CWShredder and two things i cannot remove with it.

  hugh-265156 01:13 24 Oct 04
Locked

Hi folks i hope you can give me some info please on 'CWS.jksearch' and 'CWS.HiddenDll'

i just updated CWShredder to the latest version after seeing this posting click here cheers but when i run a 'fix' it finds the two items above and tells me they are removed. nothing is showing in the recycle bin even though i have ticked the box to move deleted files to here and when i run another scan it finds and removes them again??

i have had a google and noticed a lot of postings from people with the same question but no answers really so does anybody know if this is just a bug, false positive etc with version 2 or something else?

ps. adaware, spybot, a squared, avg etc all kept up to date as is windows xp.

ta.

  no-name 10:05 24 Oct 04

huggyg71 have you got Spybot installed? It seems there may be some conflict if you have click here

  hugh-265156 00:47 25 Oct 04

thanks no-name yes i do have spybot installed as above and use it regularly along with the others all kept up to date and all they find is cookies.

i have just un installed spybot, deleted the folder left behind by the installer and run regseeker and cleanup to try and get rid of any leftovers, i then restarted windows and run CWShredder again. unfortunatly it still finds 'CWS.jksearch' and 'CWS.HiddenDll' again. :-(

im not going to worry to much as everything else comes up as clean but i will leave this thread open just in case. thanks again.

  hugh-265156 22:50 27 Oct 04

^

  hillybilly 22:52 27 Oct 04

Have you tried Hijack This.

  hugh-265156 23:09 27 Oct 04

yes hillybilly i do have hijack this on my computer but i dont have the experience to decipher the report.

as above im thinking as all my other anti spyware software comes up clean and lots of people have reported the same problem, its just a bug in CWShredder.

i can post my hijack this log if anybody wishes to trawl through it but im more curious really than worried. thanks.

  hugh-265156 16:25 30 Oct 04

^ ta

  Jackcoms 16:29 30 Oct 04

Have you run CWShredder with System Restore disabled?

  hugh-265156 16:33 30 Oct 04

yes thanks i have. should have added to my posting at Mon, 25.10.04 | 00:47 above that i disable system restore before removing spybot to test no-name`s link.

  Nellie2 00:15 31 Oct 04

Post your hijack log, I'll have a look if you like. Could you double space it as it makes it easier to read on this board... thanks! :)

  hugh-265156 00:31 31 Oct 04

many thanks Nellie2 i didnt want to post this unless sombody asked me to and i know you know your stuff so thank you here you go then in two parts:

part 1:

Logfile of HijackThis v1.97.7
Scan saved at 00:22:00, on 31/10/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

C:\Program Files\CachemanXP\CachemanXP.exe

C:\Program Files\Executive Software\Diskeeper\DkService.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\ZoneLabs\vsmon.exe

C:\Program Files\RealVNC\VNC4\WinVNC4.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\System32\svchost.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe

C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Internet Bandwith Stats\RAS_GS.exe

C:\Program Files\MSN Messenger\msnmsgr.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\WinTV\WinTV2K.EXE

F:\Backups\Various\Security\Hijackthis\HijackThis.exe


R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =

click here*click here

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =

click here*click here

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = click here

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

click here*click here

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =

click here*click here

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =

click here*click here

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = cache1-blfs.server.ntli.net:8080

This thread is now locked and can not be replied to.

What is Amazon Go and will it come to the UK? The store without checkouts or queues

1995-2015: How technology has changed the world in 20 years

Hands-on with the Star Wars fighting drones you can fly yourself

iPhone 9 and beyond: 32 amazing future smartphone developments - graphene, supercapacitor…