Fucking spyware...
May. 24th, 2004 11:47 am![[identity profile]](https://www.dreamwidth.org/img/silk/identity/openid.png){kind=small}
coyoteden.livejournal.com posting in ![[community profile]](https://www.dreamwidth.org/img/silk/identity/community.png){kind=small}
techrecoveryDo you have any idea how hard it is to get CoolWebSearch*spit* to go away for good?
Ad-aware won't do it,
Spybot won't do it,
SpywareBlaster will block it but it already got in, so forget it.
CWShredder will get rid of it but it just keeps coming back with every reboot.
Why won't you die???
FIXED: My train of thought wasn't evil enough to think on their level. A little research turned up the sordid truth: a rare variant of VX2 was hooking into explorer, which launched a NicTech/Look2Me .dll hidden behind Rundll32, which a) hijacked the homepage, b) generated the popups, and c) dropped CWS.
And this was on a customer's machine that came in for NAV not working right. I Wonder why? Ad-aware hit 1033 on the first run.
Gah. Smoke Break NOW.
Ad-aware won't do it,
Spybot won't do it,
SpywareBlaster will block it but it already got in, so forget it.
CWShredder will get rid of it but it just keeps coming back with every reboot.
Why won't you die???
FIXED: My train of thought wasn't evil enough to think on their level. A little research turned up the sordid truth: a rare variant of VX2 was hooking into explorer, which launched a NicTech/Look2Me .dll hidden behind Rundll32, which a) hijacked the homepage, b) generated the popups, and c) dropped CWS.
And this was on a customer's machine that came in for NAV not working right. I Wonder why? Ad-aware hit 1033 on the first run.
Gah. Smoke Break NOW.
![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}