcerting if you have never seen that happen before. Running
Spybot cleared out the rest except for the reference to the bridge.dll in
the registry which will cause an error message at your next boot up after
eliminating the pest. I had to remove this reference by hand from the
registry.
Good luck,
Carolyn
 
Carolyn said:
I recently got infected with this one which I believe came into my computer
from a web page.
Go here for some reading
http://www.pestpatrol.com/pestinfo/w/winfavorites_bridge.asp
The offending files seemed to be the bridge.dll and the bridge.ini file
which were in my downloaded programs file. The bridge.ini file cannot be
seen in the file even if you set your computer to show hidden files.
Running Adaware cleared up some of it.
Adaware removed some of it right away, then asked to run on start up to
remove the rest. I have never had this happen before. Adaware loads itself
into memory on boot up and runs before the desktop is loaded so it can be a
little disconcerting if you have never seen that happen before. Running
Spybot cleared out the rest except for the reference to the bridge.dll in
the registry which will cause an error message at your next boot up after
eliminating the pest. I had to remove this reference by hand from the
registry.
Good luck,
Carolyn
Click to expand...

I am Downloading SPY-BOT Right now. I installed Spywareblaster. I was able to
get rid of the winfavorites somehow. I deleted all the files in NORTON's
Guarantine folder. I did find some info on the WEB. Hope I got rid for now.
Thanks to All
Bob in Wisconsin
 
Back
Top