Re: zzb.exe

From: Mike Burgess (winhelp2002_at_spamthis.com)
Date: 03/07/04


Date: Sun, 7 Mar 2004 16:04:26 -0500

Francisco,
http://www.spywareinfo.com/forums/index.php?showtopic=33792&st=0&#entry176785

____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 03-02-04]
Please post replies to this Newsgroup, email address is invalid

--
"Francisco Diaz" <fcodg@eudoramail.com> wrote in message
news:8b9e01c40455$5d8735d0$a101280a@phx.gbl...
> Hello Mike:
> I posted my las HT report at SWI.
> Thank you,
> Francisco
>
> >-----Original Message-----
> >Francisco,
> >I replied to your post at SWI:
> >http://www.spywareinfo.com/forums/index.php?act=ST&f=2&t=33792
> >____________________________________________________________
> >Mike Burgess  [MVP Windows Shell\User]
> http://www.mvps.org/winhelp2002/
> >Blocking Spyware, Adware, Parasites, Hijackers, Trojans,
> with a HOSTS file
> >http://www.mvps.org/winhelp2002/hosts.htm [updated 03-02-04]
> >Please post replies to this Newsgroup, email address is
> invalid
> >--
> >
> >"Francisco Diaz" <fcodg@eudoramail.com> wrote in message
> >news:80de01c40394$6d156ba0$a301280a@phx.gbl...
> >> Hello Mike:
> >> Here is a link to my message posted regarding hijackthis
> >> reports.
> >> Thank you,
> >> Francisco
> >>
> >>
> >> >-----Original Message-----
> >> >Francisco,
> >> >Are you *sure* you are using the latest version of
> CWShredder?
> >> ><quote>
> >> >CWS.Smartsearch.2: A mutation of this variant exists that
> >> attempts to close
> >> >CWShredder, HijackThis, Ad-Aware, Spybot S&D and the
> >> SpywareInfo forums when
> >> >they are opened. It uses the filename IEXPLORER.EXE (note
> >> the extra 'R') and
> >> >a different Registry value. It drops a hosts file that
> >> blocks over two dozen
> >> >anti-spyware sites. CWShredder has been updated to
> >> circumvent this.
> >> ></quote>
> >>
> >http://www.spywareinfo.com/~merijn/cwschronicles.html#smartsearch
> >> >--
> >> ><quote>
> >> >One of the newer tricks Coolwebsearch uses is to block the
> >> infected user
> >> >from accessing most major anti-spyware programs and sites.
> >> They are also
> >> >suspected of the recent DDos attacks. Download:
> >> CWS.SmartKiller from SpyBot
> >> >S&D.
> >> >http://www.safer-networking.org/minifiles.html
> >> ></quote>
> >> >http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch
> >> >--
> >> >Anyway ..... I see that your post has already been
> addressed.
> >>
> >____________________________________________________________
> >> >Mike Burgess  [MVP Windows Shell\User]
> >> http://www.mvps.org/winhelp2002/
> >> >Blocking Spyware, Adware, Parasites, Hijackers, Trojans,
> >> with a HOSTS file
> >> >http://www.mvps.org/winhelp2002/hosts.htm [updated
> 03-02-04]
> >> >Please post replies to this Newsgroup, email address is
> >> invalid
> >> >--
> >> >
> >> ><anonymous@discussions.microsoft.com> wrote in message
> >> >news:7dce01c40331$b7cd9180$a001280a@phx.gbl...
> >> >> Hello Mike:
> >> >> I ran CwShredder and it says that cws.smartsearch.2
> trojan
> >> >> prevents it from working.
> >> >> Here is my hijackthis log. here is the link:
> >> >>
> >>
> http://www.spywareinfo.com/forums/index.php?act=ST&f=2&t=33792
> >> >> thank you,
> >> >> Francisco
> >> >
> >> >
> >> >.
> >> >
> >
> >
> >.
> >


Relevant Pages

  • Re: New Message from ie6 browser doesnt work
    ... > Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Dump browsers cache?
    ... Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file ... Please post replies to this Newsgroup, ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Spyware
    ... Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file ... Please post replies to this Newsgroup, ...
    (microsoft.public.security.virus)
  • Re: I picked up a trojan [Warning!]
    ... Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file ... Please post replies to this Newsgroup, ...
    (microsoft.public.security.virus)
  • Re: downloader.mscache removal problem - frustrated!!!
    ... Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file ...
    (microsoft.public.security.virus)