PDA

View Full Version : Coolwwwsearch removal help.



Jebus
12-23-2004, 12:05 PM
Before anybody says anything. I already have Firefox, and I'm careful about what I download.

A few weeks ago my cousin downloaded some program without scanning it and unleashed a torrent of spyware and viruses on my computer. I've gotten it all cleaned off, except for several variants of the coolwwwsearch hijacker. I've run several anti-spyware programs, and a removal tool specifically targeting cws (which crashed soon after running.)

I have included the log file from Hijack this, in case it's any help, but I need this removed, its driving me insane.

crono_logical
12-23-2004, 12:53 PM
Why is a log file in MS Word format? *refuses to download*

Anyway, there's the usual stuff to try. Kill it's processes, remove registry entries for it (using searches help), including startup entries, and reboot :p Consider making a new admin account, and dropping the priviledges on the infected one, see if that helps to contain it.

Jebus
12-23-2004, 01:11 PM
I changed it to MS word, it wouldn't let me upload the .log.

O1 - Hosts: 69.20.16.183 auto.search.msn.com
O1 - Hosts: 69.20.16.183 search.netscape.com
O1 - Hosts: 69.20.16.183 ieautosearch

These three lines are part of the hijacker. I know that much, but they keep coming back if I remove them.

crono_logical
12-23-2004, 01:53 PM
.log should have been a plain .txt file though :p

NM
12-23-2004, 07:25 PM
If you had alot of Spyware & viruses, i'd suggest you format your HDD and re-install windows.

Jebus
12-24-2004, 03:00 AM
.log should have been a plain .txt file though :p

It was .log, but it ran in notepad. Wouldn't let me upload though.


Looks like I may have to reinstall, especially since the removal tool keeps crashing.

crono_logical
12-24-2004, 10:34 AM
And what does notepad do? Plain text :monster: