cws.msconfig and Trend Micro

[Guest]

The system configuration has been captured by cws.msconfig; the cwshredder
will delete it, but it doesn't stay deleted. What to do?

And I have tried to run an active scan from TrendMicro, which I have done
several times in the past, but now can't get it started. On one try there
was a dialog box referring to Error 1606 which led me to a download from
Java,but that isn't happening either.

What now?

And by the way, thank all of you for your help in the past, it has been very
much appreciated.

swl

 

[Juan]

Reboot to safe mode (F8 as the reboot begins) then go to Start\Run\type;
msconfig and hit enter\look in the Startup tab and unckeck it, then run
CWShredder and reboot. Just to insure success also look in the following
registry keys and delete it if present there.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

 

[Guest]

Thanks for the suggestion, but it didn't work.

I forgot to mention all the programs used in trying to solve this and other
problems: Spyware Blaster, Hijack This, Toolbar Cop, Ad-Aware SE Personal,
AVG and Microsoft AntiSpyware. I was using Earthlink Protection Control
Center when I first noticed the cws.msconfig bug, but I don't know if EPCC
failed to do its job and is the cause of this problem. Right now I can't get
EPCC to open, even with uninstall/reinstall. And suggestions from Earthlink
have not worked either.
Could it be that there is another evil pest haunting my pc?

Help, please!

 

[Juan]

The same pest could be still in your system since it keeps restoring itself
as fast as you can delete it. For instructions on how to delete it for good
go to spywareinfo (home of HijackThis) and click on #31 cws.msconfig link
for the procedure to follow that includes downloading or restoring from the
XP CD a new msconfig.exe file to replace the one now in your computer since
it's overwritten by the hijacker and has to be deleted.
http://www.spywareinfo.com/~merijn/cwschronicles.html#msconfig

------------------------------