Spyware: WebSpecials - webspec.dll

This section provides a tutorial example on remove spyware 'WebSpecials' and related files webspec.dll.

Symptom: Unknown.

HijackThis Report: I ran HijackThis on my friend's system and saw this line:

O4 - HKLM\..\Run: [WebSpecials] rundll32 
   "C:\Program Files\WebSpecials\webspec.dll",run

Quick Research: I did a Google search on "WebSpecials remove" and located a good description from http://www.scanspyware.net/info/WebSpecials.htm. It says that "WebSpecials is an adware that brings frequent advertisements to your computer screen."

What I Did:

1. Looked at c:\program files\WebSpecials, found the file, and failed to delete it directly:

>dir c:\program files\WebSpecials
   webspec.dll
   ...

>rmdir c:\program files\WebSpecials
   webspec.dll in use

2. Run HijackThis > "Open the Misc Tools section" > "Delete a file on reboot", select c:\program files\WebSpecials\webspec.dll, and reboot the system.

Result: WebSpecials is gone.

Table of Contents

 About This Book

 Introduction to Microsoft Windows

 Introduction to Windows Explorer

 Introduction to Internet Explorer

 "Paint" Program and Computer Graphics

 GIMP - GNU Image Manipulation Program

 JPEG Image File Format Quality and Size

 GIF Image File Format and Transparent Background

 "WinZip" - ZIP File Compression Tool

 "WinRAR" - RAR and ZIP File Compression Tool

 FTP Server, Client and Commands

 "FileZilla" - Free FTP Client and Server

 Web Server Log Files and Analysis Tool - "Analog"

Spyware Adware Detection and Removal

 What Is Spyware?

 "HijackThis" - Spyware and Browser Hijacker Detector

 "HijackThis" Report Entry Types

 Spyware: WebBar - htwtb.bin and bar.dll

 Spyware: SurfBuddy - sbuddy.dll

Spyware: WebSpecials - webspec.dll

 Spyware: DSSAgent - DSSAgent.exe

 Transponder: Best Offer - farmmext.exe

 Spyware: dinst.exe - dsr.dll

 IE Addon Program Listing and Removal

 Vundo (VirtuMonde/VirtuMundo) - vtsts.dll Removal

 Trojan and Malware "Puper" Description and Removal

 VSToolbar (VSAdd-in.dll) - Description and Removal

 Spybot - Spyware Blocker, Detection and Removal

 Setting Up and Using Crossover Cable Network

 Home Network Gateway - DSL Modem/Wireless Router

 Windows Task Manager - The System Performance Tool

 "tasklist" Command Line Tool to List Process Information

 "msconfig" - System Configuration Tool

 Configuring and Managing System Services

 Windows Registry Key and Value Management Tools

 Startup Programs Removal for Better System Performance

 Winsock - Windows Sockets API

 Java on Windows

 Glossary of Terms

 Outdated Tutorials

 References

 PDF Printing Version