Removing Trojan Search Hijacker

[MadMax]

Originally Posted by Stever

Allowed me to blockem. Did a scan and it found a bunch of dialers did the remove but two werent able to be removed by norton but told me path on registry. Deleted it from registry but it came back.
Hunted deeper into registry and found a duplicate copy elsewere. Zapped it and now so far so good. Still need to shut machine down and restart to be sure.

Fingers are crossed.

Cant remember URL now. If it comes back i will post.

I've been hit with these before. For the ones Norton can't delete write down the path to the registry entry, reboot in safe mode and delete them manually in safe mode. For whatever reason, those search hijackers respawn if you delete them when windows is in full operation, but since safe mode has only the critical functions operating they're dormant and don't respawn (at least in my experience). HTH

[plateman]

Originally Posted by MadMax

I've been hit with these before. For the ones Norton can't delete write down the path to the registry entry, reboot in safe mode and delete them manually in safe mode. For whatever reason, those search hijackers respawn if you delete them when windows is in full operation, but since safe mode has only the critical functions operating they're dormant and don't respawn (at least in my experience). HTH

Ditto On what madmax said I was hit with the coolweb thing and tryed everything and read everything and come across the safe mode try and it took it out and I built 3 or 4 pc for others and gave them cw shredder just in case they got it down the road.. I feel your pain and had reformat in in back of my mind while spending all night trying to zap it..

[Stever]

I found some more stuff in registry and zapped it. Now its not coming back. But every time i reboot my machine Norton tells me about 1 or 2 viruses it finds. Seems something is still here triggering them. I also must have a dialer cause i get a little window saying dialer failed. Im on a cable connection so the dialer cant find a phone line to get out with.

Was not CoolWebSearch something different. Had CWS before and had to backup all my important stuff then reinstall windows to get rid of it.

Thanks for the input guys n gals