CWS.GoogleMS.3 - Hi-Jacker?

Discussion in 'SpywareBlaster & Other Forum' started by harshale, May 29, 2004.

Thread Status:
Not open for further replies.
  1. harshale

    harshale Registered Member

    Apr 14, 2004
    Marin County, Calif.
    When I ran PestScan(Pest Patrol) today it brought up CWS.GoogleMS.3. Located (as I'm sure you know) at and as:
    Hkey_Current_User\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ Value= 0x00000004(4).

    Now, this same thing happened a few weeks ago, so I went to that key and discovered a slew of listings, most of them dealing with gambling, sex, porn, etc. None of them being sites I've visited. I deleted some of the most egregrious, re-booted and my system was still working so I went back and eliminated everything that looked similar. Then I ran SpyWare Blaster and it told me I had protection on 1405 of my Restricted Sites "Disabled"...I then hit "Enable All Protection", went back to Hkey_Current_User\etc. and everything I had deleted was back. It seems that those Domain listing are used by Spyware Blaster in some way.

    Anyone have any idea of what's happening hereo_O? Harshale
  2. Bubba

    Bubba Updates Team

    Apr 15, 2002
    There was a recent thread concerning this or something very similar that may help shed light on your question.

    This thread---> A PestPatrol False Positive

Thread Status:
Not open for further replies.