murilla: Spybot scan results reoccur - SpywareBlaster?

Re: How to add custom CLSID's to block with SpywareBlaster

spybot found the following on my computer:

Search-Explorer
CoolWWWSearch.mshp
CoolWWWSearch.008k
DSO Exploit

they continue to appear after i delete them.
can spywareblaster somehow keep them from coming back? how?

 

First off, make sure you have Spybot's "Immunity" feature enabled. To prevent a re-download. Also, if you have version 1.3 DSO Exploit will show up every time until a fix is released, you can't do anything but wait at this point. You should also consider downloading HighjackThis and CWShredder at www.thespykiller.co.uk to make sure you can get all remnants of the Coolwwwsearch. Last point, try running Spybot at System Startup before any non-operating system files load.

 

Oh, by the way, post your HijackThis log in the Adware/spyware cleaning forum. The pros there will tell you what to delete/not delete.

 

That's not entirely correct. Yes, since Spybot doesn't fix it correctly it will keep showing up everytime Spybot is run until a fixed version is released.
Saying "you can't do anything but wait" is wrong because you can, but it doesn't necessarily mean you need to or even should.
You can manually edit the registry entries to correct the data types and values. Once the registry entries are corrected Spybot will no longer flag them.
However, if you are up to date on all your Windows patches you are protected against this exploit, and there is no need to worry or edit the registry, and you can wait until a Spybot fix is released.

--
dak

 

Re: How to add custom CLSID's to block with SpywareBlaster

As Erik suggested enable the Immunize function of Spybot S&D. Also I would suggest installing SpywareBlaster (run it, update it, enable its protection and close it).
Obtain CWShredder and HiJackThis, as Erik recommended. Run CWShredder and then run HiJackThis and post the log from it (not in this thread) for the experts to look over and make their recommendations.
That should take care of your problems, except for the DSO Exploit, and posting your HJT log will ensure you got it all and/or reveal any other nasties.

--
dak