×

Loading...
Ad by
  • 最优利率和cashback可以申请特批，好信用好收入offer更好。请点链接扫码加微信咨询，Scotiabank -- Nick Zhang 6478812600。
Ad by
  • 最优利率和cashback可以申请特批，好信用好收入offer更好。请点链接扫码加微信咨询，Scotiabank -- Nick Zhang 6478812600。

@San Francisco

this may help you.

guestagain(guest again)
here is an example of remove CWS.Msconfd
1)Running CWShredder in Windows and rebooting after it detected and tried to repair the infectio.

2) Deleting the c:\winnt\system32\msconfd.dll file via Dos using a bootdisk (do not log into windows). You cannot delete this in Windows as it states that the file is in use.

3) Creating an empty text file in its place and making its attributes read only (make sure name is msconfd.dll and it is stored in C:\winnt\system32\).

4) Booting up normally into Windows and running CWShredder.

5) CWShredder finds the trojan and asks to reboot.

6) Once I rebooted I got a few error messages as the trojan tried to reinfect but could not because of the harmless read only msconfd.dll file I created in its location.

7) I then rebooted again and this time when I ran CWShredder it no longer appeared!!!

While doing this whole process I disabled my Internet connection but I do not know if this helped or not. Better to be safe...

Hope that helps you.
(#1541549@0)
Last Updated: 2004-1-2
Sign in and Reply Report

Replies, comments and Discussions:

  • 枫下家园 / 电脑用户 / 我自己的google被黑了,中了cws病毒.找了3个小时解药也没治好. -biosfix(BIOSXP.COM); 2004-1-2 {255} (#1541513@0)
    现象是,google搜索结果的连接被病毒篡改,改到 coolwebsearch,umaxsearch,等4~5个不同的垃圾网站上.
    每次要把搜索结果下面显示的连接地址手工复制到地址栏上才可以.
    按网上别人介绍的方法,禁止了 java,安装了adaware 6.0,最后把瑞星和nav 2004都升级也无效.凑合用了,痛苦啊.
    • this may help you. -guestagain(guest again); 2004-1-2 {1019} (#1541549@0)
      here is an example of remove CWS.Msconfd
      1)Running CWShredder in Windows and rebooting after it detected and tried to repair the infectio.

      2) Deleting the c:\winnt\system32\msconfd.dll file via Dos using a bootdisk (do not log into windows). You cannot delete this in Windows as it states that the file is in use.

      3) Creating an empty text file in its place and making its attributes read only (make sure name is msconfd.dll and it is stored in C:\winnt\system32\).

      4) Booting up normally into Windows and running CWShredder.

      5) CWShredder finds the trojan and asks to reboot.

      6) Once I rebooted I got a few error messages as the trojan tried to reinfect but could not because of the harmless read only msconfd.dll file I created in its location.

      7) I then rebooted again and this time when I ran CWShredder it no longer appeared!!!

      While doing this whole process I disabled my Internet connection but I do not know if this helped or not. Better to be safe...

      Hope that helps you.
    • hijackthis -guestagain(guest again); 2004-1-2 (#1541591@0)
    • CWShredder -guestagain(guest again); 2004-1-2 (#1541593@0)

More Topics

  • 换了新 iPad, 输入个人信息后很快从旧平板 paired 到新平板。现在想把旧平板给别人用。怎样把旧平板数据（owns 等）彻底去除？
  • Fido还有3GB数据15刀的计划么?
  • ZT: 10月25日，加拿大广播电视及电信委员会（CRTC）宣布，已设定小型公司向大型电信公司支付的批发费率，以便这些小公司可以使用大型电信公司（如Bell和Telus）拥有的现代光纤网络。只需再等待几个月：加拿大人就能享受又快又便宜的光纤互联网?
  • 只需再等待几个月：加拿大人就能享受又快又便宜的光纤互联网
  • 我的Fongo 手机现在在待机状态一接到来电就立刻转到leave message，除非我在用手机（也就是屏幕是开着的）。请问应该怎样设置？谢谢。
    • 枫下论坛主坛 /  枫下家园 /  电脑用户