We’d like to remind Forumites to please avoid political debate on the Forum.
This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.
📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!
The Forum now has a brand new text editor, adding a bunch of handy features to use when creating posts. Read more in our how-to guide
help please SUPERantispyware finds problem
bellett
Posts: 44 Forumite
in Techie Stuff
I've just run SUPERantispyware, CCleaner, Spybotsearch and destroy, adaware, AVG and they all tell me my system is clean and find nothing. BUT when I click on the link at the bottom of SUPERantispyware to "find out what's running on your computer" it finds this......:-
Browser Extensions, Toolbars and Registry Applications
SH.DLLTROJAN/Trojan.CWS/IESH.URLSearchHookMore InfoDescription
CoolWebSearch parasite-related URL search hook. Location of the file component may vary.
File Location on your Computer
C:\WINDOWS\SYSTEM32\SH.DLL
Registry Path and CLSID where file was detected on your Computer
Software\Microsoft\Internet Explorer\URLSearchHooks
{AA460422-2CEF-400F-AA05-F63368E04706}
File Size (bytes)
49152MD5 Checksum/Fingerprint
5F3CB7E5F17074EB7C8B68F9540447C8
Company Name
Unknown
Company Url/Website
File Version InformationShow/Hide Version InformationFile Description
File Version
Product Name
Product Version
Internal Name
Original File Name
Legal Copyright
Legal Trademarks
Private Build
Special Build
Can someone please tell me how bad it is, why don't the spyware or anti virus programmes find it and is it easy to get rid of?
Also - how did I get it? I am SO careful about how I use my PC and I never download music or dodgy files.....oh yes and I know NOTHING about editing the registry or anything like that - please tell me I won;t have to!?!?!?!
Thanks in advance for any help or advice
Browser Extensions, Toolbars and Registry Applications
SH.DLLTROJAN/Trojan.CWS/IESH.URLSearchHookMore InfoDescriptionCoolWebSearch parasite-related URL search hook. Location of the file component may vary.
File Location on your Computer
C:\WINDOWS\SYSTEM32\SH.DLL
Registry Path and CLSID where file was detected on your Computer
Software\Microsoft\Internet Explorer\URLSearchHooks
{AA460422-2CEF-400F-AA05-F63368E04706}
File Size (bytes)
49152MD5 Checksum/Fingerprint
5F3CB7E5F17074EB7C8B68F9540447C8
Company Name
Unknown
Company Url/Website
File Version InformationShow/Hide Version InformationFile Description
File Version
Product Name
Product Version
Internal Name
Original File Name
Legal Copyright
Legal Trademarks
Private Build
Special Build
Can someone please tell me how bad it is, why don't the spyware or anti virus programmes find it and is it easy to get rid of?
Also - how did I get it? I am SO careful about how I use my PC and I never download music or dodgy files.....oh yes and I know NOTHING about editing the registry or anything like that - please tell me I won;t have to!?!?!?!
Thanks in advance for any help or advice
0
Comments
-
Download CWShredder from here http://us.trendmicro.com/us/products/personal/CWShredder/ it's specifically for the removal of coolwebsearch so should clear it for you. Don't know how you got it, these things happen but there is usually a tool or a person out there to sort them. Good luck.0
-
Run what you have got in safe mode0
-
Thanks SO much - downloaded and used CWShredder then ran everything in safe mode -SUPERantispyware found a trojan (Trojan.CWS/IESH) and dealt with it......am now worried that my PC might have been compromised and log in and/or credit card details taken as I have no way of knowing how long this pest had been on my PC. Have googled it but can't find any info on this Trojan - any ideas please?0
-
It looks like a search engine to me that hi-jacks what your normal search engine would find. Also keep an eye on your bank account for a while just incase.Don't listen to the bad things about Vista its the best :beer:
Just because it's free don't mean it's good :rolleyes:
Ditch Norton Now !!!!!!!!!!!!!!! :wall:
Just Because you read it some where don't mean it's right
0 -
If you are happy that you are now clean then as a precaution change all your passwords and as Gremlin has stated watch your accounts.
If you are worried then run a credit check on yourself using experian or similar.
Good advice found here - https://www.identity-theft.org.uk/
Having said all this I'm sure your fine0
This discussion has been closed.
Confirm your email address to Create Threads and Reply
Categories
- All Categories
- 353.5K Banking & Borrowing
- 254.1K Reduce Debt & Boost Income
- 455K Spending & Discounts
- 246.6K Work, Benefits & Business
- 602.9K Mortgages, Homes & Bills
- 178.1K Life & Family
- 260.6K Travel & Transport
- 1.5M Hobbies & Leisure
- 16K Discuss & Feedback
- 37.7K Read-Only Boards