CWS.GoogleMS.3

[gerardwil]

Hi,

When running PP it finds CWS.GoogleMS.3
I left it in place an ran CWS shredder with the message: all clean
So who is right?

Regards,

Gerard

[subratam]

hey gerardwil,

Download HijackThis from here: http://www.tomcoyote.org/hjt/
- Use the HijackThis button on left which has the green flashing light next to it.
Open the download ZIP file to extract the HijackThis program from within.
Run HijackThis.exe
Press "Scan" button.
When done the "Scan" button will change to "Save Log", press that.
Save the log as a text file.
In step 3 below, you'll need to copy and paste the contents of this log to a post here.

do that and let experts here see whether thr is any malware in ur comp

thx

[gerardwil]

Thanks Subratam,

I already did what you advised en nothing shows up to be worried about.
I deleted that CWS in PP, everything is working fine.

Gerard

[Pieter_Arntz]

Hi Gerard,

What was the name of the file PP removed?
Their site is very chaotic where it concerns CWS:
http://www.pestpatrol.com/pestinfo/c/cws.asp

Regards,

Pieter

[gerardwil]

Hi Pieter,

Pest is: CWS.GoogleMS.3

Found in:

HKC\Software\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History

Waarde = 5 (Hex)

Regards,

Gerard

[Pieter_Arntz]

Nice, you removed the cookie block for one of the CWS sites.

[RANT]Why is it so hard to check the value of such a registry entry before flagging it as dangerous.[/RANT]

OK I'm calm again.

gerard,

Do you use a program to block cookies?

Regards,

Pieter

[gerardwil]

Hi Pieter,

I have to ran now but will be back and continue tonight or tomorrow morning.

Bye,

Gerard

[gerardwil]

Good morning Pieter,

I am using Cookie Patrol. In IE I allow direct cookies and cookies per session, indirect cookies are blocked.
In IE (Sites with limited acces) I have installed the list of IE-Spyad. (highest protection)
In SSD I ad the hostlist for blocking URL 's.

Have a nice day,

Gerard

[Pieter_Arntz]

Hi Gerard,

Since I don't expect you to get in trouble until the next update for IE-Spyad, I'll leave it up to you to wait for that one or re-apply the last one.

Regards,

Pieter