JackCam614
Premium
join:2000-08-24
New Hyde Park, NY | reply to tashi
Re: SpyBot S&D Scan result...
Hello tashi1,
Sorry for the delay. We 'cross posted', and I didn't see your post until my return. I'll follow your directions and post back ASAP.
Jack |
|
JackCam614
Premium
join:2000-08-24
New Hyde Park, NY
| reply to tashi
Hello tashi1,
As per your request:
Regards,
Jack |
|
LonnyRjones
join:2005-05-02
Shelton, WA | Thanks Jack
Im almost possitive thats a false possitive
To be sure fallow this thread
»forums.spybot.info/showthread.php?p=53772 |
|
JackCam614
Premium
join:2000-08-24
New Hyde Park, NY
| Hello LonnyRjones,
You're very welcome. I'll keep an eye on that thread.
Jack |
|
cork1958
Cork
join:2000-02-26
Fruitport, MI
 ·Verizon Online DSL
 ·Charter Pipeline
| reply to JackCam614
2 pages just for a reply to something Spybot wants to remove, and that subject is related to CoolWWWSearch?
Man! Delete that crap and ANYTHING to do with coolwww EVERYTIME you see it!
Spybot has NEVER messed up my systems and I let it delete EVERYTHING, EVERYTIME! No questions asked.
--
Do the walk
Zenwalk Linux 3.0 |
|
Cudni
La Merma - Vigilado
Premium,MVM
join:2003-12-20
Someshire | what if it wasn't anything to do with CoolWWW but rather it was identified in error and on deletion something breaks?
Cudni |
|
JackCam614
Premium
join:2000-08-24
New Hyde Park, NY | What Cudni said. 
Jack |
|
tyscoj
join:2002-06-17
Fort Pierce, FL | reply to JackCam614
Then do a system restore...or let S&D restore the last fix for you?!
I'm in the same boat, anything that S&D finds gets deleted...never had a problem either! |
|
Window Man
join:2002-06-11
Hayward, CA | reply to JackCam614
I have always deleted anything from coolwww and never had any problems |
|
JackCam614
Premium
join:2000-08-24
New Hyde Park, NY
| said by Window Man  :I have always deleted anything from coolwww and never had any problems Hey Window Man, tyscoj, and cork1958....
I addition to being in agreement with Cudni, I'm also just trying to be a good 'netizen'.
CalamityJane said....
"...Darn! That sure isn't much to go on. Let me see if I can find any TeamSpybot member to take a look.
If it is a FP they would want to know."
If TeamSpybot were not interested, they would not have sent 2 members over here to check this out.
Regards,
Jack |
|
wcweaver
Premium
join:2002-02-22
Fort Myers, FL
clubs:
 ·Future Nine Corpor..
·Comcast
·Embarq
| reply to JackCam614
From Spybot
Ugly new CoolWWWSearch variant [link] 21. January 2004
CoolWWWSearch.SmartKiller (v1 and v2) is a new, real ugly variant of CoolWWWSearch. When running, it will close every browser window you use to visit a large list of anti-spyware-sites, and even will close Spybot-S&D and some other anti-spyware applications as well.
So if your copy of Spybot-S&D (or the anti-spyware application of your choice) closes a few seconds after starting, or your browser closes whenever you try to visit an anti-spyware site, check our CWS.SmartKiller removal utility on this page.
»www.safer-networking.org/files/delcwssk.zip |
|
Mele20
Premium
join:2001-06-05
Hilo, HI
| reply to JackCam614
Re: SpyBot S&D Scan result...
Yesterday, when I read this thread, I didn't know there were new definitions so I went and got them and did a scan. No problems. But Spybot used between 65-100% of CPU for 30 minutes while scanning!  I couldn't really use my computer during the scan. That hasn't been the case in the past with Spybot. What is going on with them?
It sounds to me like you have a FP but I would, like you, want to know before I acted. System Restore doesn't always work nor does restore from Spybot ....better be prudent from the get-go.
--
"If you want to do DRM on a PC then you need to treat the user as the enemy." Ross Anderson in "`Trusted Computing' Frequently Asked Questions"
»www.msfirefox.com/ |
|
Swoop0
join:2005-11-20
Colchester, VT
| reply to JackCam614
Don't know why all the thought behind this thread is. All spyware/adaware/anti-virus programs will not find the same things. Here is some general info on this malware you have. »www.pcanswers.co.uk/tips/default···onid=616 Some are not kept updated, some are good, and some are excellent. This particular coolwebsearch is just junk. DELETE IT with Spybot if it will in fact delete it. If not do a google search and find a specific proggie that will get rid of it. Here's a list from Spybot of what they have targeted. See anything familiar?
here is the list of hijackers from spybot S&D:
"// 322 products on list:
180Search.Solutions
2020Search
7FaSSt
ActualNames.AdvSearch
AdGoblin
Adpowerzone
AdRoar.Cpr
AdsStore
Adtomi.YahooStocks
AdultLinks.QaBar
AdultLinks.QcBar
AdultStore
Adware.Syslibie
Agent-BR2
Agobot
AllCyberSearch
Allwebsearcher
Anal-Oral.WinMain
ATLEvents.ATLEvents
Avenue A, Inc.
BDHelper
BeateUhse
BestHomepage
Bestsearch.Scvhost
BestTo
olBars
BlazeFind.Bridge
BlazeFind.SearchBarCash
BlazeFind.SearchEnhancer.ISTbar
Blazefind.SearchRelevancy
BrowserAid.INetP
C2.lop
Celebrita
ClearSearch.Net
CleverIEHooker.Jeired
CNetAdd
CnsMin
CnsMin.EasyService
CnsMin.mm
CommanderNet
CoolWWWSearch
CoolWWWSearch.008k
CoolWWWSearch.Aboutblank
CoolWWWSearch.Addclass
CoolWWWSearch.Aff.Iedll
CoolWWWSearch.Aff.Madfinder
CoolWWWSearch.Aff.Winshow
CoolWWWSearch.Alfasearch
CoolWWWSearch.AllCyberSearch
CoolWWWSearch.BadZoneMap
CoolWWWSearch.BlowSearch
CoolWWWSearch.Bootconf
CoolWWWSearch.Botnet
CoolWWWSearch.CameUp
CoolWWWSearch.Control
CoolWWWSearch.Ctfmon32
CoolWWWSearch.Datanotary
CoolWWWSearch.Dnsrelay
CoolWWWSearch.Dreplace
CoolWWWSearch.Feat2DLL
CoolWWWSearch.Feat2Installer
CoolWWWSearch.Feat2Installer.ADS
CoolWWWSearch.Gonnasearch
CoolWWWSearch.Googlems
CoolWWWSearch.HomeSearch
CoolWWWSearch.HTMLEdit
CoolWWWSearch.ICOO Loader
CoolWWWSearch.IEFeatInst
CoolWWWSearch.IEFeatSL
CoolWWWSearch.Leftovers
CoolWWWSearch.Loadbat
CoolWWWSearch.Msconfd
CoolWWWSearch.Msconfig
CoolWWWSearch.mshp
CoolWWWSearch.Msinfo
CoolWWWSearch.Msoffice
CoolWWWSearch.Msspi
CoolWWWSearch.Mupdate
CoolWWWSearch.Oemsyspnp
CoolWWWSearch.OleHelp
CoolWWWSearch.Oslogo
CoolWWWSearch.PopupBlocker
CoolWWWSearch.Qttasks
CoolWWWSearch.SearchHook
CoolWWWSearch.SearchKlick
CoolWWWSearch.Service
CoolWWWSearch.SlawSearch
CoolWWWSearch.SmallM
CoolWWWSearch.Smartfinder
CoolWWWSearch.SmartSearch
CoolWWWSearch.SmartSearch-Gal
CoolWWWSearch.Svchost32
CoolWWWSearch.Svcinit
CoolWWWSearch.SVCPack
CoolWWWSearch.Tapicfg
CoolWWWSearch.TheRealSearch
CoolWWWSearch.Toolband
CoolWWWSearch.ToonComics
CoolWWWSearch.Vrape
CoolWWWSearch.WCADW
CoolWWWSearch.WinProc32
CoolWWWSearch.WinRes
CoolWWWSearch.WinSearch
CoolWWWSearch.Xmlmimefilter
CoolWWWSearch.Xplugin
CoolWWWSearch.XPlugin
CoolWWWSearch.Xxxvideo
CoolWWWSearch.Yexe
CoolWWWSearch.Zonealarm
Cool-XXX
Copiloto
Crackspider
CyberSearch
Da Hang Ji Ye
DailyToolbar
DaRu.Revolto
DatingSearch
DesktopSearch
DeskwareSearchAddon
DotcomToolbar.LinkSummary
Duolaimi
Dynamic Desktop Media
eStart
eUniverse.IncrediFind
eUniverse.SearchBar
eUniverse.UpdMgr
E-Ventures N.V.
Evirgola
eXact Advertising.BargainsBuddy
ExPup
EZ-Searching
FastFinder BHO
FastSeeker
FCB
Ferret
Fizzlebar
Flashtrack Flashenhancer
FreeHQMovies
FreeScratchAndWin
FunWebProducts
German Porn Hijack
GIGAsearch
GlobalWebSearch
GoCyberSearch
GrandVirtualCasinoLoader
Grokster.Install
Grokster.Mayan
GTDownloader
Gwtbob
Hastalavista
HotAndSexy
HotsearchBar
Hyperlinker
IAGold
IEMonit.Adult
IEPlugin.Search
Iesar
IGetNet
IGetNet.ClearSearch
I-Lookup
I-Lookup.abeb
I-Lookup.GWS
I-Lookup.SpiderSearch
I-Lookup.Windec
Inet Delivery
ISearchTech.CSearch
ISearchTech.Glophone
ISearchTech.ISTbar
ISearchTech.ISTsvc
ISearchTech.Netscape Plugin
ISearchTech.PowerScan
ISearchTech.Qidion
ISearchTech.SideFind
ISearchTech.Slotch
iSearchToolbar
IStartHere
IVolti
Iwantsearch
Jethomepage
KEXplorer
LoadFonts
LoadHTML.BHOPopup
Lolita4All
Look2Me.BM2
LookThru
LoudMarketing.WinFavorites
Lycos.SideSearch
MafiaPics
MarketDart
Masterbar
Matrix
Matrix Technology Network.Search Engine
MBKW-Bar
Media Access
MediaLoads
MediaTickets
Mirar
Moncher
MoneyGainer
MSInfoSys
MSN Messenger Polygamy
MTC.MakeMeSearch.com
MT-Dials
Munga_Bunga
Muul.SiteHistory
MySoft
MyToolBar
MyTotalSearchBar
Naupoint
NavExcel Websearch
NavFailure
Network Essentials.Search-Exe
Network Essentials.WindowEnhancer
NetzAny
Newspopupper
OnlyVirgins.Reg32
Outwar
PassThisOn
PlanColumbia
PlugInAccessPorn
Popmonster
PopMonster
Porn Hijacker
Possible hijacker
PowerSearch
PrimeSoft.SafeSearch
PrizeSurfer.RSync
Process Guard Killer 2
Prolivation
ProWeb
QHosts
RapidBlaster
RapidBlaster.LiveGirls
RedSheriff
RegistryOptimizer
Roar
RocketSearch
Roings
RSLocal
SafeguardProtect.Veevo
Scheo.com
Search4All
SearchAccurate
SearchALot
SearchAndBrowse
SearchAndClick
SearchBy
SearchCentrix
SearchDotCom
SearchEx
SearchForge
SearchForIt
Searchingall
SearchLocate/SideBar
SearchOMatic
Search-System
SearchV.WinShow
SearchWWW.IEToolbar
SearchXL
SecondPower
Secret-Crush
SeekSeek
SexArena
SexBeastsDoItOnline
SexOcean
Sexy
ShareDocs
ShopAtHome
ShopNav
Shorty-BHO
Simplenter
SmileyWorld
Special Offers Network
SpeedPhrase
Spex
StartPage.IG.
StartSurfing
Stickypops.com
SubSearch
Superlogy.com
SuperSexPass
SuperSpider
SurferBar
System1060
Tango
TargetSearch
Teenshowering
Teenslook
TinyBar.A
TinyBar.C
TinyBar.Generic
TLIEFlash
TNS-Search
ToolbarCC
TopSearcher
TV Media
TX4.BrowserAd
UCSearch.ArmBender
UnderageHost
Unosearch
Virtual Grub
VisiCom.SearchCentric
W3adv
WebAssist.MyFreeInternetUpdate
WebEntrance
WebRebates.TopRebates
WebResponseAttachments
WhazIt
Wild Media
WindowsIE
Windowssearch
WinEssential.Jraun.Kanhaiya
Winsecure
WonWebLauncherControl
Wow Access
xshanghai.com
Xupiter
Xupiter.BrowserWise
Xupiter.OrbitExplorer
Xupiter.Sqwire
XXSWare Inc.
XXXToolbar.com
Zoo" |
|
JackCam614
Premium
join:2000-08-24
New Hyde Park, NY
| reply to Mele20
Aloha Mele,
Long time no chat..
Sorry to hear about your scanning problem. It's the first I've read of this type of Spybot problem. Usually it's about downloading new definitions and bad check sums. Hopefully it's a one time 'glitch' for you?
I totally concur with your last paragraph, and I'm encouraged that you agree with my chosen coarse of action.
Update:
Said by MisterW, TeamSpybot Member, on their website today------>
-----------------------------------------------------------
" Hi,
thanks for reporting. These false positives will be fixed in the next detection update scheduled for the end of the week."
-----------------------------------------------------------
All The Best,
Jack |
|
Mele20
Premium
join:2001-06-05
Hilo, HI
| Good! Glad that got sorted and you did it the right way IMO. I thought it was most likely a FP partly because you are not likely to be picking up stuff like CWS. Of course, there is always the possibility that any of us could get a nasty but never a good idea to jump to conclusions one way or the other.
As for my problem, this is the second set of definitions where Spybot has used a huge amount of CPU when scanning. I have about the same amount of files on this computer as were on my Dell that was returned to them back last February. So, I am a bit puzzled at the length of the scan too. It didn't use to take 30 minutes...but that is ok if the CPU usage was less.
Yes, I have had the more common spybot problems but not that often...I did have to abort the download this time though as I didn't notice it somehow had set itself on a server in Europe but not Safer so it was taking forever to download like I was on the slowest dialup. So, I aborted and switched to Safer and got them very quickly. Maybe I will mosey over to the Spybot forums and ask about the excessive CPU usage. I still love Spybot...even if it has a few warts.
--
"If you want to do DRM on a PC then you need to treat the user as the enemy." Ross Anderson in "`Trusted Computing' Frequently Asked Questions"
»www.msfirefox.com/ |
|
JackCam614
Premium
join:2000-08-24
New Hyde Park, NY
| reply to JackCam614
Please Note....
To anyone who detected this False Positive and deleted it, Team Spybot says to use the recover feature to put it back.
See---------->
»forums.spybot.info/showthread.php?p=53772
Jack |
|
JackCam614
Premium
join:2000-08-24
New Hyde Park, NY | reply to JackCam614
SpyBot Updated 2006-11-24. False Positive Fixed.
Thanks Team Spybot.
Jack |
|
JackCam614
Premium
join:2000-08-24
New Hyde Park, NY
| reply to Mele20
Aloha Mele20,
Re: New Detections Update 2006-11-24.
Downloaded from TDS(USA) Approximately 3 secs.
Scan time, 5:05 Mins.
Sorry Mele, if forgot to check my CPU usage for comparison with yours. Good Luck with your DL and Scan this time around.
Jack |
|
Mele20
Premium
join:2001-06-05
Hilo, HI | No problems found but the CPU usage stayed between 60-100%. I must have a lot more files on this computer (I do need to clean it) than you. It took 32 minutes to scan 50,909 files. |
|
JackCam614
Premium
join:2000-08-24
New Hyde Park, NY
| I re-ran a scan for comparative purposes.
CPU usage stayed mostly between 50-60%. Scan time 5:57 Mins. You may have a lot more files, but I know I have a 'Bunch of Em'.(I'm using 92GB of a 160GB Drive) The 50,909 Files is apparently the number of 'Detections'. I'm running a P4 3.4GHz and I think your machine is as fast or faster if I recall? Hmmmmm. Puzzling.
Jack |
|
