IE6 and CWS-NS3 Spyware

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I am running WinXP and IE6. I have Spybot, Spysweeper, CWShredder software that I have used to try and rid myself of the CWS. I can run all three programs until I get a "clear" from all three. But, the minute I click my desktop icon for IE6 to go on the Internet, my Spysweep program sends a popup window telling me that CWS is still running in memory. I check it out with Spybot or CWShredder and sure enough they detect the same. How do I get rid of this thing? Please help!
 
Hi JD :-)

You may have the newest and most difficult and vicious variant out, and it
is *very* difficult to clean, as it tends to hide in unseen files and
replicates itself, as you may have seen in it's reappearance after you
thought it had been cleaned. Please do the following and post your
HiJackThis log to the specified forum for examination. The experts there are
now working on a way to combat this new scumware.

Download, install and run the programs below. Please follow all
instructions carefully.
Make sure you state your problem and the version of Windows you are running
at the top of your post. Give an many details as you can and what you have
tried so far, and the exact wording of any error messages or pop-ups.

CWShredder: Free
http://tinyurl.com/2l9kl

SpyBot Search & Destroy: Free
http://download.com.com/3000-8022-10289035.html?tag=lst-0-2

AdAware: Free
http://www.lavasoftusa.com/support/download/

HiJackThis: - Free

Go to
http://computercops.biz/downloads-cat-14.html ,
or
http://www.aumha.org/a/parasite.php#hjt
and download HiJackThis. Unzip to a folder other than your Desktop or the
Temp folder, doubleclick HiJackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button. Press that, save the log some place you remember where it is.
Most of what it lists will be harmless or even required, so DO NOT fix
anything yet.

Open the copy of your log in NotePad and make a copy. Then you can go here
to post you log:

Jim Eshelman's site here:
AumHa Forums - HiJackThis section:
http://forum.aumha.org/

Spyware and Hijackware Removal Support, here:
http://216.180.233.162/~swicom/forums/

or Net-Integration here:
http://www.net-integration.net/cgi-...86d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949

or Tom Coyote here: http://forums.tomcoyote.org/index.php?act=idx

<<DO NOT POST YOUR LOG FILE TO THIS NEWSGROUP>>

You will need to register to open a new thread to post you log. It is free,
and no one will Spam you, it is one of many that provides this service. Once
registered, go to the HiJackThis section on the forum list and click to
open. Then start a new post and post your log. The experts there will
analyze the log and report back the results. Please allow at least a few
hours or a days time for a response, depending on when you post the log

Remember, you must return to the HJT site to get your answer. It is a good
idea to click the "Notify" box so that you will get an electronic
notification by e-mail to let you know when a response has been posted.
But, you must still return to the site of your answer

HJT Tutorial
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42


Hope this helps.

Jan :)

Smiles are meant to be shared,
that's why they're so contagious.

Please reply to the newsgroup so others may benefit.
Replies are posted only to the newsgroup for the benefit or other readers.

How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm
http://home.satx.rr.com/badour/html/post.html
 
Jan, thanks for trying to help once again. I will certainly try these suggestions. Again, thanks. JD
 
Back
Top