Support NeoGAF

[EGM92]

Hey guys,

I'm lost... I have this spyware installed in my system and it's driving me CRAZY!!, it's called COOLWWWSEARCH. I tried CWSHREDDER, Hijackthis, AD-aware SE Professional, Spyware Doctor, Spysubtract Pro, and a couple of other programs and it can't get rid of this! It's taking over all my webpages, I've been trying to get onto the forum for 2 hours! PLEASE I NEED SOMEONE'S EXPERTISE... HERE'S WHAT IT LOOKS LIKE.

http://img63.exs.cx/my.php?loc=img63&image=a2-untitled1.jpg

Please I need to get of this!! IT WON'T EVEN LET ME SEARCH THE NET!

Thanks in advance,

EGM92

 

[Ecrofirt]

CWShredder didn't get that?

 

[EGM92]

CWShredder didn't even detect it

 

[Ecrofirt]

you're sure you have the latest version, right?

 

[EGM92]

CWSHEDDER 2.0 even the CWSHREDDER thats build into SpySubtract

 

[Red Dolphin]

Honestly how do ppl pick this shit up?

 

[Gattsu25]

http://www.majorgeeks.com/download4113.html

try that

 

[Hooker]

I work at a ISP techincal helpdesk and I deal with this shit daily. I had this one customer yesterday who kept on claiming he downloaded that same shit of the microsoft website.



The things they do to make them look less stupid.

As for this problem, Ad-Aware usually get's rid of it. Then download either Firefox or Opera

 

[Fatalah]

well, I'll tell you how from experience. I'm on top of spyware like a madman...but my friendddd, well he likes to dabble in serial numbers and cracks for programs. Often in a zip file with a serial #, there could be a spyware exe file thats only purpose is to f/ck things up.

You click it...and nothing appears. At that moment, about 15 different spyware thingies load into your registry and program files. The worst experience of my lifetime.

Adaware got rid of alot of it, Spybot did too... Hijack this was the only way to get rid of everything.

beware of gens.exe

 

[SpoonyBard]

Hmm... I think my brother had this one on his computer. I tried Spybot S&D and Adaware, but they couldn't fully erase everything. I had to boot to console and manually delete what was in Downloaded Program Files directory (and in some other dirs, can't remember). And the registry also had all kinds of shit I had to erase.

I then hid all Internet Exploder stuff from his computer so he has to use Opera and Firefox. Should have done that ages ago.

 

[Ecrofirt]

start.exe - whoever doesn't immedietly think that thing is spyware/virus filled is an idiot

 

[dark10x]

Honestly how do ppl pick this shit up?

It's easier than you think...

My machine is typically spyware free, but I just re-formatted my PC recently and on the first day, I attempted to visit Google. However, I made a mistake when typing and ended up with something that wasn't quite google. Whatever page it was, spyware was immediately installed... :\

I got rid of it quickly, but I was still very angry. One typing error resulted in the installation of spyware...

 

[Hooker]

They had this great test on a Dutch website.

They installed WinXP SP1 fresh onto a new machine. Nothing else, and connect it to the internet. No opening of pages, just a connection. In 4 minutes time the PC was already riddles with spyware, virusses etc. to the point of not functioning properly anymore.

 

[pnjtony]

what ISP do you work for?

 

[dark10x]

One thing that fooled me was some Intel utility that I installed. I just upgraded to a new motherboard and CPU, and it included a gigabit Intel ethernet port. I installed a utility from Intel along with it...

The application is named "PRONoMgr.exe". I saw that running in my processes and thought I had been invaded by spyware right off the bat.

 

[Darias]

EGM - reboot into safe mode, then run adaware after completing an online product update.

Run CWShredder.

Run spybot - also after update.

While windows is in safe mode, virus / spyware removal programs have a lot easier time deleting shit than when windows is booted normally, because spyware and viruses work very hard to not get deleted.

In safe mode, they are usually not loaded.

Oh, before you do the above, or if that doesn't work, run msconfig, click startup, and PM me the list. I'll let you know what to uncheck, then repeat above.

That should clean you up.