Recently, Microsoft AntiSpyware always report when I login to one of the user account on my computer that I have CoolWebSearch and ask me if I want to remove it or not. I click "Remove" and then scan the system. BUT after I logoff then login again, Microsoft AntiSpyware will report me again that I have CoolWebSearch and ask to Remove. No matter how many time I remove it, it will come back again.
I'm also using Spybot Search&Destroy and AdAware to scan. Nothing was found.
If this is a bug with Microsoft AntiSpyware?
| CoolWebSearch and Microsoft AntiSpyware | |
|---|---|
| Post #1 Feb 15 2005, 02:56 | |
สวัสดี  Group: Registered Posts: 680 Joined: 4-August 03 From: N 38°47.656' W077°3.756' Member No.: 33,881 
|
|
   |
 
 
|
|
Log In or Register · Advertise on Neowin |
|
| Post #2 Feb 15 2005, 02:59 | |
Neowinian ULTRAKILL  Group: Registered Posts: 13,460 Joined: 30-September 01 From: Ottawa, On Member No.: 1,419
|
QUOTE(Kasteo @ Feb 14 2005, 18:56) If this is a bug with Microsoft AntiSpyware? [right][snapback]585473135[/snapback][/right] no it just keeps reinstalling itself |
|
|
|
| Post #3 Feb 15 2005, 03:02 | |
|
สวัสดี Group: Registered Posts: 680 Joined: 4-August 03 From: N 38°47.656' W077°3.756' Member No.: 33,881
|
QUOTE(Rudy @ Feb 15 2005, 02:59) no it just keeps reinstalling itself [right][snapback]585473141[/snapback][/right] And then how can I remove it because Microsoft AntiSpyware, Spybot S&D and AdAware can't find anything when scan the system? |
|
|
|
| Post #4 Feb 15 2005, 03:05 | |
|
Egyptian Prince  Group: Registered Posts: 2,917 Joined: 22-September 04 From: East Brunswick, NJ Member No.: 72,539
|
CWCleanner
|
|
|
|
| Post #5 Feb 15 2005, 03:07 | |
|
Resident Fanatic Group: Registered Posts: 504 Joined: 19-March 03 From: Atlanta, GA Member No.: 23,908
|
Use CWShredder
|
|
|
|
| Post #6 Feb 15 2005, 11:31 | |
Resident Elite  Group: Registered Posts: 1,957 Joined: 5-February 03 Member No.: 22,482
|
try webroot spyware. That detects CWS...
|
|
|
|
| Post #7 Feb 15 2005, 12:26 | |
Neowinian Senior Group: Registered Posts: 3,377 Joined: 18-March 04 From: United Kingdom Member No.: 50,479
|
The problem wasn't detection, MSAntiSpyware detects CWS, and uses a hell of a lot less resources that SpySweeper
|
|
|
|
| Post #8 Feb 15 2005, 12:32 | |
local know-it-all idiot  Group: Registered Posts: 25,341 Joined: 22-March 02 From: Kanzem, Germany Member No.: 10,955
|
cwshredder
|
|
|
|
| Post #9 Feb 15 2005, 14:46 | |
Neowinian Senior Group: Registered Posts: 2,847 Joined: 6-July 03 From: Norfolk, VA Member No.: 32,187
|
check make sure you don't have a trojan horse..
http://www.symantec.com/avcenter/venc/data/trojan.norio.html edit: also look for an app called WINPROC32.EXE |
|
|
|
| Post #10 Feb 15 2005, 14:50 | |
Neowinian Senior Group: Banned Posts: 3,169 Joined: 29-August 04 From: Bogotį.Colombia Member No.: 69,181
|
maybe it's a trojan,u should check out what procceses u are running.or type "msconfig" and take a look of suspicious processes run on startup
|
|
|
|
| Post #11 Feb 16 2005, 08:19 | |
|
Neowinian²  Group: Registered Posts: 141 Joined: 19-November 02 Member No.: 19,448
|
stop everything THEN run the cleaner then check out whats what in the startup group 'msconfig'
|
|
|
|
| Post #12 Feb 17 2005, 01:33 | |
A Perfect Crystal, A heart of Ice - Frozen Forever Group: Registered Posts: 749 Joined: 26-August 04 Member No.: 68,663
|
Spyware, etc are getting smarter.
They keep two processes resident, and use them. They run checks on the other process, if it fails they start another one. You can use a different process monitor to kill both at once - I use Process Explorer, but even this fails sometimes. Other times, what It is detecting is a false positive. There may be a trace that has not been removed, but because they are all not there, MS cannot remove it. I had this with 4 traces with spybot the other day. I removed 2 traces manually - the other 2 didn't exist, and no more problems.' Boot into safemode. Use Spybot, MS ASB, and Adaware/spywseeper to clean what you can. Then using Hijack This, do the rest by hand. |
|
|
|
| Post #13 Feb 17 2005, 01:53 | |
RUN!!!!!  Group: Restricted (profile) Posts: 5,443 Joined: 21-October 03 From: Katina Member No.: 38,325
|
CoolWeb is notorious for being difficult to remove.
|
|
|
|
| Post #14 Feb 17 2005, 05:43 | |
Resident Fanatic Group: Registered Posts: 930 Joined: 26-October 04 Member No.: 77,937
|
Disable your System Restore. Right Click My Computer > Properties > System Restore
|
|
|
|
| Post #15 Feb 17 2005, 05:53 | |
Cache-22 Group: Registered Posts: 1,663 Joined: 15-November 01 From: Renaissance Member No.: 3,679
|
QUOTE(Fighter-X @ Feb 16 2005, 23:43) Disable your System Restore. Right Click My Computer > Properties > System Restore [right][snapback]585485904[/snapback][/right] Nice sig jackass. |
|
|
|
| « Older · Internet, Network & Security · Newer » | |
2 Pages 
[1] 2 ... Next
|
|
