coolweb entry

[darkjedi]

HI guys, I have a question , I got infected by the js.seeker trojan horse , which include coolweb entries , my antivirus detected the infection and quarantine it , I decided to run hjt to check if I was infected , but the log did no show any infection , then I ran ad-aware and spybot and they detected coolweb entries on the registry , I clean them up and my system is back to normal , my question is is there a reason why hjt does not detected the coolweb entries?

 

[dvk01]

many are hidden and run from a different palce than those that hjt shows

download CWshredder from http://www.thespykiller.co.uk then Run it
Close all browser windows, click on the cwshredder.exe then click "FIX" (Not "Scan only") and let it do it's thing.
and make sure you follow the advice about the security updates listed on the last page, in order to prevent re-infection, otherwise you will be continually reinfected
the patches are :
http://support.microsoft.com/default.aspx?kbid=828026
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms03-011.asp
*Note: The simplest way to make sure you have all the security patches is to go to Windows update and install all "Critical Updates & service Packs"