"Nino" <Nino @ (chiedi_a_me) .com> wrote:

> Hi to you all,
>
> I've got some problems with this Spyware.
> Ad-ware and Spybot don't succeed to remove it.
> This spyware runs winshow.dll (located in C:\windows) and "winshow.cfg" (in
> C:\Windows).
> These files create a startup connection to htttp://00hq.com and my firewall
> show that everytime I started the IE, the IE calls that site ...
>
>
> I've had to remove It manually.
>
> Why both of these programs can't delete it ?
>
> Thanks ...
>
>
I'm showing CWS - cool web search as an embedded BHO hijacker, that may be
why Ad-aware and SpyBot are missing it.

Run the CWS exe from the zip, follow the prompts.
http://www.spywareinfo.com/~merijn/files/cwshredder.zip
http://www.spywareinfo.com/~merijn/cwschronicles.html

De-register the DLL's from the Winshow URL *and* run the
CWS exe.

HTH

--

siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_