Virus?/Adware? prevents SB 3.2 from loading

Have a machine that was loaded with garbage ISTbar/XXXtoolbar and a bunch of "common" adware and porno dialers. Spybot cleaned everything, NAV2004 reports nothing. Had lots of random-name dll's in \system32. Hijack logs are perfectly clean. No abnormal process' or services running.

SB 3.2 would install but not run.
IE6 still got hijacked to windowws.cc and ixlt.info

Found one random name dll in \system32 that had to be deleted by moving the HD to another sys since it was still in use even in safe mode. It's fixed and ok now but what the HELL was it? First time I've *EVER* had SB not run.

I have the offending file saved if someone here can make sense of it.

- Capt. Richard Jackman
- just a high tech janitor in the digital porno shop

 

I think that's Cool Web Search. I had the same problem, it downloads itself through a hole in the microsoft java virtual machine. There's a program called CWShredder that gets rid of it pretty well, you can find it here:

http://www.softpedia.com/public/cat/10/17/10-17-150.shtml

If that does not work, try searching for the file name, there are some more insidious versions of CWSearch that are very difficult to delete.