Over 1 million tech questions and answers.

Solved: Keep getting CoolWebSearch (CWS) when running SpySweeper

Q: Solved: Keep getting CoolWebSearch (CWS) when running SpySweeper

I keep getting this when I run SpySweeper. It gets removed and quarantined, but after a while it shows up again. I've been reading up on it on the web and it sounds like it keeps renaming and installing itself unless you totally remove it.

Anyone have any instructions on which program to use to totally remove it? I found this article http://silentrunners.org/sr_cwsremoval.html, but when I ran Registrar Lite, it didn't find anything in the AppInit_DLLs value, so I couldn't proceed with the rest of the steps.

I don't know if this is the culprit, but my IE seems to running a bit slower than usual lately.

THanks,
Jerold

RELEVANCY SCORE 200
Preferred Solution: Solved: Keep getting CoolWebSearch (CWS) when running SpySweeper

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Solved: Keep getting CoolWebSearch (CWS) when running SpySweeper

Read other 16 answers
RELEVANCY SCORE 54.8

I ran spysweeper on a computer and it found 21 programs and over 100 entries. Running Windows XP. Obtaining IP (or should be) from a Router.

The problem is that after I rebooted the computer I could not access the Internet.

I tried:

IPConfig (release & renew), but get error that IP Address Could Not Be Renewed.
Manually configuring the TCP/IP protocol.
Netsh (netsh int ip reset new.txt)

None of the above fixed the problem. Some additional information: the computer accessed the Internet just fine right before the scan/clean. The IP address that is being assigned is: 169.254.117.209 (Generated by Automatic Private Address). The cable still seems to be connected and working just fine (plugged in and light a shining).

I appreciate the help.
 

A:Can't access internet after running SpySweeper

A pretty common issue, try the WINSOCK fix first, if that doesn't do the trick, do the reset stack process.

WINSOCK Fix XP: http://www.spychecker.com/program/winsockxpfix.html

Reset TCP/IP Stack: http://support.microsoft.com/default.aspx?scid=kb;en-us;299357&Product=winxp
 

Read other 3 answers
RELEVANCY SCORE 53.6

I just loaded Norton Internet Security. It and along with Spysweeper seem to slow my old PC down. Is there a recommended set of optional settings for one or both that provides protection without slowing my PC too much?
 

A:PC is running slower since installation of Norton Internet Sec. and SpySweeper

Norton is an energy hog... I got rid of it after five years and replaced it with AVG free edition... no more problem...
 

Read other 3 answers
RELEVANCY SCORE 53.6

Hello again!
Another new challenge! Spy Sweeper was running a full scan and was near the end. Suddenly the screen went black and then the image that came back, looked like a cross between my screensaver, with a water effect, and the wallpaper (each has the same image). It was frozen in that strange manner and totally unresponsive. This type of event has happened three times in two days. Each time a different program was running. Norton 360 is the main security suite I run. It seems Norton wasn't catching some of the nasties so I was trying Spy Sweeper at the recommendation of a friend. Also, I use the free version of Antivir every other day. Perhaps I'm causing the problems. I stop Norton's Antivirus/Spyware service before I run these extra programs. Then I shut them down and turn Norton's Antivirus/Spyware back on.
Also, the computer has started to hang fairly frequently. Much appreciation for any help.
 

A:While running Spysweeper it went to a black screen like the computer was shutting do

try updating your graphic card, (use this: http://downloadmirror.intel.com/15280/a08/win2k_xp14323.exe) Those On-boards are a *****! is your screensaver a 3d? try switchin to a 2d like the default xp image or marquee (side scrolling text). is that an e-machines computer?
i think i had the same model once
 

Read other 3 answers
RELEVANCY SCORE 48.8

For the past 3 days I have had to call Norton Support to have them re-activate my Norton IS 2008

For some strange reason all of a sudden my Spysweeper has been picking up symlcsv1.exe calling it a :

Profile - Mal/Generic-A
Name Mal/Generic-A
Type Malicious Behavior
Description Mal/Generic-A is a malicious file for the Windows platform.

And It has been telling me that the above is associated with 1 of my Norton Symantec Files

As soon as Spysweper Quarantines the related Norton file, my Norton Is 2008 then automatically becomes completely De-activated

Here is my :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 632 PM, on 5/18/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Gris... Read more

Read other answers
RELEVANCY SCORE 47.6

Greetings,

I have purchased Webroots Spysweeper, and after installing it and starting a full system sweep after about 2 mins I get a blue screen referring to something about " Memory Dump " ??? and then My Pc shutsdown , after I uninstall Spysweeper there is no problem with My Pc ..!!!, can Anyone shed any light on My Probelm please ...????.

Many Thanks.

Jumbo 1
 

A:Solved: SpySweeper

Please let me know that do you have any other antivirus program installed on your computer?
 

Read other 3 answers
RELEVANCY SCORE 47.6

Hi. I just downloaded Spysweeper I had from a while ago, and every time I run the application it says,
An error occurred in the application. All I can do is Close it.
Can anyone help? Thanks!
 

A:Solved: Spysweeper Help

Did you try uninstalling and reinstalling it?
 

Read other 2 answers
RELEVANCY SCORE 47.6

I was prompted to upgrade my Webroot Spysweeper to a new version. After the installation process it changed from Spysweeper to Webroot Antivirus with Spysweeper. Tried to go back to the old Spysweeper version but could not. Does this mean if I want to use it I must uninstall my existing antivirus program? I don't want to use webroot as my antivirus but only it's antispyware. Any suggestions?

A:webroot spysweeper changed to webroot antivirus with spysweeper may cause conflict?

Using two antivirus programs can cause conflict, however, I would recommend either A. uninstalling your current antivirus or B uninstalling webroot and using something else, such as Spybot Search and Destroy, Ad Aware, Spyware doctor, or SuperAntiSpyware.

Read other 2 answers
RELEVANCY SCORE 47.2

I didnt put this program on my computer.. (spysweeper) my cousin did after re-formating everything after a few viruses
it recently came up saying, please update to version 4. i went onto the update page, it asked for email address and name.
i know his name but his email is out of the question.
is there anyway i can update it without disturbing him or having to buy the expensive update??

thanks
jack
 

A:Solved: Webroot Spysweeper

Read other 6 answers
RELEVANCY SCORE 47.2

What are the standard settings that you should have when scanning with ewido and spysweeper or just having them on your computer in general? I downloaded them about a month ago to help with something and I have used them sparingly since. Please let me know what settings I should have on/off, ect whenever you have a chance. Thanks so much.
 

A:Solved: Ewido and Spysweeper

Hi, Both of those programs have trial versions as well as pay-for, we are generally working with the trial versions here.

The updates expire but the programs will continue to work, though you will have no protection against the newer malwares.

SpySweeper has some flexibility:

For a real heavy duty full scan have it this way, and scan in Safe Mode (to look for Rootkits etc) But> you have to make the changes in Normal mode first, then boot up in Safe Mode!
Update to the latest definitions. (The free version does not update after the 15 day trial period, so I am assuming you have the paid for version installed).
Once the definitions are installed, click Options on the left side.
Click the Sweep Options tab.
Under What to Sweep please put a check next to the following:
Sweep Memory
Sweep Registry
Sweep Cookies
Sweep All User Accounts
Enable Direct Disk Sweeping
Sweep Contents of Compressed Files
Sweep for Rootkits-Make sure you DO check to do this one!
Please UNCHECK Do not Sweep System Restore Folder.

You should do the scan in Safe Mode.

That's the way I usually keep it set. There are times you have to turn the shields off to make changes,this is how you do that:

http://forums.techguy.org/security/110854-security-help-tools.html

Scroll down the page to the RED link about "Temporarily turning off protecion programs when fixing malware", it explains how to turn things off when you are scanning or fixing malware....

Here are the steps for SpySweeper:
... Read more

Read other 1 answers
RELEVANCY SCORE 46.8

A couple days back, I started to get some annoying popups on my home PC. I've tried sweeping with:

-Spysweeper
-AVG Anti-Virus
-Ad-Aware SE

And, while they usually find something, or several things, the problem doesn't seem to get fixed. Spysweeper says I have 4 things in Quarantine:

-trojan wopla
-trojan-relayer-midlenet
-trojan-agent.gen.x
-trojan.gen

But, the last time I swept, there were a couple of items that if found that it said it could not quarantine. Unfortunately, I don't recall what these were specifically, and can't seem to find it listed there.

AVG Anti-Spyware finds:

-Proxy.Small.ck
-Proxy.Small
-Downloader.Agent.acl

And, some tracking cookies.

Ad-Aware finds a couple of MRU Objects, which it categorizes as "Privacy Objects"

Also! I've noticed that the iexplore.exe process is constantly running in my task manager, which seems unusual to me, especially with no IE instances open at all. I have tried to end the process, but it pops back up in a few seconds.

So, I'm not sure how to get these things fixed, but, based on the threads I've browsed here, it seems likely that one or more of you will be able to help me nail this thing. Thank you in advance.

As is customary, here is my most recent HiJackThis! log file:

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 8:04:34 PM, on 9/27/2007
Platform: Windows XP (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WIN... Read more

A:Solved: Spysweeper doesn't fix this - Trojans

Read other 12 answers
RELEVANCY SCORE 46.4

I've been invaded with CWS for the past 2 days. I've gotton rid of it 2 times and it will return on next boot up. Here's my HijackThis Log. Please advise. Thanks

Logfile of HijackThis v1.97.7
Scan saved at 06:07:31 PM, on 4/29/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\SYGATE\SPF\SMC.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGSERV9.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGEMC.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\PROGRAM FILES\EFFICIENT NETWORKS\ENTERNET 300\APP\ENTERNET.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\FREERAM\FREERAM.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE
C:\MY DOCUMENTS\MY APPS\HIJACKTHIS_APP.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.superwebsearch.com/ie/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.superwebsearch.com/ie/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.superwebsearch.com/ie/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.superwebsearch.com/ie/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://rd.yahoo.com/cust... Read more

A:[Solved] CoolWebSearch Won't Go Away!

Read other 7 answers
RELEVANCY SCORE 46.4

hi guys I was browsing the net , when my antivirus detected the the js seeker virus , it got quarantined so no damage was done , I decided to run ad aware and spybot just to be on the safe side , adware detected coolwebsearch on the computer ,I proceded to quarantine the entries , then I ran hijackthis, It looks that everything was removed , but I remenber from the forum that in order to remove coolwesearch entries I need to run another utility ,is this acurate , I'm posting my log to see if everithing is fine, thanks
Logfile of HijackThis v1.97.7
Scan saved at 12:42:47 PM, on 3/1/04
Platform: Windows 98 Gold (Win9x 4.10.1998)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\RTVSCN95.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\DEFWATCH.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\VPTRAY.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\UNZIPPED\HIJACKTHIS2\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://201.1.2.254:4100/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by EarthLink, Inc.
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;<local>
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:... Read more

A:[SOLVED] coolwebsearch

Read other 13 answers
RELEVANCY SCORE 46.4

I have been invaded by these 2 critters & cannot get rid of them. Ad-Aware Personal catches them & says that they are removed, but they are still there. Everything is up to date including the AdAware VX2 removal (it does not even notice them). SpyBot, Spyferret, XosoftSpy, and SpySubtract does not notice them. They are really messing up my system: it's very slow, I get re-direct ad sites, & it seems to be trying to interfere with my McAfee tools. I have read all of the posted removal instuctions that I could find and have done everyone of them several times each all to no avail. I just spent all morning repeating all of the removal instructions that I've found in safe mode. No luck there either. Does any one have any new ideas?
 

A:Solved: [email protected] and CoolWebSearch

Read other 16 answers
RELEVANCY SCORE 46.4

I also got an error recently from Dr Watson Post Mortem Debugger, just wondering what that is... I've looked at sites saying it's legit and others say something about Acebot.

There was also a problem with something called ibm0001.exe , or however many 0's it had but I deleted that with Hijackthis and I think I fixed it but I'm not sure.

First of all I'm using Windows XP SP2

Well, this is hell...

I've tried finding removal instructions for this, seems that most people have an about:blank problem or something along the lines...
I may have fixed this part of the problem myself so I'm not sure.

I got Ad-Aware SE and it found traces but couldn't remove them, I've used Hijackthis to remove the pest but upon restart it just comes back with a different name... I've also tried CWShredder and it didn't even find the damn thing.

Basically what this does is make popups, even in Firefox and sometimes it creates shortcuts to sites on my desktop.

Oh, some extra info... I also had Spyware Sheriff but managed to get rid of that easily.

I assume this is the pest: O20 - Winlogon Notify: App Management - C:\WINDOWS\system32\h20qlcd51f0.dll (changes names frequently)
But please look at the log, I haven't gotten anywhere try to fix that so there must be more pests.

Here is a Hijackthis log done in Safemode:

Logfile of HijackThis v1.99.1
Scan saved at 8:51:11 PM, on 3/13/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Inte... Read more

A:Solved: CoolWebSearch

Read other 7 answers
RELEVANCY SCORE 46.4

I have a problem that I think is a Coolwebsearch hijacking. It is so severe that it defies AdAware, Spybot S & D, CWShredder, delcwsk, SpyKiller miniremoval, and several other attempts to delete it. I have looked all over the internet for a removal tool to no avail; I have looked on this site, but when I run Hijackthis, I do not see anything that looks suspicious. After this much personal effort, I turn to The Tech Support Guy for help--something maybe I should have done two days ago. I hope someone can lend a hand.
 

A:Solved: Coolwebsearch

Read other 16 answers
RELEVANCY SCORE 46.4

We have picked up the cws variant that Ad-Aware SE will not delete.
When I run Ad-Aware we get several error during scan (Symtray, Mstak, Cpqeadm).
At the end of the scan it shows 20 items of coolweb and 2-4 items of VX2
During removal, an aquarantine list is made but file deletion will will not complete.
We have an older Compaq 600Mhz running dual boot win 98se and win 2000.
Win 98 is up to date but 2000 is not.
I have tried to safe boot but the machine will only safe boot to 2000.

Here is the hjt list.

Logfile of HijackThis v1.99.0
Scan saved at 10:31:36 PM, on 1/11/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SYMTRAY.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON CLEANSWEEP\CSINJECT.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON UTILITIES\NPROTECT.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\QRGWQV.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\CPQEADM.EXE
C:\COMPAQ\CPQINET\CPQINET.EXE
C:\PROGRAM FILES\COMPAQ\DIGITAL DASHBOARD\DEVGULP.EXE
C:\WINDOWS\SYSTEM\PRINTRAY.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\BTTNSERV.EXE
C:\WINDOWS\ptsnoop.exe
C:\WIN... Read more

A:Solved: Coolwebsearch

Read other 16 answers
RELEVANCY SCORE 46

Upon every start of my Compaq notebook, Spysweeper shows a error report alert prompting me to either send the report to Webroot or delete the report. I have done both and the error keeps reappearing on startup. In the report Spysweeper states " Error: Access violation at address 7C9026A2 in module 'ntdll.dll'. Write of address 004055F2." I have went back and forth with Webroot about this with no positive results. They finally told me they cannot help stating it was a Windows problem. I`m running WinXP sp2 Home Edition, IE 6.0. With AVG antivirus, Ad-Aware, Spysweeper 4.5.8, Spywareblaster and Spybot for all my protection. I am a computer novice and would appreciate any help to get rid of this alert.
 

A:Solved: Spysweeper error alert problem

Read other 10 answers
RELEVANCY SCORE 46

Hi all, I'm new, and in desperate need of help...
My OS is Windows 2000 Proffessional, and from what I can determine, I have a nasty CoolWebSearch Infection...my browser is hijacked by one of the about:blank pages, and I am receiving numerous popups, even from behind my firewall...I have a recent HJT log, if that would help...

Any help is appreciated!

~Chibi
 

A:[Solved] CoolWebSearch Infection, please help!

Read other 15 answers
RELEVANCY SCORE 46

Hi,

X-cleaner, spybot, etc. find coolwebsearch. It's amazing because this started within a day of getting this new notebook. I find the registry item given by x-cleaner on hijack this and remove (along with another item I suspect) and on reboot they are back. I have spywareblaster as well and of course firewalls and virus scan.

I'm running xp with sp2 updates.

You can see the 02 no file no name entries on the log. I think the second one appeared after deleting the first entry and rebooting. No software picks that up but if I delete it, it comes back too.

Please let me know if you know how to remove this. What's interesting to me is that my browser doesn't get hijacked as far as I can tell. I don't have pop ups either. I have sometimes had delays when typing on IM.

Thank you so much,

MM

Logfile of HijackThis v1.98.2
Scan saved at 4:01:28 PM, on 10/14/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\S24EvMon.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOW... Read more

A:Solved: CoolWebSearch-can't remove

Read other 16 answers
RELEVANCY SCORE 46

I've read with disgust the many instances of coolwebsearch hijacking. Mine comes with the Vundo virus plus VX2.

I've grabbed most of the tools you mention and attach my HJT log & VX2Finder log.

Any help will be appreciated (and I won't restart my computer).

Logfile of HijackThis v1.97.7
Scan saved at 7:57:12 PM, on 14/12/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Intel(R) Active Monitor\imontray.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\TotalRecorder\TotRecSched.exe
C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-au\msnappau.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Winamp\winampa.exe
C:\PROGRA~1\INCRED~1\bin\IMAPP.EXE
C:\Program Files\Common Files\WinTools\WToolsA.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\MSN Messenger\MsnMsgr... Read more

A:Solved: Another Coolwebsearch Hijack

OK. I know you guys are really busy dealing with this stuff so can't expect a response to every enquiry.

Just wanted to let you know that I solved the problem using advice from the Ad-aware forums .
 

Read other 3 answers
RELEVANCY SCORE 46

hello. i am about to pull my hair, and bang my head on the wall. i'm so frustrated with this. my ie homepage keeps getting hijacked.
HTML:
http://i2.photobucket.com/albums/y21/a5phyxi83d/xnx.png
and i get this icon on the taskbar. i drew because when i take a screencap it disappears.

i also get this add on the top of the screen.

HTML:
http://i2.photobucket.com/albums/y21/a5phyxi83d/xx.png
not mention a popup and some words get linked or squiggle line under to goto:insertword.

now i have downloaded spybot s&d and coolwebsearch.blah is what i get most often. i have also downloaded ad-aware from lavasoft and not i have run coolwebsearchshredder.

