You have other malware that SpyBot cannot remove, you will probably need
this file CWShredder.exe. See link below
Try this: Tools > Internet Options > Advanced > Browsing
Uncheck the Enable 3rd party browser extensions
If this clears your problem then find out who the culprit(s) is/are with
these tools.
Let AD-Aware Scan your system for advertising Spyware
http://www.lavasoftusa.com
If you use a HOSTS file, beware of this new issue.
Ad-Aware has decided to include a new detection when scanning the HOSTS
file. This now creates a "Bad hosts file entry" in the log file generated at
the end of a scan. The best thing to do is to place a check in each entry,
right-click and select: "Add selection to ignorelist". Otherwise if you let
AWW "fix" these items it will trash the HOSTS file! Even if you have it
"locked" by [example] SpywareBlaster or Winpatrol. It does not return the
attributes and renames the HOSTS file incorrectly to hosts.
and:
SpyBot-S&D
http://security.kolla.de/
p.s Reset the 3rd party browser setting.
Get AdAware and SpyBot and run them both. Keep them up to date.
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm
Additional link:
http://aumha.org/a/quickfix.htm
You may need this removal tool.
More: Complete list by variant with up-to-date information.
http://www.spywareinfo.com/~merijn/cwschronicles.html
More: Removal tool:
http://www.spywareinfo.com/~merijn/files/CWShredder.exe
CWShredder - Tutorial
http://www.bleepingcomputer.com/forums/index.php?showtutorial=47
IMPORTANT:
Before trying to remove spyware, download a copy of LSPFIX from
the URL below - some malware may kill your internet connection when it is
removed, this program will enable you to regain your connection.
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html (if your OS is Win2k or
XP)
Important: "So how did I get infected in the first place?"
http://forums.net-integration.net/index.php?showtopic=3051
--
Henri Leboeuf
Web page:
http://www.colba.net/~hlebo49/index.htm
===
tenspeedten said:
When I'm on my ISP's home page and I close it out using the little x in
the upper right cornerand go back to my desktop I get an error message that
says " The instruction a "oxo1a290cd" reference memory at "oxo1a290cd" The
memory could not be "read" " This started happening right after I cleaned
some things with Spybod S&D. It says it's an IE error.
