944,164 Members | Top Members by Rank

Hardware and Software > Microsoft Windows > Viruses, Spyware and other Nasties > coolwwwsearch.com entry in Netstat -a. Do I have a problem?
Ad:
Permalink
Sep 28th, 2004
0

coolwwwsearch.com entry in Netstat -a. Do I have a problem?

Expand Post »
My 56K connection started to slow down. Ran Netstat -a in XP and found lots of TIME_WAIT refs to coolwwwsearch.com. All were on Local
Port 1026 with Foreign Ports in the range 11xx. I think I managed to shut down port 1026 in my firewall but I still get coolwwwsearch.com
listed when I run Netstat -a. Can't make this go away despite latest Spy Sweeper removing "Websearch" and "Cool Web Search". Is this
just some sort of false alarm?
Similar Threads
Reputation Points: 10
Solved Threads: 0
Newbie Poster
Greenhills is offline Offline
5 posts
since Jun 2004
Permalink
Sep 28th, 2004
0

Re: coolwwwsearch.com entry in Netstat -a. Do I have a problem?

Probably not a false alarm; have a look at this thread.
http://www.daniweb.com/techtalkforums/thread5690.html
In particular, look for CWShredder; you may also want to post a hijackthis log.
Team Colleague
Reputation Points: 63
Solved Threads: 213
Posting Maven
dlh6213 is offline Offline
2,962 posts
since Jul 2004
Permalink
Oct 2nd, 2004
0

Re: coolwwwsearch.com entry in Netstat -a. Do I have a problem?

I think I've got this sorted.

Thanks for the link to thread5690. I used CWShredder *in safe mode* to remove CWS.Smartsearch. Did a full virus sweep and used Adaware, just to be sure I had a clean system. It's worth mentioning that CWShredder didn't find anything in "normal" Windows mode. It needed Safe Mode to fix the problem.

Netstat -a no longer mentions coolwwwsearch, which is great news.

Cheers
Reputation Points: 10
Solved Threads: 0
Newbie Poster
Greenhills is offline Offline
5 posts
since Jun 2004
Permalink
Oct 3rd, 2004
0

Re: coolwwwsearch.com entry in Netstat -a. Do I have a problem?

Quote originally posted by Greenhills ...
... It needed Safe Mode to fix the problem...
Thanks for reminding folks of that -- If you're running any cleaning progams and they don't seem to be getting 'everything,' try running them in Safe Mode! It's also a good idea to keep all temporary files emptied because some 'intruders' like to hang out in these.
Team Colleague
Reputation Points: 63
Solved Threads: 213
Posting Maven
dlh6213 is offline Offline
2,962 posts
since Jul 2004

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.
Message:
Previous Thread in Viruses, Spyware and other Nasties Forum Timeline: Hijack 1.98 Log please help
Next Thread in Viruses, Spyware and other Nasties Forum Timeline: can't make sense of hijack this log





About Us | Contact Us | Advertise | Acceptable Use Policy
Forum Index | Build Custom RSS Feed


Follow us on Twitter


© 2011 DaniWeb® LLC