Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Tech Question (ADWARE)
ME

Posted on 11/30/2004 8:04:57 AM PST by MJY1288

I need help getting rid of an adware file that hijacks my browser and changes my "Home" page "About:blank"

The Adware file is something called CWS/hijack.html and the CWS stands for Cool Web Site. I have tried everything and it just won't go away. Any help would be greatly appreciated


TOPICS: Miscellaneous; Your Opinion/Questions
KEYWORDS: adware; internetsecurity; spyware
Navigation: use the links below to view more comments.
first 1-5051-81 next last
A very rare vanity for me :-(
1 posted on 11/30/2004 8:04:58 AM PST by MJY1288
[ Post Reply | Private Reply | View Replies]

To: MJY1288

go to www.lavasoft.com and download ad-aware


2 posted on 11/30/2004 8:06:12 AM PST by Mr. K ((this space for rent))
[ Post Reply | Private Reply | To 1 | View Replies]

To: MJY1288

http://www.soft32.com/download-CWShredder-19014-5.html


3 posted on 11/30/2004 8:07:00 AM PST by Recovering Hermit
[ Post Reply | Private Reply | To 1 | View Replies]

To: MJY1288

I use a product called SpySweeper that informs me when such actions are about to take place and gives me the option to leave my homepage unchanged. It works for me.


4 posted on 11/30/2004 8:07:12 AM PST by GSWarrior
[ Post Reply | Private Reply | To 1 | View Replies]

To: MJY1288
What's your definition of 'Everything'. Did you try Lavasoft Download the free version if you haven't already.
5 posted on 11/30/2004 8:07:22 AM PST by MarkeyD (<a href="http://www.johnkerry.com">Loser</a>)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Mr. K

I have the program now, and when I scan the system with it, it finds the files and deletes them and it returns immediately


6 posted on 11/30/2004 8:07:52 AM PST by MJY1288 (HOUSE CLEANING AT THE STATE DEPT. AND CIA IS IMMINENT)
[ Post Reply | Private Reply | To 2 | View Replies]

To: MJY1288

Spybot S&D


7 posted on 11/30/2004 8:08:02 AM PST by stainlessbanner
[ Post Reply | Private Reply | To 1 | View Replies]

To: GSWarrior

I have Spy Sweeper too, it also finds it and deletes it, but it returns


8 posted on 11/30/2004 8:08:47 AM PST by MJY1288 (HOUSE CLEANING AT THE STATE DEPT. AND CIA IS IMMINENT)
[ Post Reply | Private Reply | To 4 | View Replies]

To: Recovering Hermit

What is that?


9 posted on 11/30/2004 8:09:15 AM PST by MJY1288 (HOUSE CLEANING AT THE STATE DEPT. AND CIA IS IMMINENT)
[ Post Reply | Private Reply | To 3 | View Replies]

To: MJY1288; Old Sarge

Old Sarge had this problem and (I think) managed to fix it. Let's see if he can get back to you sometime today with a solution...


10 posted on 11/30/2004 8:09:18 AM PST by HiJinx (Support Our Troops ~ www.ProudPatriots.com)
[ Post Reply | Private Reply | To 6 | View Replies]

To: MJY1288

Sounds like you have the Cool Web Search crap.

Try CWSHREDDER, available at http://www.intermute.com/spysubtract/cwshredder_download.html


11 posted on 11/30/2004 8:09:21 AM PST by GaltMeister (The only time a Democrat should be allowed in the White House is to visit the President.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Mr. K

Sorry lavasoft can't help you with this nasty bug. You have to use CWS shredder.com. Then post your log file on this site http://forums.spywareinfo.com/index.php?b=1 and they will assist you on changing your directory ie. regedit(they will do it for free). This is a nasty malware program that can make up to 15 changes in you registry (depending). OR you can just restore your computer to factory condition and start from scratch (something I do once a yr anyway).


12 posted on 11/30/2004 8:09:42 AM PST by mlbford2 ("Never wrestle with a pig; you can't win, you just get filthy, and the pig loves it...")
[ Post Reply | Private Reply | To 2 | View Replies]

To: stainlessbanner

spybot s&d link:
http://www.spybot.info/en/mirrors/index.html


13 posted on 11/30/2004 8:11:08 AM PST by inn8
[ Post Reply | Private Reply | To 7 | View Replies]

To: MJY1288
Here's a link to SpywareInfo forums.

SpywareInfo

Read the page, follow the advice. It worked for me.

14 posted on 11/30/2004 8:11:22 AM PST by csvset
[ Post Reply | Private Reply | To 1 | View Replies]

To: Recovering Hermit
Thank You very much

Freepers are the best

15 posted on 11/30/2004 8:11:25 AM PST by MJY1288 (HOUSE CLEANING AT THE STATE DEPT. AND CIA IS IMMINENT)
[ Post Reply | Private Reply | To 3 | View Replies]

To: GaltMeister

Thank You


16 posted on 11/30/2004 8:12:15 AM PST by MJY1288 (HOUSE CLEANING AT THE STATE DEPT. AND CIA IS IMMINENT)
[ Post Reply | Private Reply | To 11 | View Replies]

To: MJY1288

I you use ad-aware make sure update and that you perform a "full system scan" rather than just a "smart system scan".


17 posted on 11/30/2004 8:12:36 AM PST by Catphish
[ Post Reply | Private Reply | To 1 | View Replies]

To: MJY1288

http://www.spybot.info/en/index.html

Testimonial
CNet:
Spybot delivers useful tools such as an e-mail list of opt-out addresses to stop unwanted solicitations and a file shredder to securely overwrite unwanted files deleted from your PC--all of which Ad-aware Standard Edition lacks. Best of all, Spybot does it all for free. For protection against ad-serving software, Trojan horses, and other means of tracking your surfing habits, get Spybot immediately.


18 posted on 11/30/2004 8:12:49 AM PST by BwanaNdege (Trust, but verify. Measure twice, cut once.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: MJY1288

That's a very nasty one. I had to hand delete entries in the registry for that one. I think there's an automated delete utility for it CWSShredder like another poster pointed out, although they keep updating this one faster than people can produce utilities to delete it.


19 posted on 11/30/2004 8:12:55 AM PST by Rightwing Conspiratr1 (Lock-n-load!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: MJY1288
Try turning off your "system restore" Many of the newer adwares embed in a restore point, and you cannot get rid of them until you turn it off and back on.

Best bet would be to turn of System Restore, then run CWS Shredder...link above. Then reboot and turn System Restore back on.

20 posted on 11/30/2004 8:13:13 AM PST by NeonKnight
[ Post Reply | Private Reply | To 1 | View Replies]

To: MJY1288

Download CWS Shredder to get it rid of. Then download Ad-Adware to clean up your windows file and download Spybot S&D to catch what Ad-Adware doesn't. Then download JavaCool Spyblaster to keep this nasty from EVER reinstalling. Finally, download Pivx to hardwall Internet Explorer from malicious code. And get a Trojan scanner like Ewido Security Suite to catch any trojans your anti-virus software misses. Hope all this helps.


21 posted on 11/30/2004 8:13:23 AM PST by goldstategop (In Memory Of A Dearly Beloved Friend Who Lives On In My Heart Forever)
[ Post Reply | Private Reply | To 1 | View Replies]

To: MJY1288

It sounds like Lop.com was somehow installed on your computer. I believe Search200.com has a removal program but be wary because this is where your problem came from…


22 posted on 11/30/2004 8:13:52 AM PST by Heartlander
[ Post Reply | Private Reply | To 1 | View Replies]

To: Rightwing Conspiratr1

I use several different spysweepers because none of them find it all.


23 posted on 11/30/2004 8:14:58 AM PST by Taylor42
[ Post Reply | Private Reply | To 19 | View Replies]

.


24 posted on 11/30/2004 8:15:31 AM PST by firewalk
[ Post Reply | Private Reply | To 23 | View Replies]

To: BwanaNdege

I downloaded free Spybot about 6 months ago and have been trouble free since. Highly recommended!!!!


25 posted on 11/30/2004 8:16:20 AM PST by finallyatexan
[ Post Reply | Private Reply | To 18 | View Replies]

To: Recovering Hermit; All
THANKS, THAT FIXED THE PROBLEM

Thank you everyone for your help

Freepers are the best!

26 posted on 11/30/2004 8:16:46 AM PST by MJY1288 (HOUSE CLEANING AT THE STATE DEPT. AND CIA IS IMMINENT)
[ Post Reply | Private Reply | To 3 | View Replies]

To: MJY1288

I bought SpySweeper because of a dialer that I couldn't get rid of--drove me nuts. I ran SpySweeper and it didn't find it. I called SpySweeper Tech Support and explained the problem. Those guys fixed it within a half hour. They're great and very patient. I highly recommend the product. I do, however, run both SpySweeper and Adware.


27 posted on 11/30/2004 8:17:15 AM PST by ExTexasRedhead
[ Post Reply | Private Reply | To 8 | View Replies]

To: MJY1288

As I remember, that was a horrible one to get rid of.

My first recommendation is to switch to a Mac or Linux, which don't have these problems. Apple is better if you want to continue using commercial software like Microsoft Office. It will save you an unbelievable amount of heartache with problems like this.

If that's not possible, search the web for "cws removal". I did, and found this, among millions of other links:

http://www.silentrunners.org/sr_cwsremoval.html

Ignore the ones that say you have to buy stuff. Often what they're selling you just introduces new spyware. If you want a spyware removal program, Spybot Search and Destroy and Ad Aware are said to be the best, but last time I looked even they didn't do much against CWS and variants.

Hope that helps.

D


28 posted on 11/30/2004 8:17:30 AM PST by daviddennis (;)
[ Post Reply | Private Reply | To 1 | View Replies]

To: MJY1288
I've found Pest Patrol (available here,or if you prefer the downloadable purchase, here) to be the best at spyware removal. Freebies such as AdAware and Spybot will both remove spyware, but certainly not all of it. If you do use Pest Patrol (or, for that matter, any of the others), it's best to install the program, reboot, enter safe mode (hit F8 while the computer first starts, and then choose safe mode). Once in safe mode, run your anti-spyware program, reboot, safe mode, and run program again. Do this until you are rid of the spyware. Hopefully, this will help.
29 posted on 11/30/2004 8:23:30 AM PST by Born Conservative (New annual national holiday for liberals: Shock and Awe Day , November 3rd.)
[ Post Reply | Private Reply | To 1 | View Replies]

people people..... before you simply throw out "spybot" or "adaware" you should at least take the time to see what the problem is. There are plenty of things that those cant fix.

my favorite post is "download hijack this"

hijack this does NOTHING to fix anything...and unless you are good at fooling around in the registry it is useless---unless you want a 10lb paperweight


30 posted on 11/30/2004 8:24:52 AM PST by KneelBeforeZod (Deus Lo Volt!)
[ Post Reply | Private Reply | To 8 | View Replies]

To: Recovering Hermit

ping


31 posted on 11/30/2004 8:25:17 AM PST by infohawk
[ Post Reply | Private Reply | To 3 | View Replies]

To: MJY1288

I had this problem and it is very difficult to eradicate. None of the standard spyware software will get rid of it for you, so people who are recommending Lavasoft don't know what they're talking about. You have to manually remove it yourself. By searching google for information, I found a tech support website that gave me step-by-step directions. I don't remember exactly where, but I put some search terms into Google and found it.

The basic concept is that you have to download a free program that creates a text file showing each command being executed on bootup. Then you have to go into your bootup file and manually delete the command lines that were inserted by the virus.

I followed the directions and it worked. The problem went away and my computer was not harmed in any way. But it was scary because I was concerned about deleting a command line that I needed. But as it turned out, it wasn't that hard to tell which ones were the offending commands that rerouted your browser.


32 posted on 11/30/2004 8:25:52 AM PST by Maximilian
[ Post Reply | Private Reply | To 1 | View Replies]

To: MJY1288

a copy of CoolWebShredder should take care of it. Spybot will also grab it and let you delete it.


33 posted on 11/30/2004 8:26:35 AM PST by RJS1950 (The rats are the "enemies foreign and domestic" cited in the federal oath)
[ Post Reply | Private Reply | To 1 | View Replies]

To: MJY1288; All

Just a general spyware note - sometimes you need to install and run the updates for the programs mentioned - then reboot into safe mode and run the programs to clean up the mess.

To get to safe mode, start tapping on the F5 key when your PC is first booting up.


34 posted on 11/30/2004 8:26:37 AM PST by GaltMeister (The only time a Democrat should be allowed in the White House is to visit the President.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: MJY1288
Bump for later. I have been jerking around with my laptop for two days trying to get rid of this bug.

Hackers should be drawn and quartered after being burned over a spit for an hour ot so.

Thanks for posting this.

35 posted on 11/30/2004 8:28:45 AM PST by Fzob (Why does this tag line keep showing up?)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Maximilian
CWShredder fixed the problem in 20 seconds, I just ran Spy Sweeper and Lavasoft and neither found any remnants of it :-)
36 posted on 11/30/2004 8:29:30 AM PST by MJY1288 (HOUSE CLEANING AT THE STATE DEPT. AND CIA IS IMMINENT)
[ Post Reply | Private Reply | To 32 | View Replies]

To: KneelBeforeZod

Hijack This should be set to SCAN only. It lets you look in the bowels of Windows to see what's running and then post the results in one of the anti-spyware forums. The experts there can help return your computer to normal. However, once you get it back, the best piece of anti-intrusion software I've tried is Pvix's Qwik Fix Pro. It will lock down Windows by turning off unneeded services and patching dangerous exploits used by virus and trojan writers and malware pushers. Check it out. http://www.pivx.com


37 posted on 11/30/2004 8:30:30 AM PST by goldstategop (In Memory Of A Dearly Beloved Friend Who Lives On In My Heart Forever)
[ Post Reply | Private Reply | To 30 | View Replies]

To: MJY1288
I have the program now, and when I scan the system with it, it finds the files and deletes them and it returns immediately

I have three kids. So, I've had this Adware problem twice in the past year. The last time it happened my oldest disengaged Norton and downloaded a browser hijacker (thinking it was something else). Subsequent attempts to get programs to get rid of the bug failed and the virus always regenerated.

So far only one thing has worked: Re-installing the operating system. I hate to discourage you but I think you will arrive at this outcome.

38 posted on 11/30/2004 8:31:26 AM PST by Types_with_Fist (I'm on FReep so often that when I read an article at another site I scroll down for the comments.)
[ Post Reply | Private Reply | To 6 | View Replies]

To: MJY1288

It looks like CWshredder is a new program written since I had the problem which was specifically designed to get rid of just this specific virus. Better than manually deleting registry entries yourself. Glad you found a solution.

I noticed on another post that someone mentioned "Hijack this." That rings a bell as the name of the program I used to create a registry log. But as someone else pointed out, if you mess up your registry, you could have serious problems with your computer.


39 posted on 11/30/2004 8:31:35 AM PST by Maximilian
[ Post Reply | Private Reply | To 26 | View Replies]

To: Types_with_Fist

Not necessarily. Some of the nasties also break your internet connection string and if its broken even reinstalling Windows won't fix it. That's why you should use LSPfix software to fix the connection string before reinstalling Windows. The best course is still prevention and having either IE-SpyAd or Qwik-Fix will keep dangerous websites out of bounds. So if a kid disables anti-virus software or a firewall, malicious code can't run because its blocked. Think of it as a condom for the World Wide Web.


40 posted on 11/30/2004 8:36:52 AM PST by goldstategop (In Memory Of A Dearly Beloved Friend Who Lives On In My Heart Forever)
[ Post Reply | Private Reply | To 38 | View Replies]

To: BwanaNdege

However, the Spybot writer has stopped doing updates because too many corporations were using his product without sending him any money. I understand he's in the process of turning his free product into a real business. I hope so, I thought it was much better than Ad-Aware.


41 posted on 11/30/2004 8:37:22 AM PST by nina0113
[ Post Reply | Private Reply | To 18 | View Replies]

To: MJY1288

Glad that it worked!


42 posted on 11/30/2004 8:38:19 AM PST by Recovering Hermit
[ Post Reply | Private Reply | To 15 | View Replies]

To: Maximilian

Exactly. Messing around with the registry could leave your computer inoperable. What you want is to get rid of the garbage spammers install on your computer in unwanted drive by downloads and keep it off for good.


43 posted on 11/30/2004 8:38:48 AM PST by goldstategop (In Memory Of A Dearly Beloved Friend Who Lives On In My Heart Forever)
[ Post Reply | Private Reply | To 39 | View Replies]

To: MJY1288

Run Spybot in safe mode. If necessary, delete the dll's in safe mode and reboot, then rerun Spybot.


44 posted on 11/30/2004 8:38:57 AM PST by Sir Gawain
[ Post Reply | Private Reply | To 8 | View Replies]

To: MJY1288

I have the same problem, and my tech knowlegge is limited to the ON/OFF function..MY ISP ( Optonline) help dept spend three hours with me trying to fix it...they use the gizmo where they take over my computer..it stumped them all..they switched me to Mozilla....so far no prob..


45 posted on 11/30/2004 8:39:04 AM PST by ken5050
[ Post Reply | Private Reply | To 1 | View Replies]

To: MJY1288; Types_with_Fist

Spammers have figured out how to turn off or bypass Ad-Aware.

What you need to do is:

1) uninstall the version of Ad-aware that you have.

2) go to Lavasoft.com and download the updated version.

You'll still need to run the program on a regular basis.


46 posted on 11/30/2004 8:40:02 AM PST by Corin Stormhands (It's beginning to look a lot like RamaHanuKwanzMas)
[ Post Reply | Private Reply | To 6 | View Replies]

To: nina0113

Shareware's worth the price if there are regular improvements and monthly updates. Norton Anti-Virus/Personal Firewall are worth the price. And I have yet to be infected by a virus.


47 posted on 11/30/2004 8:40:39 AM PST by goldstategop (In Memory Of A Dearly Beloved Friend Who Lives On In My Heart Forever)
[ Post Reply | Private Reply | To 41 | View Replies]

To: Recovering Hermit
I can't tell how glad I am that it worked!!!...

Thanks Again for your help.

All Hackers must be democrats :-)

48 posted on 11/30/2004 8:40:47 AM PST by MJY1288 (HOUSE CLEANING AT THE STATE DEPT. AND CIA IS IMMINENT)
[ Post Reply | Private Reply | To 42 | View Replies]

To: Corin Stormhands

Thanks, Will do!


49 posted on 11/30/2004 8:41:28 AM PST by MJY1288 (HOUSE CLEANING AT THE STATE DEPT. AND CIA IS IMMINENT)
[ Post Reply | Private Reply | To 46 | View Replies]

To: goldstategop
The best course is still prevention and having either IE-SpyAd or Qwik-Fix will keep dangerous websites out of bounds.

Thanks for these! We do all of our schoolwork on the computer and with the Internet, so I've been looking for ways to protect the systems.

Thanks as well for correcting me. I have limited knowledge of computer innards, so the Adware problems can cause a great headache. We DID try any number of programs after-the-fact and, although the bug appeared to vanich it would come back upon re-start. For us re-installing Windows worked. But there are numerous nitwits out there constantly thinking of how to destroy the property of others and, as someone else pointed out, it is difficult for any program to keep up.

You are right about "prevention."

50 posted on 11/30/2004 8:42:03 AM PST by Types_with_Fist (I'm on FReep so often that when I read an article at another site I scroll down for the comments.)
[ Post Reply | Private Reply | To 40 | View Replies]


Navigation: use the links below to view more comments.
first 1-5051-81 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson