Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Hijacked my start page but I fixed that. Now, when I go to a certain website, one for the Sims game, I get the CWS page too. I've deleted entries from HJT and the corresponding files from my Windows folder and got rid of some things I should be rid of but the CWS page keeps coming up. Also, I can't post my HJT log--tried it in the Windows 95 forum. Any ideas?
Could it be the Sims fansite instead of my computer?

See if you have a host file, Some Viruses and mallware will create a host file that will keep you from going to amtivirus or sypware removeing sites.
You can open a host file with note pad and look at it, or in most cases just delete it.

ummm....
You really don't want to just delete your entire hosts file.
There is a good chance there will only be one entry in it:
127.0.0.1 localhost
Leave that one alone.
If you have modified your hosts file with SpyBot's list of "bad sites" then you will see a very long list of sites directed to 127.0.0.1 Don't worry that's a good thing.
If you see a long list of anti-virus, anti-spyware, or security sites directed to 127.0.0.1 then that would be a bad thing, and simply deleting those entries from the hosts file will not fix the problem by itself. They will come back when you reboot.
If you were able to download Hijack This then you should be able to access a download for CWShredder. However, if you can't there's probably a good reason.
From Merijn.org:
If you are unable to download any of the files here and are redirected to a porn page, search page or just denied access to the file, try these alternate links that should always work:
HijackThis direct download:
http://209.133.47.12/~merijn/files/HijackThis.exeCWShredder direct download:
http://209.133.47.12/~merijn/files/CWShredder.exeThe redirection is probably because of a Coolwebsearch variant (CWS.Aff.Tooncomics or CWS.Dreplace) that intercepts your download to prevent downloading my programs.
Note: You need the Visual Basic 6 runtime libraries to run any of these programs.
Look at the disclaimer at the top of this page for more info:
If you can't reach this page, let us know.
Good Luck!
AOSCLAY
Monkies Can't Do This

Oh, PS:
If you are having a problem posting your HJT log, there is a reason:
I refer you to the THE RULES. Don't post your log unless someone asks you to. It will get pulled by the moderator if you do.
Just some info for you, to save you the frustration.
GOOD LUCK, let us know!
AOSCLAY
Monkies Can't Do This

Sorry, I forgot to tell you that I already have CWShredder and ran it and it didn't fix the problem. When I tried to download the update from the alternate link, I got the blank page.
Also, in the Windows 95 forum, I didn't try to post the HJT log until somebody asked me to.
I'm not familiar with the hosts file. Where do I find it?

It's in c:\windows and it's just called Hosts (no extension). It can be viewed in NotePad.
Derek.W

I found two hosts files. The first one is just hosts and had nothing in it. The second one is hosts.sam and has 127.0.0.1 localhost. So delete the empty one? But would that in itself help the problem?

Hosts.sam is just a sample, quite harmless.
Hosts in it's own right is also harmless. I use it, as do some other folk. It will only help your problem if it has been attacked - there are certainly nasties that do this.
Derek.W

Sorry, just realised you asked about deleting it. I would just rename Hosts to Hosts.txt (rendering it harmless if it has been attacked).
This gives you the chance to restore it later (remove extension) if you so wish.
No need to touch Hosts.sam
Derek.W

![]() |
Security Update for Direc...
|
Anti-virus and zip files
|

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |