Member Avatar for geoss

Hi,
I've scanned over and over with spybot and adaware 1.05 and this reg. key entry keeps coming up even after I press remove. I have also tried to delete it from the registry in regedit, and a box pops upthat I can't do it........can someone please help.
Thanks
George


Started registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

CoolWebSearch Object Recognized!
Type : RegKey
Data :
Category : Malware
Comment :
Rootkey : HKEY_LOCAL_MACHINE
Object : system\currentcontrolset\enum\root\legacy_*008f__6q*00d4*00f5*0013'*00aa*00b4*00c6*00d08

  • 3 Contributors
  • 4 Replies
  • 119 Views
  • 16 Hours Discussion Span
  • Latest Post Latest Post by dlh6213
Member Avatar for OurNation

Try downloading HiJack This from my sig and then save and post a log here

Member Avatar for dlh6213

I have a few suggestions you can try.

First of all, before you manually edit the Registry, you should create a backup. At the top of the Registry window, click on the Registry menu, click Export Registry File. In the Export range panel, click All, then save your registry as Backup. Then, if the operating of your PC is affected, you have a way to restore it. Did you try running regedit from Safe Mode?

Try CWShredder, you can get it here:
http://www.intermute.com/spysubtract/cwshredder_download.html

You can also try CounterSpy, link and instructions can be found in post #3 of this thread:
http://www.daniweb.com/techtalkforums/thread20434.html

Member Avatar for geoss

Thanks,
I tried CWShredder before, but the malware still showed up............I did try out of the regedit, and this time I was able to delete it.........but I didn't back it up(I did, but only using system restore-is that the same as creating a backup?)
It looks good for now..........Thanks
George

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.