CWShredder 2.0

  • Thread starter Thread starter siljaline
  • Start date Start date

Just ran the new version 2 of CWShredder. CWS tells me it removed ...

CWS.Svchost32
CWS.HiddenDll
CWS.Smartsearch
CWS.Jksearch

.......... same results as previous version of CWShredder.

However, CWShredder still has the same problem with FALSE reporting. In
fact, CWShredder has left my system LESS secure than it was before.

What CWShredder has done is removed 177 entries from my HOSTS file. If I
run CWShredder a second time my system comes up clean. If I restore my
HOSTS file and run CWShredder a 3rd time, it flags the same 4 CWS
infections and removes the 177 entries from my HOSTS again. The 177
entries all point to my localhost 127.0.0.1, and are therefore protecting
my system.

Below is a list of what was removed from my HOSTS file.

Comparing files hostsBEFORE and hostsAFTER
127.0.0.1 008i.com
127.0.0.1 0190-dialer.com
127.0.0.1 0websearch.com
127.0.0.1 1-se.com
127.0.0.1 1spybot.com
127.0.0.1 58q.com
127.0.0.1 600pics.com
127.0.0.1 acoolwebsearch.com
127.0.0.1 alfa-search.com
127.0.0.1 allneedsearch.com
127.0.0.1 approvedlinks.com
127.0.0.1 auto.ie.searchforge.com
127.0.0.1 awebfind.biz
127.0.0.1 bar.mywebsearch.com
127.0.0.1 best.omega-search.com
127.0.0.1 boredlife.com
127.0.0.1 casinobuilder.i-lookup.com
127.0.0.1 cfg.mywebsearch.com
127.0.0.1 conf.searchmyrequest.com
127.0.0.1 conf.therealsearch.com
127.0.0.1 coolwebsearch.com
127.0.0.1 couldnotfind.com
127.0.0.1 default-homepage-network.com
127.0.0.1 domain.i-lookup.com
127.0.0.1 download.websearch.com
127.0.0.1 download1.0190-dialer.com
127.0.0.1 download2.0190-dialer.com
127.0.0.1 downloads.default-homepage-network.com
127.0.0.1 downloads.searchcentrix.com
127.0.0.1 ds1.onet.pl
127.0.0.1 eopqpn.t.rack.cc
127.0.0.1 find-itnow.com
127.0.0.1 find4u.net
127.0.0.1 firstbookmark.com
127.0.0.1 freshvideogals.com
127.0.0.1 globalwebsearch.com
127.0.0.1 google.net.klconline.com
127.0.0.1 google.tucows.com
127.0.0.1 greg-search.com
127.0.0.1 hightcalldialer.com
127.0.0.1 hotsearchbox.com
127.0.0.1 hotwebsearch.com
127.0.0.1 hugesearch.net
127.0.0.1 i-lookup.com
127.0.0.1 ie-search.com
127.0.0.1 ie.searchforge.com
127.0.0.1 if.searchcentrix.com
127.0.0.1 images.x10.com
127.0.0.1 iquicksearch.com
127.0.0.1 is1.websearch.com
127.0.0.1 is2.websearch.com
127.0.0.1 itseasy.us
127.0.0.1 just.find-itnow.com
127.0.0.1 line-plus.com
127.0.0.1 lookfor.cc
127.0.0.1 msn.com.allquickmeds4u.com
127.0.0.1 msnwebsearch.com
127.0.0.1 mywebsearch.com
127.0.0.1 nativehardcore.com
127.0.0.1 nkvd.us
127.0.0.1 no-spybot.com
127.0.0.1 novafuck.com
127.0.0.1 ns1.superwebsearch.com
127.0.0.1 ns2.superwebsearch.com
127.0.0.1 omega-search.com
127.0.0.1 pilot.find4u.net
127.0.0.1 power-search.info
127.0.0.1 powerwebsearch.com
127.0.0.1 query.i-lookup.com
127.0.0.1 ranking.websearch.com
127.0.0.1 rightfinder.net
127.0.0.1 roquvp.t.rack.cc
127.0.0.1 rs.websearch.com
127.0.0.1 search-1.net
127.0.0.1 search-dot.com
127.0.0.1 search.startium.com
127.0.0.1 search2.i-lookup.com
127.0.0.1 searchcentrix.com
127.0.0.1 searchforge.com
127.0.0.1 searching-the-net.com
127.0.0.1 searchmyrequest.com
127.0.0.1 searchv.com
