CWS-NS3 Hijacker

[Guest]

Previous to installing Microsoft Anti-Spyware I had been
using Spysweeper which found CWS-NS3 Hijacker on my PC.
The following are the file names and locations.

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search
Bar = res://C:\WINDOWS\dnfky.dll/sp.html#52080
R1 - HKCU\Software\Microsoft\Internet
Explorer\Search,SearchAssistant =
res://C:\WINDOWS\dnfky.dll/sp.html#52080

Despite an extensive auto and manual trawl I could not
find any file containing the letters "dnfky"

Repeated sweeps using Spysweeper ( some in safe Mode )
failed to eradicate CWS-NS3 Hijacker. I also used
HijackThis but that too failed to delete the bug.
Subsequent sweeps with Spysweeper show the bug is still
present.

Unlike Spysweeper, Microsoft Anti-Spyware failed to detect
the CWS-NS3 Hijacker.
However, the "dnfky" file shows in Microsoft Anti-
Spyware's Browser Hijack Restore.
It appears in the Internet Explorer Browser Settings
fields Search Bar and also in Search Assistant.
It has the following address :
res://C:\WINDOWS\dnfky.dll/sp.html#52080

I have tried to use Microsoft Anti-Spyware Browser Hijack
Restore to re-set both the Search Bar and also the Search
Assistant to the MSN default settings. However this simply
results in the Programme freezing. I have to close it and
open it again. But the "dnfky" files are still there.


Can anybody please tell me :
1 How I can re-set both the Search Bar and also the
Search Assistant to the MSN default settings without the
programme freezing and

2 How I can delete CWS-NS3 Hijacker from my system ?

Thank you


James

 

[Ron Kinner]

Get HijackThis.exe from
http://tomcoyote.org/hjt/hjt199//HijackThis.exe

Save then Open it and select the SCAN AND SAVE LOG option.

Note where you save the log and then send it to me. I
will be glad to look at it
and tell you what to do to get rid of it for good.


Ron Kinner MVP

rkinner AT att DOT net
" AT " = "@"
" DOT " = "."