Hi All,
A friend rang me after getting adsl at his home. Whenever he connected he got masses of pop up and his laptop went crazy. I managed to remove over 15 trojans and mostly w32.spybot and bobax.c viri. After I thought i had cleaned everything down we reconnected to the internet and a few seconds later three windows poped up showing porn and they were titled "pwnage clan and hack". I later identified this to be CWS.smartsearch using cws.shreader. While trying to remove CWS.smartsearch, shreader said that the hijack was trying to block its process and its name would change to a random name? should this have happened? I have used everything to clear cws.smartsearch, but nothing seems to work, any suggestions? I even took the laptop home with me a found that when you connect to the internet ports 4226 to 4428 are listening and then there are over 200 syn_sent to microsoft -ds. Is this a DOS attack? is there something that i cant find? I have used the following tools.
1 Spybot S&D
2 Adaware 6.0
3 Pest patrol
4 Stinger
5 NAV corporate
6 CWS.shreader
All have been updated

Hope you can help
Airman22