NOTES: i have checked for updates and i when i go to add and remove programs it will not let me remove HOME SEARCH ASSISTENT and something called SHOPPING WIZARD.

here are my logs
ADAWARE LOG:
ArchiveData(list 1.bckp)
Referencefile : SE1R87 18.01.2006
======================================================

TRACKING COOKIE
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[0]=IECache Entry : C:\Documents and Settings\Alicia\Cookies\[email protected][2].txt
obj[1]=IECache Entry : C:\Documents and Settings\Alicia\Cookies\[email protected][2].txt
obj[2]=IECache Entry : C:\Documents and Settings\Alicia\Cookies\[email protected][3].txt
obj[3]=IECache Entry : C:\Documents and Settings\Alicia\Cookies\[email protected][1].txt
obj[4]=IECache Entry : C:\Documents and Settings\A... Read more

A:Solved: spyware has taken over ie coolwebsearch

Read other 8 answers
RELEVANCY SCORE 46

Got this nasty little bugger and have been trying to stop it for 3 hours. CWS shredder showed no infection. Ran the latest Adaware and it IDed it as coolwebsearch, but couldn't remove it. I've run HijackThis 4 times for fixes and deleted the .dlls, but reinfection keeps occurring. The .dll name changes every time it reinfects. Here is my current logfile. Thanks in advance for any help you can give me.

Logfile of HijackThis v1.97.7
Scan saved at 8:02:21 AM, on 6/15/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\gearsec.exe
C:\WINDOWS\runservice.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\PROGRA~1\NORTON~2\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\javamf.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe
C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe
C... Read more

A:[Solved] Help please with Coolwebsearch hijacking!

Read other 13 answers
RELEVANCY SCORE 45.6

System: Windows XP, KIS 09
I have been having a problem with MS word being VERY slow, almost frozen, opening up and saving files. Finally discovered that yes, my upgrade of Webroot SS was the root of the problem. Webroot had me do a clean install with new key code, but still having problems with this combo on only 1 of my 2 computers. I think my registry is messed up. Im marking this particular thread closed and will open a new thread regarding installing & upgrading programs and possible corrupted registry.
 

Read other answers
RELEVANCY SCORE 45.6

Where to start, I;m a computer novice but my computer has been getting pathetically slower and often now just freezes and won't do anything, have to switch off at mains and then re-start. Recently my spysweeper updated to a newer version and I have to keep it off or it's virtually at standstill. I had a problem with AVG (free version) and changed to Avast, also zone alarm, superantispyware and have sypbot search and destroy but it too is freezing and has a problem getting rid of ErrorKiller (even in safe mode). I have emptied temp folders defragged and everything I can think of to help to no avail.

Can anyone help me please in very simple non technical terms. Thank you for looking.

This is my hijack this log file

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:12:50, on 29/08/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe... Read more

A:Solved: slow, freezing worse after spysweeper update

Read other 16 answers
RELEVANCY SCORE 45.6

hi my name is holly, and i'm having major pc issues. i am very anal about spyware on my pc. recently, i have been flying high with not a drop on it, no pop ups, no redirecting, no finds in adaware, spybot, no viruses found. until a week ago when i stupidly tried to download a free AIM icon. i got SLAMMED with some of the worst spyware out there, vitural bouncer, bargin buddy, coolwebsearch, addestroyer, you name it, i had it. it was so bad it crashed my pc and stopped internet surfing all together. after much time i removed most of the main programs, deleted registry keys and had adaware from 600 objects down to 10. surfing came back up, but hindered. many popups and redirecting. ie wont function at all. i have some strange things found by my adaware and khuugi (whatever the hell that is) keeps putting itself into the startup. i know there is still stuff installed on my pc and its driving me bonkers, mostly because no search engine or securtiy site even brings up results on it! adaware keeps finding khuugi.exe, coolwebsearch and vx2. i can't get rid of it. i am desperate and finally came here to find some help. i know i will have to create logs, so if anyone can help a desperate girl, i'll be more than happy to follow the directions without question.
 

A:Solved: khuugi, coolwebsearch, vx2 taking over my pc!

Read other 16 answers
RELEVANCY SCORE 45.6

Hello, I have the same problem with that kind of browser hijack.
Here is my HijackThis log file:
Logfile of HijackThis v1.97.7
Scan saved at 20:19:41, on 27/05/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Panda Software\Panda Antivirus Titanium\Pavsrv51.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Panda Software\Panda Antivirus Titanium\AVENGINE.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\Program Files\Panda Software\Panda Antivirus Titanium\APVXDWIN.EXE
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
C:\WINDOWS\System32\GSICON.EXE
C:\WINDOWS\System32\dslagent.exe
C:\WINDOWS\System32\ctfmon.exe
C:\windows\dllhelp.exe
C:\Program Files\Panda Software\Panda Antivirus Titanium\pavProxy.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Propriétaire\Mes documents\Downloads\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://your-searcher.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search P... Read more

A:[Solved] Yoursearcher/CoolWebSearch/Win Min Problem HELP

Read other 13 answers
RELEVANCY SCORE 45.6

HELP!

I currently have the following viruses:
- CoolWebsearch - (Keep adding unwanted favorites in my Favorites folder)
- Searchmaid - Altering webpages (in Safe mode)
- Webtracer - Altering my Homepage to http://all-ru.net/

I have these following programs (Tried installing & Running on safe mode - but still no use):
- CWShredder
- Registry Fix (Not too sure how to use)
- KillBox
- AdAware
- Spybot
- HijackThis
- Stinger
- SpySubtract
- Norton Antivirus

Operating system: XP

HijackThis Log for your information:

Logfile of HijackThis v1.99.1
Scan saved at 10:58:10 PM, on 3/9/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\palmOne\Hotsync.exe
C:\Program Files\interMute\SpySubtract\SpySub.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Documents and Settings\DohDoh\My Documents\Installations\stinger.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe
C:\HijackThis\Hij... Read more

A:Solved: CoolWebSearch, SearchMaid, Webtracer

Read other 13 answers
RELEVANCY SCORE 45.6

This is my girlfriends laptop and I believe that she has aquired some trojans and/or viruses; as the title states. I ran an Adaware, MS Antispyware scan and they fround a few things but all were tracking cookies. Then when I ran a NoAdware scan it found several ~60 other files and registry keys that are associated with coolwebsearch.com and whenusearch.com. I also have run Norton and it found nothing. The HJT logfiles is included. Any help and suggestions would be most appreciated. Thanks in advance for your much need and much appreciated help.

Logfile of HijackThis v1.99.1
Scan saved at 8:56:08 PM, on 11/26/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Synaptics... Read more

A:Solved: coolwebsearch and whenusearch maybe more HJT log included

Read other 9 answers
RELEVANCY SCORE 45.6

About two months ago, I posted on the Malware Forum my computer was infected with a persistent malware named adware-coolwebsearch. My antivirus software--McAfee, can identify the malware but can't remove it. There is a small freewareprogram--cw shredder--that is supposed to get rid of it but, as noticed on Internet posts from others who have had the same problem with McAfee, this software doesn't identify the malware in many cases, mine being one of them. I also used Spyware terminator and Ad Aware and neither could identify it. In my first call to McAfee, the technician said not to worry about it, which was ridiculous because McAfee kept sending warnings every couple hours that my computer was at risk. The second technician identified it and said he had gotten rid of it manually. He didn't.

Eventually, I was able to find out that the malware resided in a register key It is contained in Registry Key: HKLM\system\currentcontrolset\enum\root\LEGACY_ZESOFTbut I couldn't delete it. I was finally able to do that when a third technician changed my permissions to Full. If you search the registry for Legacy_zesoft, have your permissions at full and delete this key, this removed this malware from my system.

I had reported this on the Malware forum twice and no one got back to me. I then checked the sticky which was extremely confusing as it indicated that unless you have a certain status here, no one but yourself will respond to your messages in that forum, yet... Read more

A:Solved: adware--coolwebsearch malware

coolwebsearch hasn't existed foir about 5 years no, so that detection is false alarm

the registry key
HKLM\system\currentcontrolset\enum\root\LEGACY_ZESOFTbut
is harmless & can't infect you and is possibly a left over from a previous infection. It just says that it was installed at soem time but the harmless registry entry wasn't removed
 

Read other 3 answers
RELEVANCY SCORE 44.8

Hi, as you can see I'm new here and any help or advice you may have in relation to this will be greatly appreciated.

Due to letting other people use my PC I got infected with the CoolWebSearch spyware garbage. After reading a few forums and the like I got hold of CWShredder which seemed to get rid of some of the registry keys that were associated with CWS and I manually went in and deleted the other keys. Also, this version of CWS corrupted Notepad, which I have no rectified by copying over a proper version. Now, both Adaware and Spybot S&D both scan and tell me I am "clean" of CWS but, being the old cynic that I am, I am not sure that I removed all that there is to remove of this abomination. So if anyone could help by letting me know if there are other things that I need to look for, delete and any other checks I can make so I can be completely sure that CWS is gone for good off my machine. Then, please, do not hesitate to let me know (BTW I am using XP Home. Unfortunately).

Here is the current log from HijackThis:

Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\system32\crypserv.exe
C:\PROGRA~... Read more

A:[Solved]CoolWebSearch Removal. Help and Advice needed! Please!

Read other 7 answers
RELEVANCY SCORE 44.8

Hi

My laptop was infected with CoolWebSearch About:Blank spyware, which I managed to finally clean off with help of Cheeseball81 in the TSG security forum. Based on HijackThis log and Ewido scan, it seems the computer is clean at last, but I can't connect to internet using IE or Firefox, and can't download email using outlook express. I have run WinsockxpFix and Ispfix, to no avail. When I try to connect to a website like www.google.com, in IE I get an error message saying "Can not find server'. Same happens in Firefox. When I try using Outlook Express, it says that there is no response from server (or something like that). I have no problem connecting to my service provider (dialup), but I just can't connect to email or internet.

Are there other settings which CWS may have tampered with or files which I deleted while getting rid of the malware which may be affecting my internet connectivity??

This is kinda urgent, as I use the laptop for work.

Thanks in advance
Landrover
 

A:Solved: Can't connect to internet after cleaning CoolWebSearch

Problem sorted.

It turns out that Aluria Security Centre (Spyware Eliminator) was the problem. Once I uninstalled that, things worked properly again.

Landrover
 

Read other 2 answers
RELEVANCY SCORE 44.8

Hi there

I had a particularly stubborn version of CWS spyware which kept taking me to About:Blank on Internet Explorer. I scanned and "fixed" the problem with Spybot, Ad-Aware and Spwyware Eliminator, but it kept popping up again. I then ran AboutBuster and HSfix, and seem to have finally got rid of the spyware because none of the above anti-spyware scanners pick it up anymore. HOWEVER, I can still not connect to the internet with IE or Firefox, and can't download my email using Outlook Express. I can dial up to my servise provider and get a connection without any problem, and I no longer get taken to About:Blank when I opne IE, but when I open IE or Firefox, I just get a message saying something about not being able to connect to the address I specify (such as www.google.com). When I reboot, I also get a Windows message asking what software should be used to open "main.hat".

Am I still infected or has CSW just stuffed up my settings??

I am not confident enough to start deleting files using HiJackThis, but below is the HJT log

Please help, as I need the infected computer for working on my PhD thesis

Anyway, Happy New Year!

Thanks
Logfile of HijackThis v1.99.1
Scan saved at 17:49:09, on 31/12/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS... Read more

A:Solved: CoolWebSearch and About:Blank - is it finally off my computer???

Read other 16 answers
RELEVANCY SCORE 44.8

HJT log below- Q: Can I put Zonealarm freeware firewall on my comp. while it's infected?

Thanx for your help, Gary
**********

Logfile of HijackThis v1.99.1
Scan saved at 6:04:40 PM, on 4/30/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\PROGRA~1\VERIZO~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\interMute\SpySubtract\SpySub.exe
C:\Program Files\Verizon Online\bin\mpbtn.exe
C:\Documents and Settings\gander23\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\atpfo.dll/sp.html#55135
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\atpfo.dll/sp.html#55135
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\atpfo.dll/sp.html#55135
R1 - HKLM\Software\Microsoft\Internet Explorer\Mai... Read more

Read other answers
RELEVANCY SCORE 37.6

First I want to thank everyone for the great posts. I've been following some of them and learning alot and using what Ive been seeing to clean My PC's. One thing I did (maybe shouldn't have) is download spysweeper. It may be too late but is anyone familiar with this? Is this safe? it seemed to work pretty good.\

Thanks in Advance,
Bill
 

A:Spysweeper

Read other 8 answers
RELEVANCY SCORE 37.6

since ive installed spysweeper ive had nothing but problems. can anyone help me?Moderator Edit: Moved topic to more appropriate forum. ~ Animal

A:Spysweeper

Webroot Spysweeper is a good program.

What exactly are the problems you are experiencing?

Read other 1 answers
RELEVANCY SCORE 37.6

Anyone use this software? If you have how has it worked? Anyone know of a different software to use not for home use but organizationally?

Thanks!
 

A:Spysweeper

Read other 9 answers
RELEVANCY SCORE 37.6

HeyI have a problem. I cant seem to enable my spysweeper shields for my hosts file. It comes up with an error saying hosts file is too big.Edit: Moved topic to the more appropriate forum. ~ Animal

A:My Spysweeper

It's a known problem.A work around- post number 14:http://forums.cnet.comMore reading here:http://www.dslreports.comMark

Read other 4 answers
RELEVANCY SCORE 37.6

I have been using SpySweeper for quite a while now, but lately I have been wondering something. These big-name programs seem to be good, but they seem to be designed for the "average" user. Consider the average user: just the fact that you are reading this makes you more than an average user, because the average user has never even heard of computer help forums. The average user has never heard of Firefox. You get the idea. When I first purchased SS, I was new to computers. Now, I only use Firefox with NoScript. I use McAfee SiteAdvisor, and only go to green sites. In fact, I only visit new sites maybe twice a month. I only use my bookmarks on the web most of the time. I have IE6 set to disable ActiveX except for Microsoft Update and a few online scanners. And I never use IE directly, as I have the IE Tab Add-on for Firefox. I also use WinPatrol to monitor all cookies. With all of these security measures that the "average" user doesn't even know about, let alone use, is it really still that much to my advantage to be running SS on my PC all the time, taking up resources that might otherwise be used elsewhere? Thank you to all who take the time to reply.

A:Should I Keep Using Spysweeper?

Spy Sweeper with all systems activated is a resource hog. With the setup you have and what you have learned to be safe on the net, I would stop it from loading at startup. I stopped doing the scheduled scans with security programs over a year ago. I do keep programs updated just in case something does slip by and I need to scan for it.
Winpatrol is a neat program. Have you got the latest? It now offers delayed startup.

Read other 13 answers
RELEVANCY SCORE 37.6

As I recently discovered, Spyware Doctor's trial doesn't appear to expire and allows you to use all of its features except for removing detected spyware with the trial. Now, I'm trying SpySweeper on my newly reformatted Windows XP Professional (Yay! That was one of the sweet sides in the bitter-sweet reformatting). What appears odd to me is that SpySweeper also allows all of its features except removal in its trial and its trial doesn't seem to expire. Since I used SpySweeper before, I remember its trial expiring. Can anyone confirm whether or not SpySweeper's trial expires or is cut off from updates after a certain period of time? FYI: I'm using version 4.5.9.

A:Spysweeper

Wait what's the point in keeping one of those trials if they don't remove the detected spyware? Is it just for the active guard features? Spyware Doctor can get pretty cumbersome in terms of background processes...I honestly don't know why you'd bother with the trial because it's not an excellent product until you purchase it. That's just my opinion though. I think freeware is a better alternative to the mainstream commercial trials.

Sorry that doesn't really answer your question haha...

Read other 2 answers
RELEVANCY SCORE 37.6

How can I remove SpySweeper.exe from processes? When I try to end it, it says access denied. I don't want to uninstall the program, since its useful. But it takes up way to many resources to leave it running all the time.
 

A:SpySweeper

I got rid of Webroot Spy Sweeper a long time ago because it bogged down my computer from being so memory-hoggish, and it would throw the monitor resolution and color palette out of wack without warning for no reason - which required me to reboot.

----------------------------------------------------------

Have you tried unchecking and disabling its entry in the MSCONFIG startup tab?

Have you browsed its options/preferences settings to see if there's a command you can disable to prevent it from loading and running?

------------------------------------------------------------
 

Read other 1 answers
RELEVANCY SCORE 37.6

I use Spysweeper and like it a lot, but sometimes when I close the computer down or restart, a box comes up and says spysweeper.exe and says I can either close it or let it shut down. Something like it has to shut down before the computer can restart, is this something to be concerned about?
 

A:SpySweeper exe

Read other 6 answers
RELEVANCY SCORE 37.2

What's securybanks phishing trojan ,My sister was online and i ran spy sweeper and it found it .It looks like it's in the temp folder so far spybot or mcafee hasn't found it any idea why and should i post a log
 

A:Odd problem with spysweeper

I keep reading mixed things about this "trojan"
Most say it may have been a false positive. This is really not a trojan, this is a web site that people (to be nice) design to look like a web site bank. Most of the time you get an email claiming that you need to sign in to the bogus site and update your account information and ask for your social security number and/or your credit card number. Naturally, once they have your information they put it to no good use. Thus the name "Phishing", they are fishing for the people gulible enough to fall into their scheme.

You mentioned running SpyBot..you can also try AdAware or AVG Anti-virus (all free) Then run a TrendMicro Housecall virus scan - just to be safe
 

Read other 3 answers
RELEVANCY SCORE 37.2

Any thoughts on Webroot Antivirus as opposed to other products?
I currently use Norton I.S. 2007 after uninstalling Systemworks 2006 which was a royal pain. I run Webroot Spysweeper which I find to be great.
 

A:Spysweeper Antivirus

i have used spysweeper for many many spyware removals and in my opinion aside from spyware doctor its the best program out there. Between the 2 of them it was rare they wouldnt clean out every piece of spyware in a system, and some of these systems were in bad shape. As far as the antivirus to be honest spysweeper alone is fully capable of removing most trojans and many other things so combined with the antivirus im sure it makes for good protection.
 

Read other 2 answers
RELEVANCY SCORE 37.2

Hi all.

Just installed Win7.

Does Spysweeper work with Win7?

Any help appreciated.

Many thanks.

A:Does spysweeper work?

I have some issues with Spy Sweeper on my Win 7 64 bits system.

1:Opening My Computer sometimes will hang with a green status bar running across the top of the window and no drives are displayed.

2: IE8 randomly freezes...it whites out and stops responding.....

3: Outlook randomly freezes and whites out and stops responding....

All issues are gone when spy sweeper ( latest version without anti-virus) is removed from the system.

Asus P6T; Intel i920; 6 GB memory; latest McAfee and now without spy sweeper....

Read other 1 answers
RELEVANCY SCORE 37.2

I thought that I would post here to get opinions on spysweeper and hope that there are users here.
I have been using it for almost one year and it will be up for renewal next month. i have tried disenabling it at start up and enabling it and there is not much difference in the slowdown it creates at startup.
I find it really annoying, I have a notebook toshiba, pentiurm 4, 1.9 ghz, 512 RAM and mobile processor and xp home edition.

I wondered if other users experience the same problems as i am wondering if it is worth purchasing it again.

i currnetly use
adaware se
spybot search and destroy
a2
spyware blaster
trojan hunter

and of course my A/V.

Would appreciate comments, thankyou

A:Spysweeper up for renewal

I've used SpySweeper now about two months.I find no slow downs. Its set on the timer to scan. I kind of like the program.

Read other 2 answers