about:Blank, aka CoolWebSearch - It's killin' me!!! - Page 2

greyknight17 · 09-18-2004, 07:14 AM

Your log is clean. Great job.

To help prevent future spyware installations/infections, please read my anti-spyware section and use the tools provided.

I would try disabling some programs from startup if you don't use them often. Just to save some login loading time.

Any problems now?

Butz72 · 09-19-2004, 03:58 AM

Everything seems to be okay now, thank goodness. As an added bonus, my McAfee installation was able to reload and correct itself, so it's back. I have not had any reinfections after rebooting a few times, so I think I'm good to go.

Thanks for everyone's help!!!

sdavis1225 · 09-19-2004, 06:09 AM

Did you try running Spy bot 1.3 Ad-aware insafe mode?

Butz72 · 09-19-2004, 05:29 PM

I did, and it did provide a temporary fix, but it would then reload the next time I hit the web or rebooted.

One thing I noticed in 'msconfig'. The was a startup entry for "program files/online casino/csremind.exe". I did some googling today, and every place I had a hit it indicated that this file was malware. I tried to search for the file, and could not find it. I've idsabled the start in the 'msconfig' settings, but I'm concerned that this file is still resident. Any ideas to make sure it's gone?

Thanks,
Butz

sdavis1225 · 09-20-2004, 07:39 AM

Did you take a look at your run key see what is there and if so try doing
search in systems32. I did a google search on casino and found a refernce to
a file called mess.exe. Good luck.

09-18-2004, 07:14 AM	#21 (permalink)
greyknight17 Analyst, Security Team Join Date: Jul 2004 Location: New York Posts: 14,327 OS: Windows 98 & Windows XP Home/Pro My System	Your log is clean. Great job. To help prevent future spyware installations/infections, please read my anti-spyware section and use the tools provided. I would try disabling some programs from startup if you don't use them often. Just to save some login loading time. Any problems now? __________________ Please do NOT PM me. Post whatever questions you may have in the forum and we will take a look at it when we get to it. If you have waited for more than 3 days, you may then and ONLY then PM me for assistance. I will take a look at it. Adaware :: CWShredder :: HijackThis :: Panda ActiveScan :: Spybot S&D Anti-Spyware Tutorial :: Spyware Prevention Tools

09-19-2004, 03:58 AM	#22 (permalink)
Butz72 Registered User Join Date: Sep 2004 Location: Georgia! Posts: 48 OS: xp	Free At Last!!! Everything seems to be okay now, thank goodness. As an added bonus, my McAfee installation was able to reload and correct itself, so it's back. I have not had any reinfections after rebooting a few times, so I think I'm good to go. Thanks for everyone's help!!!

09-19-2004, 06:09 AM	#23 (permalink)
sdavis1225 Registered User Join Date: Sep 2004 Posts: 7 OS: windows xp	Did you try running Spy bot 1.3 Ad-aware insafe mode?

09-19-2004, 05:29 PM	#24 (permalink)
Butz72 Registered User Join Date: Sep 2004 Location: Georgia! Posts: 48 OS: xp	I did, and it did provide a temporary fix, but it would then reload the next time I hit the web or rebooted. One thing I noticed in 'msconfig'. The was a startup entry for "program files/online casino/csremind.exe". I did some googling today, and every place I had a hit it indicated that this file was malware. I tried to search for the file, and could not find it. I've idsabled the start in the 'msconfig' settings, but I'm concerned that this file is still resident. Any ideas to make sure it's gone? Thanks, Butz

09-20-2004, 07:39 AM	#25 (permalink)
sdavis1225 Registered User Join Date: Sep 2004 Posts: 7 OS: windows xp	Did you take a look at your run key see what is there and if so try doing search in systems32. I did a google search on casino and found a refernce to a file called mess.exe. Good luck.