I have got a version of the Coolweb trojan that I can’t get rid of. I’ve tried CWshredder and several other recommended spyware removers. I can’t use Internet explorer and useing Firefox for the moment. Whenever I click a link in Outlook it tries to use IE. Opens for a secound and begins to load and then closes. Macafee then gives me a message that says **Windows/eacdf/dll ** was infected with Startpage-DU.dll trojan and was deleted. I’ve tried several programs from safe mode. Still there. Ewido Security suite finds it in my registry but cannot remove it.
Any help appreciated.
Download cwshredder.
My mistake. I neglected to see that you already tried cwshredder. I guess my next suggestion would be to make sure you have the latest version of cwshredder as that trojan keeps mutating and older versions of cwshredder don’t work on the new varients.
For persistent sopyware infections, download HijackThis, unzip it to a folder (other than the temporary internet folder), scan and post the log in a new thread at the Malware Removal forum at SpywareInfo.com . They’ve got some crackerjack advisors that can walk you through the removal process.
Remember to temporarily disable Windows System Restore before running the shredder or the next time you reboot, Windows will restore the files deleted by the shredder.
Without trying to sound like I’m shilling for something, I’m one of those wussies who decided to buy a program to do what can be done for free if one were so inclined.
I bought Pest Patrol when I had a browser hijacker that neither spybot nor adaware could get rid of. But $35 seemed reasonable to me.
After running both adaware and spybot, I ran my Pest Patrol, figuring it might help rid me of the one item I was interested in.
Wow! They found about 35 entries that were on my machine that were NOT found by either spybot or adaware.
While they didn’t get rid of the browser hijacker on the first run, (it was very new), they did in about a week.
Again, the advice you’ve been given by others in earlier posts are great. I’m just telling you about my experience if you’ve got the $35 or so to spend.
With kids in my house on the computer, it saves me a lot of grief.
I’m a cheapskate, so I’d try Panda Activescan (an online virus scanner) - it also scans for other kinds of malware now; between Panda Activescan, Grisoft AVG, Trend Housecall, CWShredder, Hijackthis and Spybot (and also not forgetting occasional use of Safe Mode), I’ve not yet encountered an infection that I couldn’t eventually fix.
I’ve seen some really devious ones that consist of paired processes; either one of which will immediately resurrect the other if you use task manager to kill it. Running a selective startup might be necessary to get booted into a system where they aren’t actually running, so you can delete them.
Be sure to run CWShredder in Safe Mode. Some versions of CWS will reinfect under normal mode.