-=PCTechTalk=- Re: CWS.Xplugin

  • From: Davisunit <davist@xxxxxxxxxxx>
  • To: pctechtalk@xxxxxxxxxxxxx
  • Date: Sun, 17 Oct 2004 14:59:09 -0300

Well the purpose of it is not to clean spyware, but to prevent it....as 
long as you update, and then enable all protection.  But, there is no 
single magic program to protect us from all this garbage.

Terry

 milady wrote:

>YEP...and I update all the time...I looked thru it and didn't see anything
>to do with this CWS..evrything BUT......
>----- Original Message ----- 
>From: "Davisunit" <davist@xxxxxxxxxxx>
>To: <pctechtalk@xxxxxxxxxxxxx>
>Sent: Sunday, October 17, 2004 8:59 AM
>Subject: -=PCTechTalk=- Re: CWS.Xplugin
>
>
>
>Are you using Spywareblaster[1]?
>
>Terry
>
> milady wrote: I ran shredder. It fixes but the darn thing keeps coming
>BACK... ----- Original Message ----- From: "GFL" <g.f.lynch@xxxxxxxxxxx>[2]
>To: <pctechtalk@xxxxxxxxxxxxx>[3] Sent: Sunday, October 17, 2004 1:35 AM
>Subject: -=PCTechTalk=- Re: CWS.Xplugin Here is the Information for
>CWS.Xplugin Good Luck, GFL Variant 18: CWS.Xplugin - 'Helping' you search
>theweb Approx date first sighted: November 11, 2003 Log reference: Not
>visible in HijackThis log! Symptoms: Some links in Google results
>redirectingto umaxsearch.com or coolwebsearch.com every now and then
>Cleverness: 10/10 Manual removal difficulty: Involves some Registry editing
>Identifying lines in HijackThis log: Not visible in HijackThis log! This
>variant is the first one that is not visible in a HijackThis log. It works
>invisible, changing links from Google search results to other pages. It took
>a while to find out how this variant works, since it doesn't use any of the
>standard locations. A file xplugin.dll is installed, which creates a new
>protocol filter for text/html. In normal english, this means it reads most
>ofthe web pages downloaded to your browser. It also randomly alters some
>links in Google search results to pages on umaxsearch.com and
>coolwebsearch.com. It claims to be made by something called TMKSoft. It is
>unknown if deleting the file has no side-effects, but using CWShredder or
>running regsvr32 /u c:\windows\system32\xplugin.dll (may vary depending on
>Windows version) fixes the hijack completely. From: " milady"
><kg6ocz@xxxxxxxxxxxxx>[4] Subject: -=PCTechTalk=- CWS_xplugin Date: Sat, 16
>Oct 2004 11:37:37 -0700 I keep coming up with this THING ,
>CWS_xplugin-duringscan with my ISP spyware finder but I can't FIND it doing
>search in XP and spyware finder runs thru so fast I can't get clue where the
>thing is--..all spyware does is disable it but doesn't say where it
>is..neither Ad-aware or spybot find it..I did a search for it and everythng
>coming up in google points me to stuff I have to pay for..Is there ANYTHING
>that might find it?
>
>
>--- Links ---
>   1 http://www.javacoolsoftware.com/sbdownload.html
>   2 mailto:g.f.lynch@xxxxxxxxxxx
>   3 mailto:pctechtalk@xxxxxxxxxxxxx
>   4 mailto:kg6ocz@xxxxxxxxxxxxx
>To unsub or change your email settings:
>//www.freelists.org/webpage/pctechtalk
>
>To access our Archives:
>http://groups.yahoo.com/group/PCTechTalk/messages/
>//www.freelists.org/archives/pctechtalk/
>
>For more info:
>//www.freelists.org/cgi-bin/list?list_id=pctechtalk
>
>
>
>To unsub or change your email settings:
>//www.freelists.org/webpage/pctechtalk
>
>To access our Archives:
>http://groups.yahoo.com/group/PCTechTalk/messages/
>//www.freelists.org/archives/pctechtalk/
>
>For more info:
>//www.freelists.org/cgi-bin/list?list_id=pctechtalk
>
>
>  
>

To unsub or change your email settings:
//www.freelists.org/webpage/pctechtalk

To access our Archives:
http://groups.yahoo.com/group/PCTechTalk/messages/
//www.freelists.org/archives/pctechtalk/

For more info:
//www.freelists.org/cgi-bin/list?list_id=pctechtalk

Other related posts: