Here's as much as I can offer on what's happening: It automatically closes CWShredder. I can't even open Norton. It shuts down the Spybot installation process. It has been changing the IE6 home page to random sites. A number of sites now just display "Free Search Online" (http://hhrkss.outhost.info/) - the URL is hidden. And Internet Explorer automatically shuts down when I go to sites that offer downloads of spyware removal programs and online help forums. When I actually get off a download of these programs, it will fail at 99% with the error: "Cannot read from source file or disk."
I successfully got a few programs by emailing them to myself from another computer and then running them through "Run…" in the Start menu because the trojan makes these programs invisible through Windows. I successfully ran Ad-Aware 6, Spy Sweeper, and CoolWWWSearch.SmartKiller. None of the programs removed the trojan so I still can't open CWShredder or Norton and it's still playing tricks with IE6.
SmartKiller gave me this message: "CoolWWWSearch.SmartKiller (v1/v2) has not been found on your system." CWShredder offers the message: "You have a varient of Coolwebsearch trojan (CWS.Smartsearch.2) that has attempted to close CWShredder… CWShredder is still functioning fine…" It successfully changed the program title but it keeps shutting down. To keep the program open, I have to keep clicking through the OK boxes as fast as I can (otherwise it closes) but when the program gets to its multi-stage scan, it shuts down.
Any suggestions? Please help me.
Edited by rickslate, 26 June 2004 - 12:28 PM.