CWS_NS3 hijack - can't remove.

[ddeder]

I have tried everything - Adaware, Spybot Search and Destroy, CWShredder, HijackThis, PestPatrol, Spysweeper. Even some program called AboutBuster. All programs are up to date. The only program that actually identifies the hijack is Spysweeper. This is the full paid for version. It identifies the hijack and allows me to remove the offending registry entries but the next time I run a sweep there they are again. Tech Support for Spysweeper has asked me to e-mail them a log from HijackThis. They tell me they will get back to me in 2-3 days:disgust:. HijackThis shows me a reference to a randomly named .dll everytime I run it. When I have hijackThis delete it, it just reappears the next time I reboot. In fact, I don't even think I need to reboot for it to come back. This is the worst hijack I have ever encountered. Searching the internet, I have found others that have this and have not found a solution. Some say Spysweeper has removed the problem for them but this does not work for me.

I know I can format the HD and reinstall but I would like to find a way to remove this so if I ever see it again I won't have to reformat.

 

[mechBgon]

Did you try all of the above in Safe Mode?

 

[Schadenfroh]

click the link in my sig, go thru the steps, and post your hijackthis log in the thread in my sig if you are still having problems.

 

[redbeard1]

There are three that I have found to be the hardest ones to remove. Nowadays I search for these three in the registry to know how hard I need to work. I search for, "wtool" and "wintools" for one program, "guardian" which is from a VX2 better internet adware, and "apropos". This last one is the sneakiest one to find, and is generally not found by the spy removal tools I use. If you find one of these in your registry, look through their entries and find the dll or exe it needs, and where it runs from.