Re: I feel like someone has taken over my computer!!!

From: Mike Burgess (winhelp2002_at_spamthis.com)
Date: 01/10/04


Date: Sat, 10 Jan 2004 05:18:40 -0500

William,
find-itnow.com = CWS.Alfasearch.2 (coolwebsearch trojan)

AKA: [W32.Bizten][W32.Hostidel.Trojan][TROJ_HOSTIDEL.A]

How to remove Coolwebsearch and affiliates
http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch

Note: this type hijack indicates an unpatched machine, that is lacking
in "Defense". Please visit Windows Update to avoid these exploits.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 01-08-04]
Please post replies to this Newsgroup, email address is invalid

--
"William Cook" <wcook@recycled-tech.com> wrote in message
news:08fe01c3d66b$7060e970$a101280a@phx.gbl...
> I'm running XP Pro
> Every single time I close and then re-open IE it takes me
> to http://www.find-itnow.com/search.html No matter that I
> set it to go elsewhere on startup. It gets rewritten
> every time its restarted. Not only that, but my favorites
> will all be gone and reset to a list of porn pages. So i
> can never store somewhere I have been and may want to go
> back.  I have deleted cookies, temp files, ran Norton
> antivirus, I have norton firewall up and running and
> still this happens. I can be in the middle of bidding on
> something on ebay when all of a sudden my computer will
> just start launching into a spasm of multiple browsers
> openings, all Porn. It takes me about 10 minutes to get
> them all closed and when I do, it only takes 10 -15
> minutes before it all starts over again. I have ad-aware
> on my computer and everytime I run it i get 5 - 10 ads
> burried in my computer. The wierd thing is all I have
> been to is Ebay. Can someone please help me. I'm going
> nuts!!!
> Respond please to wcook@recycled-tech.com


Relevant Pages

  • Re: Strange Link Placement
    ... runsearch.com = CWS.Mupdate (coolwebsearch trojan) ... this type hijack indicates an unpatched machine, ... Please visit Windows Update to avoid these exploits. ... > then, Kazaa was not running. ...
    (microsoft.public.security)
  • Re: homepage is reset to unwanted site, possible virus
    ... magicsearch.ws = CWS.Smartsearch.4 (coolwebsearch trojan) ... this type hijack indicates an unpatched machine, ... Please visit Windows Update to avoid these exploits. ... Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Browswer will not open at all.
    ... Winshow.dll = Coolwebsearch trojan ... this type hijack indicates an unpatched machine, ... Please visit Windows Update to avoid these exploits. ... > the latest IE 6 setup but trying to update, ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Start page and potential virus.
    ... search-space.com is a rather old Coolwebsearch trojan. ... this type hijack indicates an unpatched machine, ... Please visit Windows Update to avoid these exploits. ... > I've encountered a problem with my start-page option. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Webpage error - http:///?
    ... "to an error page and http:/// " = coolwebsearch trojan ... this type hijack indicates an unpatched machine, ... Please visit Windows Update to avoid these exploits. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)