-
Posts
-
Okily dokily Mr Ka$h xoxox
Will do when I’m more awake……….. :D
@morticia wrote:
Okily dokily Mr Ka$h xoxox
Will do when I’m more awake……….. :D
It’s better to run scans in Safe Mode too. If the spyware is runnig it cannot be
deleted. :wink:That CWS and it’s varients are a bastage. Only way I finally managed to get them off was a hard drive format.
Righteeeehoooooo.
Turned off system restore – spent 6 hours running ALL: Adware/Spybot/Spyware Blaster/Dr Alex/Ewido/Ad-Aware/MS Antispyware/XosftSpy/then finally CWShredder………
CWS was in 20 register files and only AdwareSpy found them. Spyware Blaster found CWS in my IE Wallpaper Folder. Ran CWShredder to get rid.
Got rid of it all.
Deleted my Recycle Bin.
Rebooted.
Rechecked with CWShredder.
All gone 8)
[re-set my Restore Point].
:D Cheers Mr Ka$h :D
The thing is, I never really had any problems – no additional toolbars in IE, no re-directing…….or so I thought……….When I ran HijackThis it showed 3 x Google pages [www.google.co.uk / au / and com] – but they went via the same IP address……………these were the Hijack pages. It’s only because I was doing a Adware check that I knew I had CWS on my pc. The barstewards.
Thanks for all your help guys ! xoxox
Morticia the dll file is stored in system32 the reason you cannot delete it is because it is used by two processes one being winlogon.exe (registry start up key) and the other being explorer.exe (BHO).
I need you to PM me a hijack this log.
If you’re sure you don’t mind SuperA – I’ll send you a copy over now.
Cheers xoxoxo
Get involved in this discussion! Log in or register now to have your say!