Hi a.c.a-v, a question.
For a couple of weeks now, I have been plagued by a virus/trojan/worm (I
didn't know which) redirecting IE to porn sites. First of all I tried
SpyBot. Then I added a years subscription to McAfee Online Anti-Virus, then
I added SpyWareBlaster, then HiJackThis (and StartupList). Still
contaminated. Various online updates and 'infected files deleted'. Problem
remained.
I made a manual search for parts of redirected-website string. Then I
went online and searched for references to the files where I found the
string. SpyWareInfo tells me it is "CWS" trojan. I downloaded CWShredder and
hopefully that is the end of it.

BUT - how did CWS stay hidden from all this software?

Dave W.

Dave W. wrote:
> Hi a.c.a-v, a question.
> For a couple of weeks now, I have been plagued by a virus/trojan/worm
> (I didn't know which) redirecting IE to porn sites. First of all I
> tried SpyBot. Then I added a years subscription to McAfee Online
> Anti-Virus, then I added SpyWareBlaster, then HiJackThis (and
> StartupList). Still contaminated. Various online updates and
> 'infected files deleted'. Problem remained.
> I made a manual search for parts of redirected-website string.
> Then I went online and searched for references to the files where I
> found the string. SpyWareInfo tells me it is "CWS" trojan. I
> downloaded CWShredder and hopefully that is the end of it.
>
> BUT - how did CWS stay hidden from all this software?

See the CWS chronicles. They are a bad group!
http://www.spywareinfo.com/~merijn/cwschronicles.html

For anyone who's interested, CWShredder has done the job. No sign of that
trojan today. My thanks to Merijn c/o SpyWareInfo.

Dave W.