Computing.Net > Forums > Security and Virus > Help! This not so COOLwww virus won

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Help! This not so COOLwww virus won

Reply to Message Icon

Name: hotrod
Date: February 11, 2004 at 14:58:55 Pacific
OS: Windows 2000 5.00.2195
CPU/Ram: 130 KB
Comment:

How do I get rid of this CoolWWW virus since the CWShredder doesn't seem to download from any of the sites anymore? I also can't get HijackThis. It seems to be from the same writer and those pages will not come up.

I had a startpage trojan. Something called system32 was deleted by my McAfee VirusScan. It was taking over my homepage. I finally got my home page back working right.

I am getting these popunders on my screen constantly too. C:\Windows\dlm.html-Microsoft Internet Explorer provided by comcast hispeed internet.... (I don't even have comcast anymore.) I click it but nothing comes up on the screen. I can right click and hit close and it goes away for a few minutes. Then it comes right back.

The other pop under I keep getting says:http://download3.payoutpal.com/download/index.html-Microsoft Internet Explore. This one does absolutely nothing when I click it. I can't even right click it to close. It comes up anytime I get online and sets there until I restart my computer. As soon as I get on the net again, back comes that popunder.

I also have some hotbar thing that will not be deleted by my Adaware or my Spybot. Spybot always says it will fix it on the next restart but it can not delete it.

My computer is a mess right now. I see many replies about HijackThis and CWShredder. I have not yet found a download site that will download any of them for me. I did get SpywareBlaster today. It is my understanding though that it won't take any of these hijacks off of my system but instead help keep them from coming back once I get them taken care of.

Any help would be appreciated.
Thanks

HR




Sponsored Link
Ads by Google

Response Number 1
Name: Kevin The Tech Dude
Date: February 11, 2004 at 15:09:39 Pacific
Reply:

HR,

Send me an e-mail.

KTTD


0

Response Number 2
Name: wawadave
Date: February 11, 2004 at 15:14:04 Pacific
Reply:

hotrod
i emailed them to you. there not the most curant ones so carfull what you delete with them close off note pad and all other uneeded apps.

••• Resistance is invigorating! •••


0

Response Number 3
Name: Kevin The Tech Dude
Date: February 11, 2004 at 15:16:36 Pacific
Reply:

wawadave,

I was gonna e-mail them to him once I got an e-mail from him first. The version of CWShredder I have was before the update that started to pop up the sndvol.exe message.

KTTD


0

Response Number 4
Name: wawadave
Date: February 11, 2004 at 15:19:11 Pacific
Reply:

these are a week or two back ones he can still email you. i had allready sent them off
befor the merjin post was up.


••• Resistance is invigorating! •••


0

Response Number 5
Name: hotrod
Date: February 11, 2004 at 15:27:35 Pacific
Reply:

I got the e-mail Dave. Thanks a bunch. Are these versions as current as the ones that Kevin has? Also, How do I close notepad before I install these?


0

Related Posts

See More



Response Number 6
Name: Kevin The Tech Dude
Date: February 11, 2004 at 15:35:12 Pacific
Reply:

The version of CWShredder I have is Ver. 1.44.2

KTTD


0

Response Number 7
Name: hotrod
Date: February 11, 2004 at 15:40:06 Pacific
Reply:

This one does not say what version it is on the attachment. I won't know until I run the program. It does say though that it is 93.3 KB. Is your version the same size?


0

Response Number 8
Name: Kevin The Tech Dude
Date: February 11, 2004 at 15:44:19 Pacific
Reply:

Just open the program and it will tell you the Ver. before you ever run it.

KTTD


0

Response Number 9
Name: hotrod
Date: February 11, 2004 at 15:48:13 Pacific
Reply:

This one is version 1.39.8


0

Response Number 10
Name: hotrod
Date: February 11, 2004 at 16:45:05 Pacific
Reply:

Thanks to both of you Kevin and Dave. I downloaded your more current version of CWShredder Kevin and I downloaded HijackThis from a link that Dave sent me. I ran the CWShredder and it cleaned up a lot of junk. I'm not sure if I had everything closed though. It did say that it may not fix everything if some programs are still open. My computer does seem to be working a little better though. I am still getting those stupid pop unders though that I spoke about in my original post.

I also ran the HijackThis. It says to be careful what you delete though. I can see some things right away that need to be deleted but some things I am not sure of. Would one of you be able to tell me what to delete and what not to if I post or e-mail you a copy of the log file?

Thanks again for all of the help.

HR


0

Response Number 11
Name: sxshep
Date: February 11, 2004 at 17:07:11 Pacific
Reply:

What version is the bad guy?

shep


0

Response Number 12
Name: wawadave
Date: February 11, 2004 at 17:32:33 Pacific
Reply:

not the one i got but it dont get some of the more recent cwsheader ether. but would get most.the one newer tha kttds would be the bad one.

••• Resistance is invigorating! •••


0

Response Number 13
Name: JackG
Date: February 12, 2004 at 00:05:38 Pacific
Reply:

Download the free version at Ad-Aware_6 to scan for and remove Spyware-Adware. It will help get rid of some of the pop ups. Be sure to check for updates now before using. The first time you run it, you should select the Custom scanning options and enable all checks that you can. If any items are found, check them to remove them. Be sure to reboot when done if problems were found.

Strange, but all of the SpywareInfo web site seems to still be down today.


0

Response Number 14
Name: kingpet
Date: March 12, 2004 at 21:32:36 Pacific
Reply:

hey guys.
lately ive been getting teh starpage virus too. ive gotten rid of it with cwdshredder and got adaware. but for some weird reason it keeps coming back. ive dl a recent version of cwdshredder from merjin. Suggestions? (btw ive also rid all my internet temp files and cookies)



0

Response Number 15
Name: DukeAbercrombie
Date: March 24, 2004 at 14:44:03 Pacific
Reply:

HELP!!!

i have spyware and adaware and that mother &&&&ing coolWWW still changes my startpage everytime! if really f***s everything up, half the time a webpage will for no reason link directly to that stupid search page of thiers, very frustrating, i dont understand how this stuff can be legal



0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Help! This not so COOLwww virus won

Does this sound like a virus? www.computing.net/answers/security/does-this-sound-like-a-virus/14384.html

Help with a bad virus? www.computing.net/answers/security/help-with-a-bad-virus/25872.html

Help got adware or a virus www.computing.net/answers/security/help-got-adware-or-a-virus/16191.html