127.0.0.1 searchxl.com
127.0.0.1 selfbookmark.com
127.0.0.1 servedfor.valuead.com
127.0.0.1 seznam.cz
127.0.0.1 si1.default-homepage-network.com
127.0.0.1 slotch.com
127.0.0.1 spybot-spyware.com
127.0.0.1 spycleaner.net
127.0.0.1 sqwire.i-lookup.com
127.0.0.1 startium.com
127.0.0.1 sunbelt-software.com
127.0.0.1 super-spider.com
127.0.0.1 superwebsearch.com
127.0.0.1 t.rack.cc
127.0.0.1 teen-biz.com
127.0.0.1 therealsearch.com
127.0.0.1 toolbar.globalwebsearch.com
127.0.0.1 toolbar.i-lookup.com
127.0.0.1 toolbar2.globalwebsearch.com
127.0.0.1 toolbar2.i-lookup.com
127.0.0.1 vse-moe.biz
127.0.0.1 wazzupnet.com
127.0.0.1 websearch.com
127.0.0.1 world-search.biz
127.0.0.1 www.008i.com
127.0.0.1 www.0190-dialer.com
127.0.0.1 www.1-se.com
127.0.0.1 www.1spybot.com
127.0.0.1 www.58q.com
127.0.0.1 www.acoolwebsearch.com
127.0.0.1 www.aifind.info
127.0.0.1 www.alfa-search.com
127.0.0.1 www.approvedlinks.com
127.0.0.1 www.awebfind.biz
127.0.0.1 www.bossanovaltd.info
127.0.0.1 www.coolwebsearch.com
127.0.0.1 www.couldnotfind.com
127.0.0.1 www.default-homepage-network.com
127.0.0.1 www.domain.i-lookup.com
127.0.0.1 www.find-itnow.com
127.0.0.1 www.find4u.net
127.0.0.1 www.firstbookmark.com
127.0.0.1 www.freshvideogals.com
127.0.0.1 www.globalwebsearch.com
127.0.0.1 www.google.net.klconline.com
127.0.0.1 www.google.net.medibargain.com
127.0.0.1 www.greg-search.com
127.0.0.1 www.hotsearchbox.com
127.0.0.1 www.hotwebsearch.com
127.0.0.1 www.hugesearch.net
127.0.0.1 www.i-lookup.com
127.0.0.1 www.ie-search.com
127.0.0.1 www.iquicksearch.com
127.0.0.1 www.itseasy.us
127.0.0.1 www.lookfor.cc
127.0.0.1 www.mysearchnow.com
127.0.0.1 www.mywebsearch.com
127.0.0.1 www.nativehardcore.com
127.0.0.1 www.netwebsearch.com
127.0.0.1 www.nkvd.us
127.0.0.1 www.no-spybot.com
127.0.0.1 www.novafuck.com
127.0.0.1 www.omega-search.com
127.0.0.1 www.power-search.info
127.0.0.1 www.powerwebsearch.com
127.0.0.1 www.rightfinder.net
127.0.0.1 www.satellitepop.com
127.0.0.1 www.search-1.net
127.0.0.1 www.search-dot.com
127.0.0.1 www.searchcentrix.com
127.0.0.1 www.searchforge.com
127.0.0.1 www.searching-the-net.com
127.0.0.1 www.searchmyrequest.com
127.0.0.1 www.searchv.com
127.0.0.1 www.searchxl.com
127.0.0.1 www.slotch.com
127.0.0.1 www.spybot-spyware.com
127.0.0.1 www.startium.com
127.0.0.1 www.sunbelt-software.com
127.0.0.1 www.super-spider.com
127.0.0.1 www.superwebsearch.com
127.0.0.1 www.teen-biz.com
127.0.0.1 www.therealsearch.com
127.0.0.1 www.wazzupnet.com
127.0.0.1 www.websearch.com
127.0.0.1 www.windowws.cc
127.0.0.1 www.world-search.biz
127.0.0.1 www.yahoo.com.name-clark.com
127.0.0.1 www.yourbookmarks.ws
127.0.0.1 www2.i-lookup.com
127.0.0.1 xwebsearch.biz
127.0.0.1 yahoo.com-yahoo.com.ph
127.0.0.1 yahoo.com.allquickmeds4u.com
127.0.0.1 yahoo.com.name-clark.com
127.0.0.1 yourbookmarks.ws
 
Comparing files hostsBEFORE and hostsAFTER
127.0.0.1 008i.com
127.0.0.1 0190-dialer.com
127.0.0.1 0websearch.com

<snippage>

If what you say is true for all users, then CWShredder is nothing more than
a scam.

Do you lock your hosts file?

-- Bob
 
Bob said:
<snippage>

If what you say is true for all users, then CWShredder is nothing more than
a scam.

Bob, that's a over-reaction I think. CWShredder is a well known software
famous for its ability to detect and more importantly remove the
numerous strains of CWShredder which has the reputation of being the
toughest scumware to remove.

The hosts file problem is a well known false positive, but that doesnt
make the program a scam. You wouldn't call AVG ,AVAST etc a scam if it
made a false positive would you?



Do you lock your hosts file?

That's won't help.
 
Bob said:
<snippage>

If what you say is true for all users, then CWShredder is nothing more than
a scam.

I don't know how much use it is compared to other apps that remove CWS
stuff.
But it removed 70 or so entries from my hosts file. No user intervention
possible. This is not clever behaviour.
Do you lock your hosts file?

Nope.
 
Bob, that's a over-reaction I think. CWShredder is a well known software

Not an overreaction if it behaves the same for everyone. I doubt that it
will, but we'll soon find out.

I know CWShredder is well known. I have used it for a long time, and
noticed nothing unusual.

-- Bob
 
Not an overreaction if it behaves the same for everyone. I doubt that
it will, but we'll soon find out.

Yes, my HOSTS file is locked. A simple test for you Bob .... just add
those entries to your HOSTS file and run CWShredder and see if you
suddenly have CWShredder remove (supposed) CWS infections from your
machine. Then recheck your HOSTS file for the entries just added. They
won't be there.

Instead of cleaning CWS from my PC, it compromises protection I already
have in place.
I know CWShredder is well known. I have used it for a long time, and
noticed nothing unusual.

This is NOT new to v2.00
 
Yes, my HOSTS file is locked. A simple test for you Bob .... just add
those entries to your HOSTS file and run CWShredder and see if you
suddenly have CWShredder remove (supposed) CWS infections from your
machine. Then recheck your HOSTS file for the entries just added. They
won't be there.

Instead of cleaning CWS from my PC, it compromises protection I already
have in place.

Yea, I hear you. I only run it when something strange happens. I have never
had any positives after over a year of using it. So I'll try when something
unusual happens.

Just a long shot Doc, but I wonder it could be a fake CWS Shredder?

-- Bob
 
Bob said:
Not an overreaction if it behaves the same for everyone.

Calling something a scam because it makes a honest mistake is an
over-reaction in my book, but you call it what you want.
I doubt that it
will, but we'll soon find out.

See below.
I know CWShredder is well known. I have used it for a long time, and
noticed nothing unusual.

I believe it depends on the format of the host files. I remember the
author tried to fix it to avoid problems with certain popular
downloadable hosts files.

IIRC people using the hosts files from MVP shouldn't have this problem.
Others might.
 
Doc said:
Yes, my HOSTS file is locked.

Locking your host file is pointless. The problem is, if you can unlock
your host files, any program you use as the same previlage as well.
 
Aaron said:
I believe it depends on the format of the host files. I remember the
author tried to fix it to avoid problems with certain popular
downloadable hosts files.

IIRC people using the hosts files from MVP shouldn't have this problem.
Others might.

Can you explain what you mean by this? My limited understanding is that
a hosts file is a hosts file...
In what way can one be more secure than another?
 
Aaron said:
Well i recommend you get a refund then. :)

My experience to date is that it is easier to get blood out of a stone
than to get refunds off freeware authors.
Tight sods, the lot of them.
 
jo said:
My experience to date is that it is easier to get blood out of a stone
than to get refunds off freeware authors.
Tight sods, the lot of them.

You are doing *something* wrong. I get double my money back every time.

Susan
 
Locking your host file is pointless. The problem is, if you can unlock
your host files, any program you use as the same previlage as well.

Not mine. I get a message in a soft, lovely feminine voice saying:
"Warning! A program is attempting to modify your HOSTS file. Do you want to
allow this?"

No, really. You see, "Locked" is not the same as simply making the HOSTS
file "read only" etc. A locked file is actually in use by a program, and
will not release it unless the program is closed or allows access.

Ha...just kidding about the feminine voice. :)

-- Bob
 
On Thu, 21 Oct 2004 23:43:10 +0800, Aaron

Calling something a scam because it makes a honest mistake is an
over-reaction in my book, but you call it what you want.

Here we go again! Go back and read Aaron. You ASS-ume too much.
See below.


I believe it depends on the format of the host files. I remember the
author tried to fix it to avoid problems with certain popular
downloadable hosts files.

IIRC people using the hosts files from MVP shouldn't have this problem.
Others might.

I use only the MVP hosts file. I recommend you wise up and do the same. See
how your condescension feels?

-- Bob
 
Back
Top