Computing.Net > Forums > Security and Virus > Can't get rid of cws.searchx

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Can't get rid of cws.searchx

Reply to Message Icon

Name: Timpb
Date: May 31, 2004 at 13:47:18 Pacific
OS: XP Home
CPU/Ram: 512
Comment:

Hi,
I can't get rid of cws.searchx. I clear it up with cwshredder but it comes back. Everything's up to date... Norton, just installed and run Spybot, microsoft patches etc etc. Don't know what I'm talking about and really appreciate the help.



Sponsored Link
Ads by Google

Response Number 1
Name: blue84freak
Date: June 1, 2004 at 10:26:42 Pacific
Reply:

i have the same problem so someone please help us out!

it said cws.searchx REMOVED, but the problem was still there


0

Response Number 2
Name: Thresher
Date: June 7, 2004 at 19:29:22 Pacific
Reply:

Download HijackThis here:

http://www.lurkhere.com/~nicefiles/

when you download HijackThis look for the little check box that extracts it to a C:\ file, make sure you get it into a C:\ file, not desktop or TEMP, otherwise the backups will be all over your desktop and in TEMP. You want thm in a C:\ file also. When you get it, log off net, close all browsers and windows. Click the 'scan' button and it becomes the save-log button, save it, copy it, log on to the net and post it here:

http://forums.spywareinfo.com/

or here:

http://www.pcguide.com/vb/forumdisplay.php?s=&forumid=34

When you ran Shredder did you run it in SCAN or FIX? Run it in FIX if you didn't.

Thresher


0

Response Number 3
Name: ajith
Date: June 11, 2004 at 03:38:55 Pacific
Reply:

To get rid of this problem u can edit registry


HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search
Edit SearchAssistant value from junk ascii to
"http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"

and delete one file in windows\system ditectory "cjni.dll" if i recall correctly
which contains the file "sp.html"
that is all.

Ajith CAT Indore


0

Response Number 4
Name: tpatterson
Date: June 25, 2004 at 12:36:21 Pacific
Reply:

My computer has the same issue with cws.searchx. I have run many ad ware programs, and cws shredder. searchx is always removed, only to show up 3 hours later, completely infecting everything. The above has been tried, but the problem still exists... help.....


0

Response Number 5
Name: Blunted
Date: June 27, 2004 at 01:38:34 Pacific
Reply:

I FINALLY FOUND THE FIX

1. use Hijackthis to find out what .dll is being used for the BHO (broweser hijack), but dont delete it yet.

2. use cws shredder and let it remove what it finds

3.then use Hijackthis to remove any sp.html, about:home portions and now the .dll reference

4. goto windows/system32 and rename the .dll found from Hijackthis by just taking off a few letter ie oppt.dll to pt.dll and then hopefully it will delete if not it willl on restart

5.now when u restart use f8 on XP to start in safemode under your account

6.run AD-aware and this will continue to remove more bulls--- left.

7. NOW heres teh Crunch NONE of that will fix it fully as i found out after MANY TIMES
(dont ask me why ive done all this i just assume if traces are there it would come back)

8. the factor is it is stored in a folder called "Offline Web Folders" now what you are looking for is a file called "about:home.htm" well atleast thats what it says it is now windows may have problems say it will degrade the use of the folder system but it wont im sure what this is for but as soon as i got rid of that HEY presto no MORE recall of Searchx

lemme know anyways how this worked for you as all that BS ive seen ppl said it worked for them but it never did for me this was my route to success

HOPE it does for you


0

Related Posts

See More



Response Number 6
Name: jscomputer
Date: June 30, 2004 at 12:58:42 Pacific
Reply:

I think I might have figured it out. I went to trendmicro.com and used their free virus scan. It found two infected files. C.EXE, which is in the temporary internet folder, and a DLL file in system32. The description of the virus fits with all the problems. The DLL is another random file other than the one detected by CWShredder. So you might want to just go to trendmicro.com and use their free virus scan. If this works, spread the word.

Thanks

cool


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Can't get rid of cws.searchx

can't get rid of cws.msconfig www.computing.net/answers/security/cant-get-rid-of-cwsmsconfig/22082.html

Can't get rid of onemoresearch.net www.computing.net/answers/security/cant-get-rid-of-onemoresearchnet/14181.html

Can't get rid of RUN entry/Service www.computing.net/answers/security/cant-get-rid-of-run-entryservice/17409.html