PDA

View Full Version : What are these Spybot entries?


Weedo
4 Jan 2005, 10:46pm
All my machines suddenly started showing these entries after running Spybot 1.3:

CoolWWWSearch.Winfiles
CoolWWWSearch.Leftovers
CoolWWWSearch.Mupdate
CoolWWWSearch.Toolband

Spybot won't delete them and all my other attempts to get rid of them haven't worked either. I tried running Spybot in safe mode, no go. I get this message:

Some problems couldn't be fixed; the reason could be that the associated files are still in use (in memory). This could be fixed after a restart. May Spybot run on your next system startup?

It doesn't fix them after a restart either.

Anyone know what this stuff is? Looks like spyware of some sort to me.

Dexter
4 Jan 2005, 11:10pm
It's CoolWebSearch.

Grab CWShredder from our Security Downloads page (see link in my sig) and run it. Should fix it for you.

Dexter...

Weedo
5 Jan 2005, 12:19am
I'd already run it. It said my system was clean. I reran Spybot and these entries still appeared.

Dexter
5 Jan 2005, 12:39am
Does Spybot tell you where they are located?

Dexter...

Weedo
5 Jan 2005, 1:18pm
Looks like they are located in the registry. There's a path.

So I went into the registry and manually deleted those entries and then reran Spybot and they didn't appear again.

Dexter
5 Jan 2005, 6:17pm
Probably leftovers from the infection that weren't hurting anything, but we're still being reported. Glad you got it sorted.

Dexter...

Weedo
5 Jan 2005, 7:01pm
Yeah... thanks for the nudge in the right direction.

Dexter
5 Jan 2005, 8:14pm
:)

Dexter...