Printable View
I am seriously amazed that CWShredder is not fixing this. I have not been able to get a hold of merijn yet as hes in university now. As soon as I can talk to him or someone else who knows ill get back to you. What I can suggest is posting this log on Http://forums.spywareinfo.com There are a lot of experts there that may know something we dont know.
no need for that pugs, just because you don't have the answer.
Quote:
Originally Posted by jstut
OK, the two files shown in bold - find them and delete them in safe mode. If they won't delete you will have to get a 98 boot disk and do it in dos.
Geeksuperhero .... not heard of this but it's supposed to stop hijacks cold - have you used it? the last 3 tools here are useful Judging by the file missing entry for geeksuperhero, it may have been corrupted.
Exactly how did you delete your temporary internet files?
Did you check in
c:\temp
c:\tmp
c:\windows\temp
c:\windows\tmp
as well for temp files?
There is also a folder called c:\windows\downloads which may have stuff in it.
Thanks Pugs!!! I appreciate the assistance.
Thanks NooNoo I'll delve in.
PC is out for a couple of days....
Nuch Grats for your assistance.
Cleaned up for a while, but this thing keeps coming back.
Any suggestions?
Where else could this guy be coming from?
Running Zone Alarm, Spyguard, etc, but can't seem to stop the source form changing page.
How about the teatimer add-on from Spybot? would that not prevent the registry update?Quote:
Originally Posted by jstut
Check what services are running. Either post them here or google for the ones you dont know of. WIth coolweb a lot of times there is a service that installs it again.
Lost me there....teatimer?Quote:
Originally Posted by Garak
Little assist. When you say "services".Quote:
Originally Posted by pugs
jstut
Tea timer is part of spybot. Have you read this advice here?
Services are what starts up with windows - in windows ME you press ctrl, alt, del to view whats running in background. Having said that, some of these spyware apps hide themselves from there.
Go through your program files directory in safe mode with hidden and system files on. List the folders shown there.
Besides all the great suggestions you have recieved, have you tried This yet? The 30 day trial is a full version. I have run into this about:blank on quite a few clients lately. By using this and the other suggestions I have cleaned them up in about 10 - 20 minutes. Cheers.Quote:
Originally Posted by jstut