Jump to content


Photo

CWShredder problem


  • Please log in to reply
1 reply to this topic

#1 JAB

JAB

    Member

  • New Member
  • Pip
  • 1 posts

Posted 28 June 2004 - 01:58 PM

When I run CWShredder it tells me "You have a variant of the Coolwebsearch trojan (CWS.Smartsearch.2) that has attempted to close CWShredder. To counter this, CWShredder is now starting with a random string of text in the title bar. CWShredder is still functioning fine, it has not been corrupted. If you feel you should not be getting this error and you are not infected, restart CWShredder and this warning should not appear again." Yet when it goes on to run the scan it comes back clean?!? This makes no sense to me.

I came across this problem by accidentally starting up TWO CWShredder scans at the same time - meaning I start a Shredder scan and then quickly click and start a second Shredder scan just a couple seconds behind the first one and then the popup appears telling me I have this trojan.

When I run the updated versions of NAV, Spybot, Adaware, PandaAV, etc... and they all come up clean. I have been having a recent problem searching from my address bar and I don't know if the two are related problems.


Please help me!

JAB

#2 LoPhatPhuud

LoPhatPhuud

    Master of Disaster Recovery

  • Emeritus
  • PipPipPipPip
  • 432 posts

Posted 29 June 2004 - 06:59 PM

Try running CWS Smart Killer first and see if that stops the message:
CoolWWWSearch.SmartKiller removal tool
http://www.safer-net...es/delcwssk.zip



Download *Hijack This!*
http://209.133.47.12.../HijackThis.exe
http://www.mjc1.com/mirror/hjt/
http://downloads.net.../HijackThis.exe
http://www.computerc...s-file-328.html

Unzip to a folder other than your Desktop or the Temp folder. Then, doubleclick HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that and copy & paste its contents here.

Most of what it lists will be harmless or even essential, don't fix anything yet. Someone will be along to tell you what steps to take after you post the contents of the scan results.
IPB Image Microsoft MVP Windows-Security 2005

Posted Image


When angry count four; when very angry, swear




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button