[b] HELP PLEASE!!! Masive Virus Attack!!![/b]

[abeoffdg]

[blue]I a working on Windows XP Home Edition SP2 and some virus or hijack or what ever spyware maniac has cought in to my computer I have Zone Alarm Firewall and the Windows Firewall runing, I have spybot, ADware, Giant, and Avast Anti Virus software installed.[/blue]

No one of these software could delete this spyware or what ever it is - COOL

http://WWWSEARCH

- and some of the files related to it.

I tried to do a system restore it stalled it doesn't work, I tried to run this anti spyware/Virus on Safe Mode still it doesn't work.


Please anyone who can help me will be greatly appreciated!!!

 

[Frank4d]

Download CWShredder

http://majorgeeks.com/download4086.html

Temporarily disable System Restore.
Restart the computer in Safe Mode.
Run CWShredder.
Restart the computer in normal mode (and re-enable System Restore if it was enabled before).
If that doesn't fix it... Download HijackThis

http://www.spychecker.com/program/hijackthis.html

Run a scan, save the log (text file), and post it here.

 

[shadwell]

Most of these browser hijacks can be removed in safe mode. reboot and hit F8 until the prompt comes up. Also look in your registry under HKEY_LOCAL_MACHINE ---> Software
-->Microsoft-->Windows--->Current Version-->Run. Look for entries that are not related to a program you have installed and delete the entry. Some of these also reside in your System32 folder.
Hope that helps

 

[linney]

Make sure any "Definitions" you are using are up to date.

One firewall is adequate, running two together may cause more problems, each interfering with the other. I suggest you turn off the XP Firewall and rely on ZoneAlarm only.

To improve your general security and prevention of infections, try surfing the internet as a limited user rather than an Administrator. A lot less damage will be caused to your machine if it is a limited user who gets infected.

http://64.233.167.104/search?q=cach...icles.html+The+CoolWebSearch+Chronicles&hl=en

Removing adware & spyware
faq608-4650

HijackThis log file analysis

http://www.hijackthis.de/index.php

http://www.diamondcs.com.au/index.php?page=products

http://www.wilderssecurity.com

 

[linney]

You may have to delete the ;;;;;;;;;;;;;;; off the last link.