CW Shredder problem

[Eonfire]

Nah i've still got nothing here, i'll probably just reinstall. Cheers for the help though, i've deleted some of the stuff that was there, i thought i needed it running for the computer to work!

Anyway i loaded the Dll files and nothing happened, it still says that the host file isn't present. If it means anything it was installing it in Windows Temp, i haven't got a clue whether or not thats the right place.

How do you people learn this stuff anyway? I'm just wondering because if i knew where to start i'd probably be able to work some of it out myself. (eventually)

[Cybr1d]

well i've broken my computer about 30 times and attempted to fix it each time. Didn't break it intentionally...but learned from my mistakes. Spend a lot of time reading in AO really helps too . Pretty much talking to IT guys, making calls to Tech Support for someone else teaches you a lot as well . I've done that for a few of my friends...if they needed to call Tech support for anything, i'd ask them to let me do the call from their house and have them walk me through the fixing procedures...taking notes as well . Remembering what belongs on my computer and noticing any folders that shouldn't be there also helps when it comes to spyware/adware.

Back to your problem:

Download all the runtime libraries just to be safe. Are you planning on reinstalling windows completely? You will still need to install the runtime libraries and learn to keep yourself safe from spyware. Installing a router and a firewall will also help out...I.E. If you install Bargain Buddy by accident, it will not connect to the internet to download more spyware.

Peace.

[groovicus]

In addition to all the good help you are getting I here, I would like to point out that you have absoulutely no sign of a CWS infection anywhere.

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
Why is this running twice all the time?

Those are just orphaned registry entries...they are not doing anything.

When you say your system is running slow, do you mean in general, or on bootup?? I may have missed it somewhere, but I didn't see any system specs anywhere. It might be helpful.

Also, some of the tools you are trying to use are for XP and higher...ME has it's own special procedures. I would also caution you against removing things from your registry until you have Googled for each entry, and are absolutely sure you know what you are dealing with. It sounds like you may have removed something that you shouldn't have.

It would also be helpful to note that when you are getting help with logs, stick to the advice of one person, even though others may be trying to help. If you hop from one bit of advice to another, you are going to get confused.

Also, if you did anything before posting that log above, you may have masked any symptoms that were present. Your best bet is to post a log when the infection is fully evident, then ask someone to help guide you through.

Good luck.

EDIT: One last note..everything in the registry looks odd to me. That's why I mess with it as little as possible.

[Eonfire]

Your best bet is to post a log when the infection is fully evident, then ask someone to help guide you through.

Thats probably a good idea, i'll leave it next time and remember to post here if/when it happens. I remember the Merijn page saying something about one of the cws problems not showing up in the hiijack this logs, maybe it's one of those, but i'll reinstall and if it happens again i'll post here before messing around with stuff.

Thanks for the help with trying to find it anyway, and if i find out what it was i'll post back.

later

[groovicus]

IIRC, they all show up in the logs, one way or another, but there are quite a few variants that CWS shredder won't fix, nor can they be fixed with HJT. They involve hidden files that can only be found with tools like dllfix (which was just pulled), or FindFix, or a variety of others.

FYI, the about:blank version seems to be fixed by Pandasoft's online scan.
*PandaSoft

The newest update of Adaware targets some variants of CWS, but only if run in safe mode.