×

Loading...

this may help you.

guestagain(guest again)
here is an example of remove CWS.Msconfd
1)Running CWShredder in Windows and rebooting after it detected and tried to repair the infectio.

2) Deleting the c:\winnt\system32\msconfd.dll file via Dos using a bootdisk (do not log into windows). You cannot delete this in Windows as it states that the file is in use.

3) Creating an empty text file in its place and making its attributes read only (make sure name is msconfd.dll and it is stored in C:\winnt\system32\).

4) Booting up normally into Windows and running CWShredder.

5) CWShredder finds the trojan and asks to reboot.

6) Once I rebooted I got a few error messages as the trojan tried to reinfect but could not because of the harmless read only msconfd.dll file I created in its location.

7) I then rebooted again and this time when I ran CWShredder it no longer appeared!!!

While doing this whole process I disabled my Internet connection but I do not know if this helped or not. Better to be safe...

Hope that helps you.
(#1541549@0)
Last Updated: 2004-1-2
Sign in and Reply Report

Replies, comments and Discussions:

  • 枫下家园 / 电脑用户 / 我自己的google被黑了,中了cws病毒.找了3个小时解药也没治好. -biosfix(BIOSXP.COM); 2004-1-2 {255} (#1541513@0)
    现象是,google搜索结果的连接被病毒篡改,改到 coolwebsearch,umaxsearch,等4~5个不同的垃圾网站上.
    每次要把搜索结果下面显示的连接地址手工复制到地址栏上才可以.
    按网上别人介绍的方法,禁止了 java,安装了adaware 6.0,最后把瑞星和nav 2004都升级也无效.凑合用了,痛苦啊.
    • this may help you. -guestagain(guest again); 2004-1-2 {1019} (#1541549@0)
      here is an example of remove CWS.Msconfd
      1)Running CWShredder in Windows and rebooting after it detected and tried to repair the infectio.

      2) Deleting the c:\winnt\system32\msconfd.dll file via Dos using a bootdisk (do not log into windows). You cannot delete this in Windows as it states that the file is in use.

      3) Creating an empty text file in its place and making its attributes read only (make sure name is msconfd.dll and it is stored in C:\winnt\system32\).

      4) Booting up normally into Windows and running CWShredder.

      5) CWShredder finds the trojan and asks to reboot.

      6) Once I rebooted I got a few error messages as the trojan tried to reinfect but could not because of the harmless read only msconfd.dll file I created in its location.

      7) I then rebooted again and this time when I ran CWShredder it no longer appeared!!!

      While doing this whole process I disabled my Internet connection but I do not know if this helped or not. Better to be safe...

      Hope that helps you.
    • hijackthis -guestagain(guest again); 2004-1-2 (#1541591@0)
    • CWShredder -guestagain(guest again); 2004-1-2 (#1541593@0)

More Topics

  • 收到通知public mobile $29 (20G)用户，可以升级到40G了哈。当然新用户也可以。
  • 请问大家，去美国打算使用 prepaid sim roaming card, 按照说明，激活这个卡后，会收到一个新号码。我想问一下，原来的话都联系，微信，whatsApp 还可以使用吗？在这里先谢谢大家了！！
  • 请问在国内现买回国的esim可行吗？开通了电信国内漫游，好像可以上外网但是我又不确定，想有个plan B
  • 请问：一直用Bell从疫情期间Rogers信号经常on-off开始，因为那时候在家工作5天要保持优质的网络， 每月近100刀。 现在在家工作伟每周两天。 今天接到ItalkBB华人销售说同样的Bell 可以40刀---原来听到对ItalkBB服务意见不少，现在可以用吗？（谢谢)
  • 又接到一个欺诈电话，问我是不是有个td账号，我说不在电话谈银行信息就撂了! 她知道我的名字和电话号码，有危险吗？很担心。
    • 枫下论坛主坛 /  枫下家园 /  电脑用户