Possible CW Insect

**Ariesjill** · 10-30-2006, 11:53 AM

Hi,

OK, one of my utilities, RegAudit......suddenly says I have some version of CoolWeb Search Insect embedded, it seems in AOL software. I am attaching screenshot below.

But.....none of my other utilities find it....including Tredn Micro, reg version which HAS A Cw SHREDDER!

i ALSO WENT TO HOUSECALL....TRENDMICRO.....RAN FULL SCAN AND IT said system clean like a Joan Crawford floor..

I am also attaching current Hijack this log....second screenshot below.

I think Dick Cheeney did this, OK? but alsoneed some expert input.

Thank U so Much....and everyone TAKE YOUR TIME.....there are seriously infected humans out there....I know.

Jill

Ok got it done via attachment, hope this is OK. I don't know which utilities 2 believe!

**carsey** · 10-30-2006, 11:55 AM

Just post your log as text, just like the message above.

fredmh · 10-30-2006, 12:12 PM

Hello Ariesjill:

Sure looks like CWS, but since you never know what else it brought along for company, I suggest the
5 steps and posting an HJT log.

Please read this thread

Please download HijackThis . This program will help us
determine if there are any spyware/malware on your computer. Double-click on the file you just downloaded. Click
on the "Unzip" button to install. It will by default install to the directory - C:\PROGRAM FILES\HIJACKTHIS\
Run a scan and save the log file. Do not fix anything in HijackThis since they may be harmless.
Make sure to include the System information at the top of the log as well.

Post your HJT log in HJT Log Help Forum
and an analyst will help you.

**Ariesjill** · 10-30-2006, 12:15 PM

Hi, Fred!

I attached new Hijack this file.....is it there? It is jpeg. Pls let me know if U can enlarge it....I can from here.....

Jill

PS...OK, should I now post the logfile in the HJT place? I am confused....must be some CoolWeb thingy in my BRAIN.
Thanks,
Jill

**Ariesjill** · 10-30-2006, 12:32 PM

PS...OK, just moved this to HJT help forum with sys info, thanks!!!!!!!!

I will remain calm. Probably.
Jill

10-30-2006, 11:55 AM	#2 (permalink)
carsey Moderator, TSF Articles Join Date: Aug 2006 Location: Hunwick, Co. Durham England Posts: 10,678 OS: XP Pro SP3 My System	Just post your log as text, just like the message above. __________________ Submit New Articles Here

10-30-2006, 12:15 PM	#4 (permalink)
Ariesjill Human Individual Join Date: May 2006 Location: Manhattan Posts: 2,837 OS: WXP Home, WXP Pro	Hi, Fred! I attached new Hijack this file.....is it there? It is jpeg. Pls let me know if U can enlarge it....I can from here..... Jill PS...OK, should I now post the logfile in the HJT place? I am confused....must be some CoolWeb thingy in my BRAIN. Thanks, Jill Last edited by Ariesjill; 10-30-2006 at 12:18 PM.

10-30-2006, 12:12 PM	#3 (permalink)
fredmh Analyst, Security Team ; TSF Supporter Join Date: May 2006 Location: Phila,Pa Posts: 2,335 OS: XP	Hello Ariesjill: Sure looks like CWS, but since you never know what else it brought along for company, I suggest the 5 steps and posting an HJT log. Please read this thread Please download HijackThis . This program will help us determine if there are any spyware/malware on your computer. Double-click on the file you just downloaded. Click on the "Unzip" button to install. It will by default install to the directory - C:\PROGRAM FILES\HIJACKTHIS\ Run a scan and save the log file. Do not fix anything in HijackThis since they may be harmless. Make sure to include the System information at the top of the log as well. Post your HJT log in HJT Log Help Forum and an analyst will help you.

10-30-2006, 12:32 PM	#5 (permalink)
Ariesjill Human Individual Join Date: May 2006 Location: Manhattan Posts: 2,837 OS: WXP Home, WXP Pro	PS...OK, just moved this to HJT help forum with sys info, thanks!!!!!!!! I will remain calm. Probably. Jill