Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I ran a scan of my computer and it says file c:\windows\default.css is infected with trojan bootconf virus. How do I get rid of the virus and restore the file or do I need this file. I have norton anti virus program.

free trojin scan
http://www.trojanscan.com/trojanscan
panda scan
http://www.pandasoftware.es/activescan/
housecall
http://housecall.trendmicro.com/housecall/start_corp.asp
nrav av
http://www.ravantivirus.com/scan/
avast cleaning tool
http://www.avast.com/i_idt_171.html
mcafee avert stinger
http://vil.nai.com/vil/stinger/
virus scan
http://www.bitdefender.com/scan/licence.php

Hey, I am in the process of cleaning a friends machine of the same thing....I used Fprot from dos, and it SEEMS to have cleaned everything up.....one of the virii he had on there (at least 4 different :-) ) had damaged kernel32, so i re installed windows, but i dont think thats the one you have here...

Hi to anyone who has had the unfortunate run-in with the Trojan.bootconf virus...i recently had this thing on my machine and for all the good Norton is, it still was not able to delete it...but thanx to one "Tom 41" I have finally been able to rid my pc of this most annoying virus, its good to see that there are some good people out there willing to help. So i would like to extend my gratitude for helping out....that CW Shredder seems to have done what Norton's could not.

I also got the Trojan bootconf virus and used CWShredder, which worked brilliantly.
I have subsequently found out that this programme is regularly updated and can be downloaded from:
www.spywareinfo.com
Incidentally, this virus came from CoolWebSearch, so I will definitely keep clear of this website in the future !

Nortons also told me I had the virus too! It wouldnt repair it so I quarantined it. However, after reading abour CWShredder I thought I'd try that. So I "restored" the file figuring I'd have to do that in order for this shredder to find it. However, should I have done that? Because this is the results I got from the shredder. What do I due since it said it was not found? The virus was located at C:program files.....blah blah...\msinfo.exe
- 0 registry values were killed
- Hostsfile was OK
- Bootconf.exe was not present
- Trusted Zone was OK
- User stylesheet was OK
- Oemsyspnp.inf was not present
- Svchost32.exe was not present
- Msspi.dll Winsock hook was not present
- Msinfo.exe was not present
- Winshow.dll BHO was not present
- MadFinder BHO was not present
- Ctfmon32.exe was not present

Hi, Sharon. I have the exact same problem, only I ran CWShredder while Norton quarantined the msinfo.exe. Shredder killed 2 registry values, but msinfo.exe remains quarantined in Norton, and I have no clue what to do with it. Will someone please help us?

I used the CWshredder to get rid of trojan.bootconf. However, I still seem to be having problems. When I turn on my computer, I'm asked to log on to the internet, when I'm on the internet, I can't open any web pages!!
Then, when I close Internet Explorer (or any window for that matter), Windows Installer comes up and tries to install something for Norton Antivirus.I have no idea what to do! Any help would be greatly appreciated!

The CWShredder found residual elements of the Cool Web Search spyware\trojan\virus program. However, one component 'MadFinder' continually shows up on numerous computers on our network (not shared)after CWShredder removes it. I've searched each registry for svc.exe and a host of other 'trigger files' listed on the internet without success. Even followed CWShredder's prevention instructions and removed MS JVM, which is no longer supported my Bill, and replaced it with Sun Microsystems' Java Machine... and guess what... MadFinder was found once again.
Ad Aware and Spybot also claim that MadFinder has been found and removed, but it continues to reappear.
Frustrating...

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |