Anybody know a good piece of software that can get rid of this annoying Trojan?

I had that, amongst other things.. I had to start from scratch again :(

Try this...

http://www.adwareaway.com/

If that doesn't work, try this...

http://www.pchell.com/support/aboutblank.shtml

If on broadband get the MS spyware blocker thingy from the downloads on their website. Tis around 6Mb I think, found a few on my system that adaware and spybot missed.

do a google for CWShredder

Originally posted by cgksheff
do a google for CWShredder

Does that work even on the CoolWebSearch "about:blank" hijacker?? From the searches I've done on the Internet it's a particularly nasty Trojan that is tough to get rid of. I spent an hour this morning trying to rid my laptop of it (following Norton's removal instructions) but to no avail.

Originally posted by JonJParr
Does that work even on the CoolWebSearch "about:blank" hijacker...

No, but if you check the 2 links I put in earlier they both apparently work. There is (I think) more than 1 exploit that uses the about:blank thingummyjiggummy, the MS spyware tool won't work, CWShredder will sometimes work (like I said, more than 1 type)

The adwareaway link I put up has been congratulated on it's ability to get rid of a few that'll otherwise stay put, including the about:blank one...

"Microsoft's" anti-spyware program isn't actually their own program (insert "so it may actually work" punchline here) but Giant's, who they bought out last year...

http://www.theregister.co.uk/2004/12/16/ms_fights_spyware/

& it's never exactly been best of the bunch, & definitely won't be when they start tying it into their product activation, & charging for it.

http://www.download.com/3640-8022_4-10349879.html

Are you sure you have not clicked "use blank" in the internet options instead of "use current" when you were changing your home page?:D

Originally posted by wendy
Are you sure you have not clicked "use blank" in the internet options instead of "use current" when you were changing your home page?:D

Yes. I want a blank page - instead I get a page that appears to look like a search engine but instead advertises filth (you know what I mean). I hate Windows so much right now - why can't they deliver a decent product? We pay enough for it!!

Originally posted by wendy
Are you sure you have not clicked "use blank" in the internet options instead of "use current" when you were changing your home page?:D

Wouldn't be the first time 1/2 dozen geeks have missed the obvious!! roflmao

The more I look, the more that the failures of CWshredder look like chair/keyboard interface errors...

Just out of interest, cgksheff, do you know what CWshredder does about storing nasties in System Restore points?

**edit WOO HOO 100th post!!

Originally posted by JonJParr
Yes. I want a blank page - instead I get a page that appears to look like a search engine but instead advertises filth (you know what I mean). I hate Windows so much right now - why can't they deliver a decent product? We pay enough for it!!

Oh I see:o Sorry Jon I'd not heard of this one!

Originally posted by steev

Just out of interest, cgksheff, do you know what CWshredder does about storing nasties in System Restore points?


I honestly don't know. Probably nothing.

Am I right in what I think you are saying? Although you may clean up your current files and Operating System everything may still be locked up in System Restore. So if you don't delete all your old restore points and then you use one of them after disinfecting... BANG! you're deep in the doodoo again?

Have you got rid of it yet JonJParr?. If not do this...

Download, install and update CWShredder (http://www.spywareinfo.com/~merijn/downloads.html).
Now turn off system restore (Right click on My Computer, go to system restore and turn it off). Now reboot in to safe mode (Press f8 repeatedly while rebooting and select safe mode from the boot screen). Now run CWShredder and have it FIX any problems it finds.
Now reboot again, turn system restore back on and it should be gone.

Hope this helps ;)

Originally posted by cgksheff
...Am I right in what I think you are saying? Although you may clean up your current files and Operating System everything may still be locked up in System Restore. So if you don't delete all your old restore points and then you use one of them after disinfecting... BANG! you're deep in the doodoo again?

Ooooh yes, that's why all (that are worth it) instructions (as vidster's above, good sign of a geek!) on removing these nasties manually start with disabling System Restore, losing your restore points, & doing stuff in Safe Mode.

Remember, any sufficiently advanced spyware is indistinguishable from magick. ;)

Thanks everyone - have got rid of it now.

Just out of interest...

CWshredder or manually?

Originally posted by steev
Just out of interest...

CWshredder or manually?

CWShredder!