Unsure about an Ad-Aware search

stpn28stpn28
edited January 2006 in Spyware & Virus Removal
A HJT and a Spybot search return nothing but Ad-Aware keeps alerting me about a CoolWebSearch problem. The problem is that some of the websites/forums agree it's spyware and other say it's nothing.

Here are the listings in question:

C:\WINDOWS\hosts -(this was a problem and was fixed but still shows up)

C:\WINDOWS\wplog.txt

HKEY_CURRENT_USER:software\microsoft\internet explorer\main "Search Bar"

HKEY_CURRENT_USER:software\microsoft\internet explorer\main "SetHP"

HKEY_CURRENT_USER:software\microsoft\internet explorer\main"Start Page" (about:blank)

HKEY_CURRENT_USER:software\microsoft\internet explorer\main"Use Search Asst" (no)

HKEY_CURRENT_USER:software\microsoft\internet explorer\search\searchproperties\en-us "Panel@Web"

HKEY_CURRENT_USER:software\microsoft\internet explorer\settings "ControlID"

HKEY_CURRENT_USER:software\microsoft\internet explorer\settings "GUID"

HKEY_CURRENT_USER:software\microsoft\windows\currentversion\internet settings"ProxyEnable" ()

HKEY_CURRENT_USER:software\microsoft\windows\currentversion\policies\explorer "NoActiveDesktopChanges"

HKEY_CURRENT_USER:software\microsoft\windows\currentversion\policies\system "Wallpaper"

HKEY_LOCAL_MACHINE:software\microsoft\downloadmanager

HKEY_LOCAL_MACHINE:software\microsoft\internet explorer\main"Start Page" (about:blank)

HKEY_USERS:.default\software\microsoft\internet explorer\settings "GUID"

HKEY_USERS:.Default\software\microsoft\internet explorer\settings "TODO_Item_Data3_1"

HKEY_USERS:.Default\software\microsoft\internet explorer\settings "TODO_Item_Data3_2"


Thanks for any help I can get!

Comments

  • CrunchieCrunchie Mandurah. Western Australia. Member
    edited January 2006
    Download CWShredder 2.19 from here and run it.[/b] Select the fix button & it will fix everything related to CoolWebSearch that is stored in it's database. Close ALL windows, including Internet Explorer, before running CWShredder. Reboot.

    The info you posted isn't really telling me anything.
  • stpn28stpn28
    edited January 2006
    Crunchie wrote:
    Download CWShredder 2.19 from here and run it.[/b] Select the fix button & it will fix everything related to CoolWebSearch that is stored in it's database. Close ALL windows, including Internet Explorer, before running CWShredder. Reboot.

    The info you posted isn't really telling me anything.


    The infected computer is on Win 95, I don't know if that program is for older systems. I searched on it and it seems to not be for Windows 95.

    The info in my post is for anyone who knows if these things are part of windows/IE and showing up as a mistake, or are they part of CoolWebSearch?
  • CrunchieCrunchie Mandurah. Western Australia. Member
    edited January 2006
    Those registry entries all look to be legitimate Windows entries.
  • stpn28stpn28
    edited January 2006
    Crunchie wrote:
    Those registry entries all look to be legitimate Windows entries.


    Okay, thanks for your help.
Sign In or Register to comment.