What are these Spybot entries?

WeedoWeedo New
edited January 2005 in Science & Tech
All my machines suddenly started showing these entries after running Spybot 1.3:

CoolWWWSearch.Winfiles
CoolWWWSearch.Leftovers
CoolWWWSearch.Mupdate
CoolWWWSearch.Toolband

Spybot won't delete them and all my other attempts to get rid of them haven't worked either. I tried running Spybot in safe mode, no go. I get this message:

Some problems couldn't be fixed; the reason could be that the associated files are still in use (in memory). This could be fixed after a restart. May Spybot run on your next system startup?

It doesn't fix them after a restart either.

Anyone know what this stuff is? Looks like spyware of some sort to me.

Comments

  • DexterDexter Vancouver, BC Canada
    edited January 2005
    It's CoolWebSearch.

    Grab CWShredder from our Security Downloads page (see link in my sig) and run it. Should fix it for you.

    Dexter...
  • WeedoWeedo New
    edited January 2005
    I'd already run it. It said my system was clean. I reran Spybot and these entries still appeared.
  • DexterDexter Vancouver, BC Canada
    edited January 2005
    Does Spybot tell you where they are located?

    Dexter...
  • WeedoWeedo New
    edited January 2005
    Looks like they are located in the registry. There's a path.

    So I went into the registry and manually deleted those entries and then reran Spybot and they didn't appear again.
  • DexterDexter Vancouver, BC Canada
    edited January 2005
    Probably leftovers from the infection that weren't hurting anything, but we're still being reported. Glad you got it sorted.

    Dexter...
  • WeedoWeedo New
    edited January 2005
    Yeah... thanks for the nudge in the right direction.
  • DexterDexter Vancouver, BC Canada
    edited January 2005
    :)

    Dexter...
Sign In or Register to comment.