-=PCTechTalk=- Re: CWS.Xplugin
- From: " milady" <kg6ocz@xxxxxxxxxxxxx>
- To: <pctechtalk@xxxxxxxxxxxxx>
- Date: Sun, 17 Oct 2004 10:19:03 -0700
YEP...and I update all the time...I looked thru it and didn't see anything
to do with this CWS..evrything BUT......
----- Original Message -----
From: "Davisunit" <davist@xxxxxxxxxxx>
To: <pctechtalk@xxxxxxxxxxxxx>
Sent: Sunday, October 17, 2004 8:59 AM
Subject: -=PCTechTalk=- Re: CWS.Xplugin
Are you using Spywareblaster[1]?
Terry
milady wrote: I ran shredder. It fixes but the darn thing keeps coming
BACK... ----- Original Message ----- From: "GFL" <g.f.lynch@xxxxxxxxxxx>[2]
To: <pctechtalk@xxxxxxxxxxxxx>[3] Sent: Sunday, October 17, 2004 1:35 AM
Subject: -=PCTechTalk=- Re: CWS.Xplugin Here is the Information for
CWS.Xplugin Good Luck, GFL Variant 18: CWS.Xplugin - 'Helping' you search
theweb Approx date first sighted: November 11, 2003 Log reference: Not
visible in HijackThis log! Symptoms: Some links in Google results
redirectingto umaxsearch.com or coolwebsearch.com every now and then
Cleverness: 10/10 Manual removal difficulty: Involves some Registry editing
Identifying lines in HijackThis log: Not visible in HijackThis log! This
variant is the first one that is not visible in a HijackThis log. It works
invisible, changing links from Google search results to other pages. It took
a while to find out how this variant works, since it doesn't use any of the
standard locations. A file xplugin.dll is installed, which creates a new
protocol filter for text/html. In normal english, this means it reads most
ofthe web pages downloaded to your browser. It also randomly alters some
links in Google search results to pages on umaxsearch.com and
coolwebsearch.com. It claims to be made by something called TMKSoft. It is
unknown if deleting the file has no side-effects, but using CWShredder or
running regsvr32 /u c:\windows\system32\xplugin.dll (may vary depending on
Windows version) fixes the hijack completely. From: " milady"
<kg6ocz@xxxxxxxxxxxxx>[4] Subject: -=PCTechTalk=- CWS_xplugin Date: Sat, 16
Oct 2004 11:37:37 -0700 I keep coming up with this THING ,
CWS_xplugin-duringscan with my ISP spyware finder but I can't FIND it doing
search in XP and spyware finder runs thru so fast I can't get clue where the
thing is--..all spyware does is disable it but doesn't say where it
is..neither Ad-aware or spybot find it..I did a search for it and everythng
coming up in google points me to stuff I have to pay for..Is there ANYTHING
that might find it?
--- Links ---
1 http://www.javacoolsoftware.com/sbdownload.html
2 mailto:g.f.lynch@xxxxxxxxxxx
3 mailto:pctechtalk@xxxxxxxxxxxxx
4 mailto:kg6ocz@xxxxxxxxxxxxx
To unsub or change your email settings:
//www.freelists.org/webpage/pctechtalk
To access our Archives:
http://groups.yahoo.com/group/PCTechTalk/messages/
//www.freelists.org/archives/pctechtalk/
For more info:
//www.freelists.org/cgi-bin/list?list_id=pctechtalk
To unsub or change your email settings:
//www.freelists.org/webpage/pctechtalk
To access our Archives:
http://groups.yahoo.com/group/PCTechTalk/messages/
//www.freelists.org/archives/pctechtalk/
For more info:
//www.freelists.org/cgi-bin/list?list_id=pctechtalk
Other related posts:
