Unsolved

This post is more than 5 years old

2 Intern

 • 

5.8K Posts

3063

January 21st, 2004 18:00

CWS.Smartsearch.2 Trojan?


Whenever I update to the latest version of
CWShredder, (currently 1.47.2), it opens with
a warning that I have the CWS.Smartsearch.2
trojan variant. A subsequent "Fix" scan always
finds my system is "completely clean". And indeed,
I have had no problems with browser hijackings,
nor any trouble accessing the security sites this
variant apparantly targets.


I have (and keep fully updated):
Win98SE
IE6 sp1
HijackThis (V1.97.7)
Spywareblaster (v2.6.1)
Ad-aware 6.0 (personal)
NAV2002
Spybot S&D 1.2
ZoneAlarm (v3.7.098)


Any thoughts on why I am getting this trojan warning?


3.9K Posts

January 21st, 2004 22:00

If it is norton warning you, it is a false positive. Norton is finding the compare code in cwshredder in error.

 

2 Intern

 • 

5.8K Posts

January 22nd, 2004 02:00

Thanks for the reply, Chris.

I should have been more clear- this is not a NAV
message, but a CWShredder popup that only
appears on my first attempts at opening a newly
downloaded version-here's a screenshot:


After I click on 'OK',  I can then proceed with a scan, which always
shows no infection.

But I see you are swamped here with requests, so I'll take this to one
of the forums you recommend, and post back with any results.

Thanks again.

168 Posts

January 22nd, 2004 03:00

I'm getting the same popup warning with the latest CWS too. I'm running XP Home, NAV 2004, SpyBot, AdAware, ZoneAlarm, and SpyBlaster/SpywareGuard. All come up clean.

426 Posts

January 22nd, 2004 03:00

It might have something to do with this post earlier by ChrisRLG

http://forums.spywareinfo.com/index.php?showtopic=11139

 

 

168 Posts

January 22nd, 2004 03:00

If my scans come up clean, why does CWS flag a Trojan? Do we actually have one and how do we get rid of it if it doesn't show up in the scans? Thanks all...

426 Posts

January 22nd, 2004 03:00

My apologies.  I inadvertently posted the wrong link.  The answer is in the post by ChrisRLG here:

http://forums.us.dell.com/supportforums/board/message?board.id=si_virus&message.id=2463

168 Posts

January 22nd, 2004 05:00

Thanks joe, it was driving me batty.

2 Intern

 • 

5.8K Posts

January 22nd, 2004 05:00

Update:

I got this response from cnm, a pro at TomCoyote's:

"Merijn is working on ways for CWShredder to circumvent a new variant and that message is apparently just overkill."

Just another wrinkle in the ongoing trojan wars, I guess...

3.9K Posts

January 22nd, 2004 19:00

Try getting the lastest version - it is updated as regularly as CWS issue new versions. LOL

Top