Jump to content


Photo

Update with Smartsearch crashing my CWShredder


  • Please log in to reply
7 replies to this topic

#1 Zontar

Zontar

    Member

  • Full Member
  • Pip
  • 9 posts

Posted 10 June 2004 - 09:37 AM

My old thread at the other server:
http://www.spywarein...showtopic=40896

I just grabbed the CWShredder update 1.59.0 and I am still crashing
CWShredder on the CWS.Smartsearch check.

On CWShredder boot I still get it telling me I have Coolwebsearch trojan
(CWS.Smartsearch.2)

#2 esmith69

esmith69

    Member

  • New Member
  • Pip
  • 2 posts

Posted 10 June 2004 - 11:45 AM

I am working on a computer that has the exact same problem. I tried running the mini removal thing in safe mode--no luck. tried running the cws shredder 1.59 and it closes when it gets to the cws.smartsearch in the list of infections that it scans for. I also get that same message at startup of cws shredder that says that the computer has a variant of the cws.smartsearch.2 trojan.

#3 Zontar

Zontar

    Member

  • Full Member
  • Pip
  • 9 posts

Posted 10 June 2004 - 05:36 PM

I've been through this for awhile. I know my tasks and there is nothing in there
that's doing this. There can be only one possibility and that's a rouge *.dll that's
registered because it's in the system32 folder.

The thing is between system32 and it's subs I have 2,607 dynamic link libraries
so it's pretty much a job of ridiculousness to check the Company Name under
the version check.

I'm 98-99% on unused CPU process and netstat shows no odd connections
or ports listening or standing by. The only bother this nefarious *.dll is causing
is the incomplete scan from CWShredder (1.59.0).

This isn't bad enough to warrant a O/S rebuild it's just annoying knowing a
spyware library can hide like that on me and jump on CWShredder. It's like
having a rattle or a squeak in your car and you can't find it. Very frustrating.

#4 Zontar

Zontar

    Member

  • Full Member
  • Pip
  • 9 posts

Posted 14 June 2004 - 05:32 PM

I killed it!

Virus:Trj/Multidropper.AT
C:\Program Files\Windows Media Player\wmplayer.exe

I was at Panda's new online virus/trojan/worm scanner
http://www.pandasoft...n_principal.htm
and it found and disinfected and deleted the bogus wmplayer.exe

I use mplayer2.exe (version 6.4) as my default player anyway.

CWShredder now fully scans all the way through without crashing on CWS.Smartsearch

#5 esmith69

esmith69

    Member

  • New Member
  • Pip
  • 2 posts

Posted 14 June 2004 - 10:16 PM

ahhhh zontar you are a GOD! Thanks for the info. Come to think of it, I DID notice wmplayer.exe running even though it wasn't supposed to be.

Next time I'm out at this client I'll try to run that Panda online scan and see if it works. Thanks again!:)

#6 gem

gem

    Member

  • New Member
  • Pip
  • 1 posts

Posted 22 June 2004 - 08:10 PM

Hi Zontar.. I have the same problem with the shredder tried to use the panda online scan but didn't find anything but infected emails in my email folder.. I am going crazy with this Smartsearch.2 pop up.. Thanks for any help

#7 fastg11

fastg11

    Member

  • New Member
  • Pip
  • 3 posts

Posted 25 June 2004 - 07:40 PM

Zontar, you are a genius. ;D

#8 Zontar

Zontar

    Member

  • Full Member
  • Pip
  • 9 posts

Posted 26 June 2004 - 12:09 AM

Hi Zontar.. I have the same problem with the shredder tried to use the panda online scan but didn't find anything but infected emails in my email folder.. I am going crazy with this Smartsearch.2 pop up.. Thanks for any help

If your Windows XP run an updated Ad-aware scan
If your Windows 95/98/ME/2000 Pro run an updated Spybot scan

In msconfig uncheck the unnecessary stuff
reboot

If your Windows XP/2000 Pro reboot Safe Mode with Networking
and run the Panda Scan from there.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button