Tom's Guide | Tom's Hardware | Tom's Games
 |
 |
 |
Not only did it goof up opening up notepad on my start menu, but also I did a Sfc /scannow and it tells me to put in my xp sp2 disk, which I don't have and before when I ran Sfc /scannow it said to put in my xp disk, I don't know what else it may have goofed up but I don't think I will use that program again a more knowlegable person may be able to fix these problems but I have tried and don't know how and want other people to know, I don't like any program that will change a system file like that you would at least expect them to give you a fix for the problem that this caused, I have tried some of the things posted as a fix and has not worked yet.What can I do.
If you have a recovery disc supplied with your pc use this to do the sfc/scannow task.
Not alot of ppl know that these discs have the full operating system on the disc aswell as the recovery setup files that the vendor supplies to restore your system to the factory setup.
Only thing is..if you try and re-install windows from scratch off these discs...it wont be pre=activated like the factory setup. Activation will be required.
BLeeM
0 
Hi Sue,
It seems there is some problem with a version of CWShredder:
XP [95055] CWShredder (Computing.Net)I would say, watch this space, but meanwhile BLEEM has the answer: expand the files that you need off of your XP CD via this:
Press WinKey+R (that's the Microsoft-Logo-FlagKey+R) to get the RUN-box, and type:
msconfig
On the first page, there is a button called 'expand file'.The files you're looking for are
NOTEPAD.EX_ which is Notepad.exe and I have it in both
c:\Windows\ & c:\Windows\System32\and for the Volume Control:
SNDVOL32.EX_ which is sndvol32.exe which should go into
c:\Windows\System32\If the problem is identified by Merijn(CWShredder), then there may be more info later on the forum. I'll post it here if it's within my memory-span !:)
___________________________________________
☺ [Belgium, GMT+1]_________________________svg
0
Maybe yet another victim:
XP [95217] CWShredder > sfc.exe___________________________________________
☺ [Belgium, GMT+1]_________________________svg
0
Bleem, I tried the disk, 3 weeks ago it worked correctely, tried it last night and when I insert it it says wrong disk it asks me to insert xp pro sp2 disk, I have xphome disk and it does not say pro or sp2 on it?, it says that when I put the disk in and at run type Sfc /scannow, I have done it many of times, I tried a system restore back to feb 4 and it still was goofed up, probably because I do a disk cleanup and defrag all the time, anyway this burns me up, I have notepad.exe in bothfolders you guys mention, but on the start menu it does not open anything seems the shortcut is not good.I will try the things suggested and post back, I wonder what else was changed????For all we know more problems may arise I mean how often do we use
Sfc /scannow?
0
OK heres the scoop nothing above worked...It would not let me use my disk like I did before this problem with cw shredder, went to msconfig with and without disk in and when it went to extract files it stated wrong disk or cd does not work?, I know it works so wrong cd eventhough its the same one I have been using since I got this computer....when I put in Sfc /scannow which worked before this is what it said....Windows File Protection
Files that are required for windows to run properly must be copied to Dll cache, Insert Windows XP PRO Ser Pack 2 CD now........of course it would not work...I have XP Home? it changed that too, finally I decided to do another System Restore back to Jan 12th and it restored and works now, now when I typed Sfc /scannow it says to insert XP Home cd and checked out fine....I have deleted all cwshreeder and recommend unless you are a expert on computers to do the same...also my notepad opens fine too. I now have to update files since Jan 12th but thats better than a reinstall, hope you have a system restore running its a life saver.....Sue Thanks to all for your help...
0
One point to noite when using system restore. If you turn off system restore to do virus checks trojan checks...be warned that when you turn it back on...All your restore points previously created will be lost.
Glad you got it sorted..restore was going to be my next post..easier than explaining how to change the paths to notepad.exe to get that working again..:)
BLeeM
0
XP Pro Service Pack 2
That one is still in the BETA testing phase. If you installed it somehow, the System Restore will have taken care of that, and probably the CWShredder thing too.
I just wonder if that's the thing that's going wrong with CWShredder...
___________________________________________
☺ [Belgium, GMT+1]_________________________svg
0
Yes but I had tried restore back to Feb 4th which was before the problem of that update I thought and I had the same problem, so I unrestored it and did not try back further because the one before was Jan 12th, so I guess it was several updates from cwshreeder that caused the problems, and really I don't know what other problems it may cause because I did not try other things to check but I won't be doing that again and I think I will create a restore point weekly instead of when Windows wants to, since I have plenty of room on my computer the XP restore works alot better than on Windows Me and I liked that operating system, but xp is much better, it still bothers me that cwshreeder could do that, I do remember my firewall Sygate letting me know something was changing but I automatically let it do it, I will be more causious next time, and thank you for your help.
0
That is what is so awful I did not install XP Pro Service Pack 2, I don't even have XP Pro........................I have XP Home Edition, I would never install a Beta and especiall if it said XP Pro, this changed when I updated swsredder.....they must have it installed on their computer....that is scarey....that it would change mine but it did.
0
CWShredder seems to be the cause of all this.
I've noticed that Merijn.org has gone offline, probably due to the error in CWS.
XP is supposed to create a SystemRestore Point automatically before each major change, but I think I'll follow you up on your advice from now on, Sue, and create one point a week.
btw, I think that the DiskCleanup feature (in Accessories>System Tools) has an option to remove all but the last RestorePoint.
___________________________________________
☺ [Belgium, GMT+1]_________________________svg
0
Hi Sue, Shredder also did a number on my computer with Notepad, sfc.exe, Intell camera and Joystick, I'm sure I will find more files that have been altered and do not work. Funny thing tho, I did a restore and it fixed the problems, but I also lost a tax program that had all my tax info stored in the folder so I undid the restore and returned the system to present and viola everything still works like nothing ever happened, go figure, I dont understand it???
0
I also had tax information I had downloaded and done and am redoing it, I also have a camera and that was not working but just thought that was my fault guess not..Just to make things clear it did not change my windows from xp home to xp pro, just when I tried to do the sfc /scannow the name of the file would not let me use my disk that I always use and is the correct one, it changed that file, anyway its ok now but did have to go back to Jan 12th, because I did not make a restore point weekley I will now for sure it saved me for sure, because I have no ideal what I am doing, ha ha
0
glad everything worked out for you, BTW your xp should make a restore point every 24 hours automatically unless you have it disabled??.
0
I had several restore points but it did not fix the problem till I went back to Jan 12th and also I don't think its every 24 real hours I think its maybe computer hours? because I did not have one every day?and I have my restore at the max size, just every once in a while I do a disk clean up and wipe it out and restore one right away, but only when it is running tip top do I do that, would like to know why it did not restore every 24 hr if thats what it is suppose to do, I will check and see if there is a option for that and if it is modified.Mine is fine now.
0
here's what I know; and there will be additional relevant knowledge out there:
Spywareinfo.com is under a massive distributed denial of service attack. The hosting service is working to filter out the attacking IP addresses but they're coming from all over the world at the moment.
Spywareinfo.com, spywareinfo.net, spywareinfo.org, tomcoyote.org, merijn.org, malware.us, mikehealan.com and dogreader.com are off the net until the attack is blocked.The general advice is to use the CWShredder only if you have a confirmed CWS infection.
It is unneccessary and unwise to run it just for precaution, or as a regular procedure. There is a running battle going on with the CWS scum, and the Shredder will usually have some beta aspects to it, like many other specific target removal programs.Notice: Windows Files
CWShredder is currently unavailable
Several variants of the CoolWebSearch trojan are overwriting Windows system files with copies of the trojan itself, reinstalling it whenever this infected file is called by Windows. CWShredder detects and removes these infected copies. You can download the files replaced by the trojan http://www.merijn.org/winfiles.html, if the version for your Windows version is available. Note that these are all for US-English Windows versions. If the file is not available for your Windows version, you can always restore it from your Windows Setup CD! (Edit: or Copy existing or System Restore if that won't work, as noted above for notepad.exe & sndvolume.exe)
control.exe
rundll32.exe
wmplayer.exems
config.exe
Instructions at : http://www.merijn.org/winfiles.html
*the web site is currently unavailable - Thurs 12th/Friday 13th Feb*Info included with in recent update;
Experimental procedure for deleting CWS.Control.3 files with random file names (user is prompted)
Added *new* CWS.Msconfig variant, which replaces Windows file, MSCONFIG.exe under Win98/Me.
Improved sub (routine) ? to kill running processes - now kills all matching
processes instead of the first one found.
Added new warning box for CWS.Smartsearch to first close WMP & Notepad.
Added new CWS.Aff.Winshow.7 variant (mmsearch.dll / image.dll)
----------------
Several variants of the CoolWebSearch trojan are overwriting Windows system files with copies of the trojan itself, reinstalling it whenever this infected file is called by Windows.
CWShredder detects and removes these infected copies. You can download the files replaced by the trojan here, if the version for your Windows version is available. Note that these are all for US-English Windows versions.
If the file is not available for your Windows version, you can always restore it from your Windows Setup CD!
http://www.merijn.org/winfiles.html
AS MENTIONED ABOVE:
*the web site is currently unavailable - Thurs 12th Feb/FRIDAY 13TH/*If you really need a copy: CWShredder 1.44.08
http://www.lurkhere.com/~nicefiles
0
One very small note to all of the above. It is entirely possible that you downloaded the BETA (unstable) copy of CWShredder. 1.48.0.2 is the one I have, classed as the stable program on the website. I actually got one of my Chat friends to download it for CWS related infection and it worked just peachy. It categorically states to close ALL open windows, especially IE, and warns several times of what it is about to do. The other comment is that it must never be used, as stated above, unless you have a CWS or related infection. I am glad you managed to get back to a working restore. Do remember that it is also true that even if you "clean" your PC of viruses and trojans, a "copy" of them may well reside in the restore files, so the disabling of restore is also a must in many cases. You will know if the restore requires disabling as programs like STINGER, and virus scanners will simply HANG up at the detection of the virus in a restore file. Only by turning off restore can these programs complete the cleaning process.
0
I don't know which one I downloaded, I clicked check for update on the program and it automatically downloaded it so ? This might be a fine program for the more advanced but not for me. I also will stick with Adaware, spybot & spywareblaster and thats it for me, I learned a big lession from this one that I don't want to go thru again.
0
News is coming in not to use CWShredder 1.49 on Windows XP and Win2k!.
Windows NT 4, 2000, and XP are affected!
There are reports that it will terminate services.exe crashing windows.It has been recommend you use CWShredder 1.48.2 for now.
This version has been confirmed stable.
0
Thanks for letting people know, but for me no thanks, I think someone should have checked it out before releasing the update to public, I know its free, but I guess you get what you pay for.
0
Goodmorning, Sue!
Considering the fact that they're only trying to deal (for free) with the problems that are created by holes in the glorious BillGatesWare. And the fact that CoolWeb seems to be quite a vigilant adversary, I would still use CWShredder after this unfortunate release. But you're right to be weary...
___________________________________________
☺ [Belgium, GMT+1]_________________________svg
0
Latest word is it appears to have adverse affects only on infected systems.
Ya gotta blame the CoolWebSearch guys for all this, and sometimes there are innocent victims in any war.
More info as it comes to hand.
My money's on the shredder, and yep, they are still under seige over there.
0
My System is not infected I checked that all out before I realized it was the cwshreeder program, I have Firewall & virus Protection and have no spyware all, and seems that all I do is update these things all the time. Believe me I really don't want to badmouth this program just want people to know the scoop incase they are having these problems, if you don't know you can go crazy trying to fix things, I just think its for the more advanced person so they know how to fix or how important it is to have System Restore running, as some do not.
0
Point taken; and your problems did arise well before 1.49, but things move on and http://www.merijn.org
is ONLINE AND RUNNING!If you can't reach the site, add the following to your HOSTS files:
216.40.225.12 merijn.org
216.40.225.12 www.merijn.org
0  |
 dvd burning
|
Like some info on UNDERcl...
|
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |
