Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Hi,
I can't get rid of cws.searchx. I clear it up with cwshredder but it comes back. Everything's up to date... Norton, just installed and run Spybot, microsoft patches etc etc. Don't know what I'm talking about and really appreciate the help.

i have the same problem so someone please help us out!
it said cws.searchx REMOVED, but the problem was still there

Download HijackThis here:
http://www.lurkhere.com/~nicefiles/
when you download HijackThis look for the little check box that extracts it to a C:\ file, make sure you get it into a C:\ file, not desktop or TEMP, otherwise the backups will be all over your desktop and in TEMP. You want thm in a C:\ file also. When you get it, log off net, close all browsers and windows. Click the 'scan' button and it becomes the save-log button, save it, copy it, log on to the net and post it here:
http://forums.spywareinfo.com/
or here:
http://www.pcguide.com/vb/forumdisplay.php?s=&forumid=34
When you ran Shredder did you run it in SCAN or FIX? Run it in FIX if you didn't.
Thresher

To get rid of this problem u can edit registry
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search
Edit SearchAssistant value from junk ascii to
"http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"and delete one file in windows\system ditectory "cjni.dll" if i recall correctly
which contains the file "sp.html"
that is all.Ajith CAT Indore

My computer has the same issue with cws.searchx. I have run many ad ware programs, and cws shredder. searchx is always removed, only to show up 3 hours later, completely infecting everything. The above has been tried, but the problem still exists... help.....

I FINALLY FOUND THE FIX
1. use Hijackthis to find out what .dll is being used for the BHO (broweser hijack), but dont delete it yet.
2. use cws shredder and let it remove what it finds
3.then use Hijackthis to remove any sp.html, about:home portions and now the .dll reference
4. goto windows/system32 and rename the .dll found from Hijackthis by just taking off a few letter ie oppt.dll to pt.dll and then hopefully it will delete if not it willl on restart
5.now when u restart use f8 on XP to start in safemode under your account
6.run AD-aware and this will continue to remove more bulls--- left.
7. NOW heres teh Crunch NONE of that will fix it fully as i found out after MANY TIMES
(dont ask me why ive done all this i just assume if traces are there it would come back)8. the factor is it is stored in a folder called "Offline Web Folders" now what you are looking for is a file called "about:home.htm" well atleast thats what it says it is now windows may have problems say it will degrade the use of the folder system but it wont im sure what this is for but as soon as i got rid of that HEY presto no MORE recall of Searchx
lemme know anyways how this worked for you as all that BS ive seen ppl said it worked for them but it never did for me this was my route to success
HOPE it does for you

I think I might have figured it out. I went to trendmicro.com and used their free virus scan. It found two infected files. C.EXE, which is in the temporary internet folder, and a DLL file in system32. The description of the virus fits with all the problems. The DLL is another random file other than the one detected by CWShredder. So you might want to just go to trendmicro.com and use their free virus scan. If this works, spread the word.
Thanks
cool

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |