Winantivirus Pro 2006

[The Maxx]

My friend seems to have a bit of a problem with her PC.  Every so often she keeps getting these popups saying junk like "Is your PC running slow...." blah, blah.  It tells her to use Winantivirus Pro 2006 and it opens up a browser saying to run a scan.  I have ran Sunbelt CounterSpy, Spy Sweeper, Spybot, Ad-Aware, and even VundoFix and nothing gets rid of it.  A few of them seems to finds Winantivirus tracking cookies but nothing else.  How in the world can I get rid of this crap for her?

Her AV is Avast! btw and this problem I noticed started at least 2-3 days ago.

[Lisandro]

Did you try these steps?

1) Disable System Restore on Windows XP: http://support.microsoft.com/default.aspx?scid=kb;%5BLN%5D;310405
2) Clean your temporary files.
3) Schedule a boot time scanning with avast. Start avast! > Right click the skin > Schedule a boot-time scanning. Select for scanning archives. Boot.
4) Use a-squared, ewido or Spyware Terminator (trojan removers).

[The Maxx]

I went ahead and turned off her system restore, and ran ewido and it found nothing.  Next time I'm there I'll try a-squared and Spyware Termintor.  What about Spyware Doctor, is that a safe program to use?

[Lisandro]

What about Spyware Doctor, is that a safe program to use?

Yes it is 

[The Maxx]

What about Spyware Doctor, is that a safe program to use?

Yes it is 

Good cause I recall reading the other day that Spyware Doctor is suppose to find and get rid of that Winantivirus Pro 2006.     But was afraid to install it on her PC incase it was more junk.

[FreewheelinFrank]

SpywareDoctor gets good reviews:

http://www.pcpro.co.uk/shopper/labs/92362/pc-tools-spyware-doctor-4.html

http://www.pcworld.com/article/id,126885/article.html

It does also produce some false positives, as noted in the second review.

[DavidR]

Another rogue anti-spyware program http://www.spywarewarrior.com/rogue_anti-spyware.htm.

Have you tried a google search for Winantivirus Pro 2006 it returns many hits for this scumware. Many of those have used hijackthis to find the run command for the pop-up and any other elements.

Also useful as a diagnostic tool - Download HiJackThis.zip - HJT Information HiJackThis Tutorial 1 or HiJackThis Tutorial 2 or HiJackThis Tutorial 3
On-line analysis - HiJackThis Log file - On-line Analysis OR HiJackThis Log file - On-line Analysis 2
Ignore any 023 reference to avast processes, this is a hiccup in the HJT 1.99.1 (especially missing file entry for avast), if you need any help with any of the analysis let us know.