Computing.Net > Forums > Windows XP > MEGA trojan! NOTHING gets rid of it

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

MEGA trojan! NOTHING gets rid of it

Reply to Message Icon

Name: QB1DABOMB
Date: July 15, 2005 at 19:37:19 Pacific
OS: Win XP
CPU/Ram: 512
Comment:

I turned off system restore, went into safe mode, ran ad aware pro, MS antispyware, cwshredder...all didnt detect my problem "wwwcoolweb badzonemap". Only Spybot detects it and when I tell spybot to fix it spybot just freezes and it is still there. What can I do to get rid f this terrible nuisance? Please help me!



Sponsored Link
Ads by Google

Response Number 1
Name: Jennifer SUMN
Date: July 15, 2005 at 19:41:27 Pacific
Reply:

Try
this Site...

Soylent Green is PEOPLE!


0

Response Number 2
Name: QB1DABOMB
Date: July 15, 2005 at 19:45:50 Pacific
Reply:

the site really only lists all the tools i'm already using. does anyone know how to actually remove it?


0

Response Number 3
Name: Jennifer SUMN
Date: July 15, 2005 at 19:58:06 Pacific
Reply:

Did you follow the advice in your other thread?

Soylent Green is PEOPLE!


0

Response Number 4
Name: QB1DABOMB
Date: July 15, 2005 at 20:00:18 Pacific
Reply:

I had two other threads, i followed it all (see my first message in this thread)?


0

Response Number 5
Name: QB1DABOMB
Date: July 15, 2005 at 20:22:09 Pacific
Reply:

Is it actually possible that I've contracted something that no one can figure out how to remove? :(


0

Related Posts

See More



Response Number 6
Name: RobbieDickon
Date: July 15, 2005 at 20:30:07 Pacific
Reply:

I believe it will have to be removed manually.

If your CW Shredder is up to date and Your Spybot and it still cant get it, see if you have the following entry in your registry.

If you do, delete it.

Go to start>run - type regedit
Navigate to & delete this key.

HKEY_USERS\S-1-5-21-3142338559-1960234554-4035921304-1007\Software\Microsoft\Windows\CurrentVersion\InternetSettings\ZoneMap\Domains\searchmiracle.com

If you dont have it your spybot should show the registry key when it recognizes it.

Good Luck


Windows: Just another pane in the glass


0

Response Number 7
Name: QB1DABOMB
Date: July 15, 2005 at 20:51:13 Pacific
Reply:

My spybot and cwshredder are updated. What registry is it? I click on the link and it is just an advertisement?


0

Response Number 8
Name: QB1DABOMB
Date: July 15, 2005 at 21:05:51 Pacific
Reply:

I found the spybot log...it has shown the registries affected. Can I delete them without anything to worry about?


0

Response Number 9
Name: Jennifer SUMN
Date: July 15, 2005 at 21:06:57 Pacific
Reply:

Jay, Robbie gave you the Registry entry you should look for and delete...

Soylent Green is PEOPLE!


0

Response Number 10
Name: RobbieDickon
Date: July 15, 2005 at 21:07:40 Pacific
Reply:

No, no, I did not put a link.

What I said is to edit your registry to delete the coolwebsearch hijacker.

If you are not comfortable with editing the registry you should get someone who is.

The instructions I gave were how to get to the registry key and delete it.

Go to start/run / type regedit hit enter
Navigate to & delete this key.

HKEY_USERS\S-1-5-21-3142338559-1960234554-4035921304-1007\Software\Microsoft\Windows\CurrentVersion\InternetSettings\ZoneMap\Domains\searchmiracle.com

If you have that key in your registry and you delete it, it should fix your problem.

But, dont do it if you are not sure how to edit the registry.

Windows: Just another pane in the glass


0

Response Number 11
Name: QB1DABOMB
Date: July 15, 2005 at 21:09:55 Pacific
Reply:

Thank you both for your time and help, you'll hopefully give me peace of mind. Best of karma to both of you! :) Actually I ran spybot and in the .txt log file it spefically shows the location of the 7 registry entries. I went into regedit and have found them...can I just click on and delete those and my problem will be gone?

Thanks!


0

Response Number 12
Name: kev100
Date: July 15, 2005 at 21:11:18 Pacific
Reply:

I'm not sure if this is in your other thread, but....have you tried slaving your drive in another computer (if available) loaded with all the utilities, updated, that you mentioned above....and scanning your drive from there?

My experience with really infected PCs is:

Scanning completely with multiple tools in regular mode finds tons.

Scanning again in safe mode finds a bunch more.

Finally, scanning "off line" (as a slave drive in another pc) finds, surprisingly, several more bugs...and sometimes that one booger that was causing all the problems.

HTH


> PLEASE CONTRIBUTE to Computing.net - Report back which suggestions did/didn't help. <


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows XP Forum Home


Sponsored links

Ads by Google


Results for: MEGA trojan! NOTHING gets rid of it

Spyware/Adware-Cant Get Rid Of IT!! www.computing.net/answers/windows-xp/spywareadwarecant-get-rid-of-it/97609.html

xupiter.com (how do i get rid of it www.computing.net/answers/windows-xp/xupitercom-how-do-i-get-rid-of-it/45569.html

WinMem..can't get rid of it.. www.computing.net/answers/windows-xp/winmemcant-get-rid-of-it/153477.html