Malware Removal Forums

Hijacked with CoolWWWSearch.WCADW, HJT Log enclosed. (HELP!)

SteveB · 2005-03-22T20:57:14+00:00

Hi I've been infected with a variant of CWS which I can't seem to permantley delete. I use Adaware 6.0, SpyBot S&D 1.3, Microsoft Antispyware, SpyBlaster & Browser Hijack Blaster, all of which seem to be able to remove CWS from my system, but after a reboot, it always returns. At present, my Default Search page has changed to savehits.com rather than Google. Being a new, basic user. I hoped that the above programs would clear it, but since they haven't worked, I'd appreciate any expert help available in getting rid of this Spyware. Many thanks in advance. Here is my HJT log Logfile of HijackThis v1.99.1 Scan saved at 20:46:28, on 22/03/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spool

37 min read

LDTate

March 28, 2005, 12:03 AM UTC

Great job

You're more then welcome.
Glad we were able to help