Good afternoon all, I have one of my stations that is absolutely driving me crazy! It is infected with coolweb (in particular CWS.Bootconf and CWS.Svchost32, and once when I scanned I got CWS.Msconfig) It was also infected with some other spyware, but I was able to remove those. This Bootconf and Svchost32 just keep coming back and they are killing my internet connection to the point that I can’t even browse. I have tried the latest versions of Spybot S&D, CW Shredder, Adware, Hijack This, SpySubtract, Norton Virus Scan, McAfee Stinger, all which detect the coolweb and say they get rid of it, but it just comes right back. System restore is turned off, I have run all these in safe mode, on all profiles, I have even gone into the Program Files, and manually performed the uninstall for all adware programs I could find. I found some general “Manual Removal” instructions on the internet, that I am about to try, but will these work? Also, will loading SP2 help minimize the amount of adware / spyware they get on this machine? Any suggestions or advice you have would be greatly appreciated. Thanks in advance, -Mario-

Get SP2 loaded, and check out TDS3, it's a Trojan Hunter, Shareware, from majorgeeks.com Hope this helps The world is full of willing people, some are willing to work, others are willing to let them; just a thought!

CWShredder is designed to especially deal with the cool web monster. You can get it at: http://www.majorgeeks.com also IN THE MATTERS OF STYLE, swim with the current; in matters of principle, STAND LIKE A ROCK

Try SpySweeper. there are a lot of downloads on this page. Look to the right for SpySweeper v3.5. tenacity, patience, and perseverance because…... I AM THE HUMAN

Post your hijackthis log at on of these sites within link below. ASAP Abnormal

Update: Thanks, everyone for your suggestions. But still no luck! Here is what I have done, I went out and got the spyware scanners you recommended as well as quite a few I found on the web. I went into safe mode and for each profile, I ran every scanner until everything was gone. I double checked and triplechecked, did the MSCONFIG, checked Hijack This logs, etc. until the system was finally clean, well in safe mode atleast. I then used the manual instructions for all coolweb Trojan removals that I could find and went threw all of them. So finally when I was satisfied, I disconnected my internet cable, and started up my computer in normal mode. Once again I went threw each profile with every scanner I had and everything turned out clean. Content that it was gone, I reconnected my internet cable. I ran Symantec Anti Virus Live update and downloaded some updates. They went threw just fine so I was content that everything was back up and running. I ran the CW Shredder one last time, and it came back!!!!! So now I am back to square one. So once again any suggestions you have would be greatly appreciated. Thanks, -Mario-

If you post your log I can give you some suggestions. I don't read logs everyday like the people in the link I gave you do. Post your hijackthis log.