Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Update cured the problem

Nov 24, 2003 6:55AM PST

Discussion is locked

- Collapse -
This was the CWShredder problem, sorry for the new post! [nt]
Nov 24, 2003 6:56AM PST

.

- Collapse -
Re:Update cured the problem
Nov 24, 2003 2:46PM PST

Nice to know that the latest version of CWShredder fixed the Madfinder issue.

Thanks for the info Happy

- Collapse -
(NT) Message has been deleted.
Nov 24, 2003 7:35PM PST
- Collapse -
Aww! that parasite is so mad ;)
Nov 24, 2003 8:09PM PST

LarryD, I found this in Google Group that you might want to try. -
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.madfind.html

http://www.spywareinfo.com/~merijn/cwschronicles.html#madfinder

MadFinder is nothing more than a Coolwebsearch affiliate portal ...

Most likely as you can tell from the "CWSchronicles" it is a self-updating parasite. I would suggest running CWShredder in Safe Mode, or get a "process killer", if you find "C:\WINDOWS\System32\svc.exe"
http://www.xmlsp.com/pview/prcview.htm "Kill" svc.exe, then delete it. Then run HijackThis again.