Page 1 of 2 12 LastLast
Results 1 to 15 of 17

Thread: Kiwee

  1. #1
    New Lounger
    Join Date
    Dec 2009
    Location
    Mississauga, Ontario,Canada
    Posts
    17
    Thanks
    0
    Thanked 0 Times in 0 Posts
    I found signs of this program in a folder - AGI - and when I googled Kiwee I found several negative posts. Neither of these programs (Kiwee or AGI) appear in my "Add or remove programs" and any attempt to delete them immediately affects the performance of the computer & they regenerate themselves at reboot. Both programs installed themselves surreptitiously & resist removal. This in itself would seem to qualify the programs as malware yet I have not been able to find a reputable anti malware program that claims to remove them.
    I have traced their install to most likely having been a piggyback on Webshots a program that was highly recommended to me.
    If anyone can help with the removal I would be extremely grateful

  2. #2
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,577
    Thanks
    5
    Thanked 1,057 Times in 926 Posts
    The fourth post dated Friday 2/19/2010 3:18 pm at How to remove KIWEE Toolbar | Help For Beginners has instructions from Webshots on removal of Kiwee.

    Joe
    Joe

  3. #3
    Super Moderator CLiNT's Avatar
    Join Date
    Dec 2009
    Location
    California & Arizona
    Posts
    6,121
    Thanks
    160
    Thanked 609 Times in 557 Posts
    Here's another manual removal site
    DRIVE IMAGING
    Invest a little time and energy in a well thought out BACKUP regimen and you will have minimal down time, and headache.

    Build your own system; get everything you want and nothing you don't.
    Latest Build:
    ASUS X99 Deluxe, Core i7-5960X, Corsair Hydro H100i, Plextor M6e 256GB M.2 SSD, Corsair DOMINATOR Platinum 32GB DDR4@2666, W8.1 64 bit,
    EVGA GTX980, Seasonic PLATINUM-1000W PSU, MountainMods U2-UFO Case, and 7 other internal drives.

  4. #4
    Silver Lounger Duchess843's Avatar
    Join Date
    Apr 2002
    Location
    Sicklerville, NJ
    Posts
    2,488
    Thanks
    36
    Thanked 0 Times in 0 Posts
    Quote Originally Posted by JoeP View Post
    The fourth post dated Friday 2/19/2010 3:18 pm at How to remove KIWEE Toolbar | Help For Beginners has instructions from Webshots on removal of Kiwee.

    Joe
    I haven't found Kiwee Toolbar on my computer but I do have AGI. Should AGI be removed and if so, what program will remove it?

    Thanks in advance.

    Gloria
    <img src=/S/coffeetime.gif border=0 alt=coffeetime width=32 height=48>

  5. #5
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,577
    Thanks
    5
    Thanked 1,057 Times in 926 Posts
    Quote Originally Posted by Duchess843 View Post
    I haven't found Kiwee Toolbar on my computer but I do have AGI. Should AGI be removed and if so, what program will remove it?
    Are you saying you have a product named "AGI" installed or you have a folder named "AGI" on the system?

    If it is a folder, what are the contents? Where is the folder located?

    Joe
    Joe

  6. #6
    Silver Lounger Duchess843's Avatar
    Join Date
    Apr 2002
    Location
    Sicklerville, NJ
    Posts
    2,488
    Thanks
    36
    Thanked 0 Times in 0 Posts
    Quote Originally Posted by JoeP View Post
    Are you saying you have a product named "AGI" installed or you have a folder named "AGI" on the system?

    If it is a folder, what are the contents? Where is the folder located?

    Joe
    AGI is a folder and it's listed under Sevices. Services lists the executable path as:
    C:\Program Fi;les\AGI\Core\4.2.0.10752\AGCoreService.exe

    When I did a search I found AGCoreService.Installlog, which Windows could not open, so I changed the files name to Install.log which opened in Notepad which I printed.
    Found in one of the AGI folders were things like: autoupdateservicePlugin.dll; BrowserHelper.dll; Search Protection Service Plugin.
    In another folder I found Webshots Desktop, the contents included searchhistroy.txt. When opened it, it
    named Capital One Online Banking( that worries me).

    I hope this helps you decide if it should be removed or left to run as is.

    Gloria
    <img src=/S/coffeetime.gif border=0 alt=coffeetime width=32 height=48>

  7. #7
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,577
    Thanks
    5
    Thanked 1,057 Times in 926 Posts
    Quote Originally Posted by Duchess843 View Post
    I hope this helps you decide if it should be removed or left to run as is.
    You need to dceide what to do not me. I think that following the removal directions linked to in prior posts is probably sufficient.

    Joe
    Joe

  8. #8
    New Lounger
    Join Date
    Dec 2009
    Location
    Mississauga, Ontario,Canada
    Posts
    17
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Quote Originally Posted by Duchess843 View Post
    I haven't found Kiwee Toolbar on my computer but I do have AGI. Should AGI be removed and if so, what program will remove it?

    Thanks in advance.

    Gloria
    Gloria:
    Check these two places for Kiwee files. I do not have a Kiwee folder either.
    Program files/AGI/Common/Pyagcore/instal/Dependency/
    And
    Program files/AGI/Common/Pyagcore/instal/installers

  9. #9
    Silver Lounger Duchess843's Avatar
    Join Date
    Apr 2002
    Location
    Sicklerville, NJ
    Posts
    2,488
    Thanks
    36
    Thanked 0 Times in 0 Posts
    Quote Originally Posted by sportyjoe View Post
    Gloria:
    Check these two places for Kiwee files. I do not have a Kiwee folder either.
    Program files/AGI/Common/Pyagcore/instal/Dependency/
    And
    Program files/AGI/Common/Pyagcore/instal/installers
    The AGI folder contains another folder named Core only. I opened Core and found nothing named Kiwee. I have contacted Webshots and a reply is due sometimes today. I asked them what AGI was for and if it could be removed.

    My research seems to imply that AGI stands for American Greetings Interactive, which is used by Webshots.

    Gloria
    <img src=/S/coffeetime.gif border=0 alt=coffeetime width=32 height=48>

  10. #10
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts
    I found the following information on a site I do not know or trust, but also found removal instructions on Bleeping Computer.com


    "Pyagcore.search aliases: Kiwee Toolbar


    Common Pyagcore.search malware threat warning signs:
    • Common popup blockers can't prevent irritating adult related popup advertisements
    • Abnormal running Pyagcore.search processes/files in the task manager, annoying tower speaker bleepings
    • Pyagcore.search is hard to remove manually, reactivate itself after removal
    • Hijacked desktop wallpaper, tray icons and desktop shortcuts
    • General surfing and Windows speed issues, abnoramal Internet bandwidth
    • Valid registry keys, dlls and system files missing, causing "Blue Screen Of Death" error
    • Browser startpage and search engines re-directs to strange website

    Pyagcore.search malware behaviors:
    • Sneaks into the Pc through browser security leaks and infect the system with malicious adware and spyware programs
    • Pyagcore.search bypasses firewalls and antivirus programs by hide itself as genuine system software and sends confidential info to distant hackers
    • Change system logs, generates pop-up advertisements equivalent browsing habits and collects system activity
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  11. #11
    Silver Lounger Duchess843's Avatar
    Join Date
    Apr 2002
    Location
    Sicklerville, NJ
    Posts
    2,488
    Thanks
    36
    Thanked 0 Times in 0 Posts
    Thanks Doc, but I don't have the Kiwee Toolbar.
    <img src=/S/coffeetime.gif border=0 alt=coffeetime width=32 height=48>

  12. #12
    New Lounger
    Join Date
    Dec 2009
    Location
    Mississauga, Ontario,Canada
    Posts
    17
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Quote Originally Posted by sportyjoe View Post
    I found signs of this program in a folder - AGI - and when I googled Kiwee I found several negative posts. Neither of these programs (Kiwee or AGI) appear in my "Add or remove programs" and any attempt to delete them immediately affects the performance of the computer & they regenerate themselves at reboot. Both programs installed themselves surreptitiously & resist removal. This in itself would seem to qualify the programs as malware yet I have not been able to find a reputable anti malware program that claims to remove them.
    I have traced their install to most likely having been a piggyback on Webshots a program that was highly recommended to me.
    If anyone can help with the removal I would be extremely grateful

    An update to my post:
    Some two days ago I used the link included in "Plutonium Lounger's" post of 18 March, & while in SAFE MODE followed the instructions shown under "Kiwee.com wrote". After that I edited the registry removing all references to AGI & Kiwee(several).
    Since then I have restarted my computer several times & searched using a small free search tool called "Everything" to confirm that there are no files in either names being regenerated. I think I have finally rid-ed myself of this blight.
    A special thanks to "Plutonium Lounger"

  13. #13
    Silver Lounger Duchess843's Avatar
    Join Date
    Apr 2002
    Location
    Sicklerville, NJ
    Posts
    2,488
    Thanks
    36
    Thanked 0 Times in 0 Posts

    SportyJoe, If you use Webshots you may have to reinstall. I contacted Webshots and was informed that AGI was essential to running their program. I also discovered that the name of AGI refers to American Greetings IInteractive.

    If you don't use Webshots, you are in safe mode (no problems with the removal).


    Gloria

    <img src=/S/coffeetime.gif border=0 alt=coffeetime width=32 height=48>

  14. #14
    New Lounger
    Join Date
    Dec 2009
    Location
    Mississauga, Ontario,Canada
    Posts
    17
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Silver Lounger:
    Thanks for the update. I have 4 computers running Webshots, two of them were infected with AGI/Kiwee. The Webshots program was installed on the 2 infected computers in June 2009 & November 2008. I mention this to illustrate that during this period (and who knows when it started & when if ever it stopped) Webshots must have found out that these programs were piggybacking on their download. Because of this I have lost respect for this company & if, as you have found out, removing the two malware programs, AGI & Kiwee, affects Webshots then I will not hesitate to also remove Webshots.
    For what it is worth Webshots appear to be fully operative on both of the previously infected computers.

  15. #15
    Silver Lounger Duchess843's Avatar
    Join Date
    Apr 2002
    Location
    Sicklerville, NJ
    Posts
    2,488
    Thanks
    36
    Thanked 0 Times in 0 Posts
    Quote Originally Posted by sportyjoe View Post
    Silver Lounger:
    Thanks for the update. I have 4 computers running Webshots, two of them were infected with AGI/Kiwee. The Webshots program was installed on the 2 infected computers in June 2009 & November 2008. I mention this to illustrate that during this period (and who knows when it started & when if ever it stopped) Webshots must have found out that these programs were piggybacking on their download. Because of this I have lost respect for this company & if, as you have found out, removing the two malware programs, AGI & Kiwee, affects Webshots then I will not hesitate to also remove Webshots.
    For what it is worth Webshots appear to be fully operative on both of the previously infected computers.
    Webshots didn't mention anything about Kiwee and since I didn't have it, I forgot to ask. I'm almost certain that Kiwee is NOT part of Webshots or I would have had it on my hard drive. If I were you I'd remove Kiwee but keep Webshots. There's not another program that comes close to being such a good, reliable program. I love my desktop wallpaper and I have tons of them.

    My new computer with Windows 7 will be installed today and one of the first programs I will install is Webshots. Of course I will have to install the wallpapers again because I don't know how to transfer them from one computer to the other.

    Gloria
    <img src=/S/coffeetime.gif border=0 alt=coffeetime width=32 height=48>

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •