help and i am fucking doomed
 

oke i hve tried to post on other boards didnt work, when reviewing this morning i got the coolwwwweb shit the virus in my puter, i went back to save mode run spy sweeper and other shit, after that i start up on normale mode. now my puter starts up very slow, i can get on icq anymore, i cant post on most boards anymore, alot is changed in my puter, the shit is gone, but problem is still, to slow and not getting to use all, any hint on this one? lol still wonder why this is the only board i can post, i have tried windows update dont work, mmm i wanna know where i can find the option in my puter restore system , i cant emmeber anymore, i use xp pro, i cant send emails, i get not enough memorie

which tool i cant see an link

Hang on stu

File too large to attach, follow this link to download

http://www.intermute.com/spysubtract..._download.html

do you mean cwshredder? it wont catch this one i have tried, it, it seems its away, but still something is in my pputer, i have search alot of google stuff to find the solution, what i found didnt give me the solution, but i am in deep shit now, all i know that this one isnt easy to remove

thanks i am trying that , damnn i am wrking on this one since 11 morning my time so thats 8 hours already, gonna try your link madmax

i cant get the link it wont work, oke final option before i throw my puter thru the window, where do i find the restore stystem thing in xp? and oh i wish the guy who gave me this will get all the diseases of the world

Try this direct link:

http://cwshredder.net/bin/CWShredder.exe

Should download immediately.

nop doesnt work, i have xcwshredder but its also known it cant remove the last version of cool webthing ,fucking shit damn fucking cheaters, mmmmmmmm i now need to know the restore system thing in xp, because i lost alot

Maybe you need more Fruit in your work

funny cleo, arghhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh dont start now, damn i cant even put an stupid smilie, here, i think i have alot patience today because dealing 8 hours with some fucking shit , and believe me not a thing can protect you from this one, its getting on my freaken nerve now, and instead of talking about fruit, help me out will ya, where the hell can i find that restore thing

hey stu :D system rstore should be here, i am win XP home tho but this should be same place:

all programs/accesories/system tools/system restore

hope u get this fixed

thanks bm thats what i wanted t know gonna try that one

Don't know if this will help

Important! A new variation of Coolwebsearch includes the CWS SmartKiller, which prevents you from reaching anti-spyware sites, and keeps Spybot and Hijackthis from working. In order to clean your system, you must first download and run a special Smartkiller cleaning tool.
http://www.siena.edu/antivirus/spyware/cws.asp

Sorry but I'm about as useless on Windows viruses as it gets since I don't use Windows.

Didn't this just happen to you less then a month ago? :(

Hi Stu,
I had this muthafucker a while back,
And got rid of it with the help of this forum:
http://www.techsupportforum.com/forumdisplay.php?f=50

Go to this thread first:
http://www.techsupportforum.com/showthread.php?t=15968

If you can't get onto that forum post here and I'll post the info here

The best way to remove this shit is a full restore. As in re-install the OS from the disks. Wipes hard-drive clean. just make sure you've backed up your important files.

Gallery and FreeSite reviewers should consider using a second cheaper machine dedicated to reviewing sites or surfing potentialy unsafe sites. That way when you do catch something you just wipe the hard drive clean and not worry about loosing data.

CoolWebSearch sucks, I've had it a few times. All the programs that claim to get rid of it don't do a good job. It gets so deep into your system, and its always changing to stay ahead of the anit-spyware. Got to clean the hard-drive completely or it will come back.

P.S. This is my 100th post here at Greeny. Happy anniversary to me!|party

btw in XP pro you need to go:
My computer> drive C> Windows> System32> rstrui.exe
Make sure in the left hand menu panel you can view hidden files and folders.

From what I remember, this won't get rid of the problem, but you WILL need to disable it when running the fix as the cws reinstalls every time if system restore is on.

Took about 3 days to get back up and running, it's a very busy forum over there, but they will and do get you back up.

Stever, that forum link I posted has guys that will get rid of it. Takes a few days but you don't lose all your work. Congrats on the 100th post btw :)

no cleo this one not, this one is the new one where butster is talking about, and for real its an huge pain in the ass, that coolwebthing, will get in your puter as an virus, i got it from a free site i reviewed this morning, cwshedder cant remove this one its to clean to find, your viru scanner will catch it but it wont be able to remove it, it use alot of your programs and files, its gone now, but with removining that one, alot of my files went gone also which makes my puter like shit, i can download te files but it wont instal, even system restore dont work, still i am not gonne whipe out my whole sustyem and instal it again, even it wll tak me all night or all week, i will get the thing , like always, and i apriciate all the help i got and get from all people, i owe you guys and girls!!!!!

like i said i have remove the think but my system is so slow and i cant use all no emails and all, i think i will use the xp pro disk ducth language to get over my stuff, damnnn i still wonder why i like to review this is the first time i had the collweb thing and right away the worse one too

Jell , can you please inform rowdy about my issue, i cant get on icq and all also i cant post on the newbie board i have tried a coupe of times, i have callled a guy who will help me out tomorrow,!!!

a jel i cant get t that forum, i cant get anywhere, damnnn i am so fucking doomed btw the guy who gave it to me too, a friend of my contacted his host with a nice message

NP stu, I'll let Rowdy know :)

Stu do you have a spare machine you can use to get on the net? That's what I done until I got things fixed up. Hope your guy sorts things tomorrow for you |thumb

I think that as you have removed the cws feature already that forum may not be much help at the moment, if you are still stuck after your guy turns up I'll post the tools needed here, and if it's OK with the Green Guy I can relay your info to the other place if you post it here. Not sure if the PM feature here allows for lengthy messages?

i dont mind if you post my info anywhere i just need to get out of this shit, i cant afford to loose all my stuff again on this puter i did on the last one and many thanks for the help i realy apriciate it .!!!!

Stu try using Microsofts spyware program, its in beta format and free...for me it's been the most effective in handling these problems. I use a combo of Avast and MS Spyware and I haven't been infected with a virus or adware in a long time.

I guess you couldn't use firefox to review as these things as they would slip by the review process?

mr bleu, yep i tried to use firfox for reviewing but most still use ie for building, the one i got my shit from use ie, damn i should have listen to , i believe it was raw alex or dare last time, when somebody use an name like phil collins...blacklist them because thats the fucker i got this shit from, i was helping pimplinks with reviewing .....and i am so doomed now, but watch me i ill be back.i will...

i have 4 spares here in the house but i am afraid to fuck up frot the others, i used my hubbies puter to prnt hit and all to fix this, i am gonna try mister bleus thing, and if that not works the only selution will be reinstall xp pro, because the putere is telling me i miss .dll files, please bare my chinese but deling with this stuf for more thne 11 hours will make you tired

Well normally if you reinstall windows the only thing you will lose is your emails.

still a weeeehhhhhhhhhhhhhhhhhhhh my old puter crashed 2 times i lost all, but then i have no other choise then to put the shit up again...will be tomorrow i am to tired now.....i wanna thank all for trying t help me, i realy realy apriciate it all, and i bow for you all, now me gonna kill some one to get loose of my stress............

Just backup your emails before you reinstall. You can do it manually or use a program called Outlook Express Backup. It'll create a self extracting archive and it also saves your bookmarks, rules, etc, for outlook.

I do a backup of my emails once a week just incase my computer dies on me.

yeah i saw an message that cnt send emails because some dll files are missing, i thought to fixed that to reinstall ie6 but it wont reinstal

Stu - make sure that when you run those programs like cwshredder and hijackthis as well as spysweeper and your antivirus that you do it from safe mode (just start your computer and tap F8 a few times to get to the menu to choose safe mode) and make sure you are not connected to your net connection - if you have more than one user account on your computer you will also need to run those programs as the admin first and then each user

After you have removed everything (I sure wish you could post exactly what type of symptoms you are having besides being slow like any popups, or any particular virus/trojan being identified) I would run the hijackthis and post a copy of the log here or you can pm it to me

I would not recommend a system restore unless you are sure you have a good clean version - most of the good trojans these days attach themselves to the backup files first to ensure they stick around after a restore

virtual machines are better than real ones
 

Might I suggest an alternative to a whole other box? http://www.microsoft.com/windows/virtualpc/default.mspx
or
http://www.vmware.com/products/desktop/ws_features.html

Burn an ISO of your Windows CD to your box and you can (re)load a virtual machine in no time.

Better than buying a whole freakin other box and faster to reload. |headbang|

Scuse me, Would yo kindly keep youre language down please. There are children that read the boards.

Stu,

wish I could help but I have an old Fruit too... I hope keeping my fingers crossed for you is a little help.

Excellent post, posting a Hijack this log is helpful...I'm not great at reading them, but the people that are can usually pinpoint all the things you need to do.

Describing the problem a bit more would also be good...I have a feeling you haven't cleared all the virus / adware that's present.

If you know the name of the file a few things you might want to try
1) go to control panel/admin tools/ local policy. once that is up and running create a new software restriction policy in the addtional rules section. make a new rule based on path. put in the path to the file and disallow. if you know of any other files that are related to this file is using create rule for them also.
2) go to start/ run/ type msconfig
go to services and check off hide all microsoft service. now uncheck everything. this is going to stop anything you might need running but this part is only a tempory thing to do. IE if you have a remote desktop service that is not MS software it will not run after you do this part. next in the same msconfig go to start up and uncheck everything except explorer. look in the command tab this will tell you the location of the a file that will run on system start up. if you are not sure what it is then leave it alone. but anything you know of ie (adobe update service) and shit like that. make sure the checks are removed. you dont need this crap hammering down your boxes resources. once you apply this then you will be asked to restart. DONT RESTART. make note of the location of that software. restart your computer in safemode. and go to the directories where they are to be siting. IE c:\program files\shithead software. And delete all the crap you can. You should be able to delete the whole thing. now also check your local administrators group. IE right click my computer and go to manage. Any user in that group other then you and administrator should be removed. now restart the box normally. and see if you can get to where you need to go on the internet. if all is ok, this next process could take some time. you have to go into msconfig again and re-enable every service you shut off one at a time and restart the box every time. Bring the box to a full shut down and wait about 10 seconds for the drives to stop spinning. turn the box back on and keep turning on your services that you had shut off one at a time until everything is ok. if you find you are not able to get out to the internet sites after you reenable one then that is the fucker. Find its location and remove it. if you need software to remove the service let me know you can get them off of any windows resource kits. I'll throw up the service removal one for you. hope this helps. Just in my opinon I would just dump the box and rebuild it. I dont bother with any spyware or any filter software anymore. it ruins my internet experiance. i just run a virus protection and rebuild my boxes every 3 months nice and clean. shit xp load a new box in 20 minutes, all this time you have spent today trying ti fix this, and you could have been up and running clean and new. jugg.....

Ouch...so sorry to hear about this Stu :( Farging iceholes installing this crap should be rolled in honey and tied to a fire ant mound |angry|

Looks like a lot of good ideas have already been proferred...hope you get it fixed soon!

I'm doing site reviews in FF. I have found that FF is less forgiving of bad code than IE. So, I made that one of the rules on my list...make sure your code is FF compliant. Haven't noticed any real problems or had any resistance from submitters...yet...

Good luck Stu!

linkster, i have done all that, i have no pop up no virus , but it seems with removing the bad stuff, i re moved alot of my ie .lol. so my internet exlporer doesnt work anymore ad i cant reinstal it to, and my system restore dont work anymore, na i will reinstal xp today