murilla: Spybot scan results reoccur - SpywareBlaster?

Discussion in 'SpywareBlaster & Other Forum' started by murilla, Jun 20, 2004.

Thread Status:
Not open for further replies.
  1. murilla

    murilla Guest

    Re: How to add custom CLSID's to block with SpywareBlaster

    spybot found the following on my computer:

    Search-Explorer
    CoolWWWSearch.mshp
    CoolWWWSearch.008k
    DSO Exploit

    they continue to appear after i delete them.
    can spywareblaster somehow keep them from coming back? how?
     
  2. Erik Ayala

    Erik Ayala Guest

    First off, make sure you have Spybot's "Immunity" feature enabled. To prevent a re-download. Also, if you have version 1.3 DSO Exploit will show up every time until a fix is released, you can't do anything but wait at this point. You should also consider downloading HighjackThis and CWShredder at www.thespykiller.co.uk to make sure you can get all remnants of the Coolwwwsearch. Last point, try running Spybot at System Startup before any non-operating system files load.
     
  3. Erik Ayala

    Erik Ayala Guest

    Oh, by the way, post your HijackThis log in the Adware/spyware cleaning forum. The pros there will tell you what to delete/not delete.
     
  4. dak

    dak Registered Member

    Joined:
    May 11, 2004
    Posts:
    52
    That's not entirely correct. Yes, since Spybot doesn't fix it correctly it will keep showing up everytime Spybot is run until a fixed version is released.
    Saying "you can't do anything but wait" is wrong because you can, but it doesn't necessarily mean you need to or even should.
    You can manually edit the registry entries to correct the data types and values. Once the registry entries are corrected Spybot will no longer flag them.
    However, if you are up to date on all your Windows patches you are protected against this exploit, and there is no need to worry or edit the registry, and you can wait until a Spybot fix is released.

    --
    dak
     
  5. dak

    dak Registered Member

    Joined:
    May 11, 2004
    Posts:
    52
    Re: How to add custom CLSID's to block with SpywareBlaster

    As Erik suggested enable the Immunize function of Spybot S&D. Also I would suggest installing SpywareBlaster (run it, update it, enable its protection and close it).
    Obtain CWShredder and HiJackThis, as Erik recommended. Run CWShredder and then run HiJackThis and post the log from it (not in this thread) for the experts to look over and make their recommendations.
    That should take care of your problems, except for the DSO Exploit, and posting your HJT log will ensure you got it all and/or reveal any other nasties.

    --
    dak
     
Loading...
Thread Status:
Not open for further replies.