Skip to comments.Tech Question (ADWARE)
Posted on 11/30/2004 8:04:57 AM PST by MJY1288
I need help getting rid of an adware file that hijacks my browser and changes my "Home" page "About:blank"
The Adware file is something called CWS/hijack.html and the CWS stands for Cool Web Site. I have tried everything and it just won't go away. Any help would be greatly appreciated
go to www.lavasoft.com and download ad-aware
I use a product called SpySweeper that informs me when such actions are about to take place and gives me the option to leave my homepage unchanged. It works for me.
I have the program now, and when I scan the system with it, it finds the files and deletes them and it returns immediately
I have Spy Sweeper too, it also finds it and deletes it, but it returns
What is that?
Old Sarge had this problem and (I think) managed to fix it. Let's see if he can get back to you sometime today with a solution...
Sounds like you have the Cool Web Search crap.
Try CWSHREDDER, available at http://www.intermute.com/spysubtract/cwshredder_download.html
Sorry lavasoft can't help you with this nasty bug. You have to use CWS shredder.com. Then post your log file on this site http://forums.spywareinfo.com/index.php?b=1 and they will assist you on changing your directory ie. regedit(they will do it for free). This is a nasty malware program that can make up to 15 changes in you registry (depending). OR you can just restore your computer to factory condition and start from scratch (something I do once a yr anyway).
spybot s&d link:
Read the page, follow the advice. It worked for me.
Freepers are the best
I you use ad-aware make sure update and that you perform a "full system scan" rather than just a "smart system scan".
Spybot delivers useful tools such as an e-mail list of opt-out addresses to stop unwanted solicitations and a file shredder to securely overwrite unwanted files deleted from your PC--all of which Ad-aware Standard Edition lacks. Best of all, Spybot does it all for free. For protection against ad-serving software, Trojan horses, and other means of tracking your surfing habits, get Spybot immediately.
That's a very nasty one. I had to hand delete entries in the registry for that one. I think there's an automated delete utility for it CWSShredder like another poster pointed out, although they keep updating this one faster than people can produce utilities to delete it.
Best bet would be to turn of System Restore, then run CWS Shredder...link above. Then reboot and turn System Restore back on.
Download CWS Shredder to get it rid of. Then download Ad-Adware to clean up your windows file and download Spybot S&D to catch what Ad-Adware doesn't. Then download JavaCool Spyblaster to keep this nasty from EVER reinstalling. Finally, download Pivx to hardwall Internet Explorer from malicious code. And get a Trojan scanner like Ewido Security Suite to catch any trojans your anti-virus software misses. Hope all this helps.
It sounds like Lop.com was somehow installed on your computer. I believe Search200.com has a removal program but be wary because this is where your problem came from
I use several different spysweepers because none of them find it all.
I downloaded free Spybot about 6 months ago and have been trouble free since. Highly recommended!!!!
I bought SpySweeper because of a dialer that I couldn't get rid of--drove me nuts. I ran SpySweeper and it didn't find it. I called SpySweeper Tech Support and explained the problem. Those guys fixed it within a half hour. They're great and very patient. I highly recommend the product. I do, however, run both SpySweeper and Adware.
As I remember, that was a horrible one to get rid of.
My first recommendation is to switch to a Mac or Linux, which don't have these problems. Apple is better if you want to continue using commercial software like Microsoft Office. It will save you an unbelievable amount of heartache with problems like this.
If that's not possible, search the web for "cws removal". I did, and found this, among millions of other links:
Ignore the ones that say you have to buy stuff. Often what they're selling you just introduces new spyware. If you want a spyware removal program, Spybot Search and Destroy and Ad Aware are said to be the best, but last time I looked even they didn't do much against CWS and variants.
Hope that helps.
people people..... before you simply throw out "spybot" or "adaware" you should at least take the time to see what the problem is. There are plenty of things that those cant fix.
my favorite post is "download hijack this"
hijack this does NOTHING to fix anything...and unless you are good at fooling around in the registry it is useless---unless you want a 10lb paperweight
I had this problem and it is very difficult to eradicate. None of the standard spyware software will get rid of it for you, so people who are recommending Lavasoft don't know what they're talking about. You have to manually remove it yourself. By searching google for information, I found a tech support website that gave me step-by-step directions. I don't remember exactly where, but I put some search terms into Google and found it.
The basic concept is that you have to download a free program that creates a text file showing each command being executed on bootup. Then you have to go into your bootup file and manually delete the command lines that were inserted by the virus.
I followed the directions and it worked. The problem went away and my computer was not harmed in any way. But it was scary because I was concerned about deleting a command line that I needed. But as it turned out, it wasn't that hard to tell which ones were the offending commands that rerouted your browser.
a copy of CoolWebShredder should take care of it. Spybot will also grab it and let you delete it.
Just a general spyware note - sometimes you need to install and run the updates for the programs mentioned - then reboot into safe mode and run the programs to clean up the mess.
To get to safe mode, start tapping on the F5 key when your PC is first booting up.
Hackers should be drawn and quartered after being burned over a spit for an hour ot so.
Thanks for posting this.
Hijack This should be set to SCAN only. It lets you look in the bowels of Windows to see what's running and then post the results in one of the anti-spyware forums. The experts there can help return your computer to normal. However, once you get it back, the best piece of anti-intrusion software I've tried is Pvix's Qwik Fix Pro. It will lock down Windows by turning off unneeded services and patching dangerous exploits used by virus and trojan writers and malware pushers. Check it out. http://www.pivx.com
I have three kids. So, I've had this Adware problem twice in the past year. The last time it happened my oldest disengaged Norton and downloaded a browser hijacker (thinking it was something else). Subsequent attempts to get programs to get rid of the bug failed and the virus always regenerated.
So far only one thing has worked: Re-installing the operating system. I hate to discourage you but I think you will arrive at this outcome.
It looks like CWshredder is a new program written since I had the problem which was specifically designed to get rid of just this specific virus. Better than manually deleting registry entries yourself. Glad you found a solution.
I noticed on another post that someone mentioned "Hijack this." That rings a bell as the name of the program I used to create a registry log. But as someone else pointed out, if you mess up your registry, you could have serious problems with your computer.
Not necessarily. Some of the nasties also break your internet connection string and if its broken even reinstalling Windows won't fix it. That's why you should use LSPfix software to fix the connection string before reinstalling Windows. The best course is still prevention and having either IE-SpyAd or Qwik-Fix will keep dangerous websites out of bounds. So if a kid disables anti-virus software or a firewall, malicious code can't run because its blocked. Think of it as a condom for the World Wide Web.
However, the Spybot writer has stopped doing updates because too many corporations were using his product without sending him any money. I understand he's in the process of turning his free product into a real business. I hope so, I thought it was much better than Ad-Aware.
Glad that it worked!
Exactly. Messing around with the registry could leave your computer inoperable. What you want is to get rid of the garbage spammers install on your computer in unwanted drive by downloads and keep it off for good.
Run Spybot in safe mode. If necessary, delete the dll's in safe mode and reboot, then rerun Spybot.
I have the same problem, and my tech knowlegge is limited to the ON/OFF function..MY ISP ( Optonline) help dept spend three hours with me trying to fix it...they use the gizmo where they take over my computer..it stumped them all..they switched me to Mozilla....so far no prob..
Spammers have figured out how to turn off or bypass Ad-Aware.
What you need to do is:
1) uninstall the version of Ad-aware that you have.
2) go to Lavasoft.com and download the updated version.
You'll still need to run the program on a regular basis.
Shareware's worth the price if there are regular improvements and monthly updates. Norton Anti-Virus/Personal Firewall are worth the price. And I have yet to be infected by a virus.
Thanks Again for your help.
All Hackers must be democrats :-)
Thanks, Will do!
Thanks for these! We do all of our schoolwork on the computer and with the Internet, so I've been looking for ways to protect the systems.
Thanks as well for correcting me. I have limited knowledge of computer innards, so the Adware problems can cause a great headache. We DID try any number of programs after-the-fact and, although the bug appeared to vanich it would come back upon re-start. For us re-installing Windows worked. But there are numerous nitwits out there constantly thinking of how to destroy the property of others and, as someone else pointed out, it is difficult for any program to keep up.
You are right about "prevention."
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.