Adware Generic_s.DP/C:\Program Files (x86)\WedHievegeterousatin

[jacklongbridge]

Hello All,

I have a really stubborn adware problem that try as I might I can't solve.

On startup my AVG is2015 is detecting malware: Adware Generic_s.DP coming from a.exe file called WedHievegeterousatin.

This .exe cannot be shut down or deleted and when I do a google search for it nothing comes up.

I checked my startup programs, nothing unusual or new there.

AVG claims to have fixed the problem, but it just keeps coming back.

I have tried Spybot Search & Destroy,Adwcleaner,ad-aware,Anti-Malware Free,Anti-rootkit, etc nothing seems to work.

They all say I have no infections, and I've run out of ideas.

Can anyone give me some advice?

Thanks!

Edited November 30, 2014 by jacklongbridge

[jacklongbridge]

Also I forgot to add that the digital signature of the .exe is from Red Sky SP. zoo, and seems to be connected to some software/malware called DownTango.

[h=3][/h]

[jacklongbridge]

Disregard this thread, I found the problem in the registry.

Thanks anyway!

[KenB]

Hi and welcome to ExTS

 

You had this fixed before we could reply :)

[Starbuck]

You should check the add/remove folder.

There should be an uninstaller for either:

DownTango

Red Sky

 

Just run the uninstallers and then check that the following folder has been removed:

C:\Program Files\Red Sky

 

Also because this can also change your browser settings, it's best to reset your browsers back to the default after removing Red Sky.

 

DownTango is a software program developed by Red Sky Sp. z o.o. The most common release is 1.0.716, with over 98% of all installations currently using this version. It adds registry entry for the current user which will allow the program to automatically start each time it is rebooted. The software is designed to connect to the Internet and adds a Windows Firewall exception in order to do so without being interfered with. The primary executable is named downtango.exe. The setup package generally installs about 26 files and is usually about 35.56 MB (37,292,197 bytes). The program is built using the Nokia Qt cross-platforms native C++ framework. Relative to the overall usage of users who have this installed on their PCs, most are running Windows 7 (SP1) and Windows 7. While about 26% of users of DownTango come from the United States, it is also popular in Iran and Germany.