Re: [PCTECH] CoolWebSearch browser hijacker - Part II (Windows Update not working)

[Neil Palmer/DPS <neilp@xxxxxxxxxxx>]

Dan,

Make sure you have the latest version of AdAware (AdAware ASE - not 
AdAware Personal).  AdAware Personal seems to have screwed up on a recent 
update, it updated the new signature file to 5% and then hangs, and after 
that it won't update anymore.  I've had to uninstall AdAware, download the 
new free version, and reinstall, on 3 of my friends home PC's in the last 
2 weeks to get around that problem.

ANYWAY - the key to getting rid of CWS is, run AdAware full scan with the 
PC in SAFE mode.

...Neil





"Dan Bale" <dbale@xxxxxxxxxxxxx> 
Sent by: pctech-bounces@xxxxxxxxxxxx
2004/11/02 08:39



To
"PC Technical Discussion for iSeries Users" <pctech@xxxxxxxxxxxx>
cc

Subject
[PCTECH] CoolWebSearch browser hijacker - Part II (Windows Update not 
working)






Referring to last month's thread beginning at
http://archive.midrange.com/pctech/200410/msg00122.html:

CoolWebSearch is stealthier than I thought.  I've run CWShredder, SpyBot
S&D, AdAware.  Several times.  It still manages to come back, although I
have not witnessed the IE browser being hijacked.

This may or may not be related to CWS, but I am unable to get Windows 
Update
to work.  I was able to get SP2 installed on this XP Home box (after first
running all of the above "cleaners"), but Windows Update is still not
working.  I followed instructions at M$ KB that caused a new version of
Windows Update to be downloaded; it cranks for awhile, and I get "100%
downloaded".  It cranks a little more, and I get "100% registered".  And
then it just sits there.  I left it on overnight on the hope that it might
do something, but no go.  Instead I get welcomed with a "low resources"
warning.

I'm ready to give up on this and tell the owner that he may just need to 
do
a scratch install.

Advice / suggestions welcomed and appreciated.
db