SpybotSD shuts down computer while scanning on coolwwwsearch

[Cherryman]

I run AVG, ad-aware and spybot as my main programs and as of recently spybot has begun to restart my computer everytime it gets to coolwwwsearch.feat2dll. I have run all trojan and spyware programs I can find among a couple of coolwwwsearch removal tools and nothing is found. I have ran registry tools and ran regedit to find and delete all coolwwwsearch entries among coolwebsearch and anything alike. Most registry entries came back after a reboot. I have no other problems and to make it more confusing when run in safe mode the scan completes just fine but finds absolutly nothing. Here is my HJT log would appreciate any help I can get, am completely stumped.

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\Program Files\Dudez\ProtoWall\ProtoWall.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\WyvernWorks\Firewall 2004\Firewall 2004.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Home\Desktop\Tools\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [ProtoWall] C:\Program Files\Dudez\ProtoWall\ProtoWall.exe
O4 - Startup: Firewall 2004.lnk = C:\Program Files\WyvernWorks\Firewall 2004\Firewall 2004.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe

[shelf life]

hi Cherryman,

your log looks fine. dont know why SBSD cant complete a scan. if you have run some CWS tools and come up clean and SBSD completes in safe mode than i wouldnt be to concerned about it.

is that firewall your running freeware?

[Cherryman]

Yes, I run wyvernworks firewall and it is freeware.

[shelf life]

hi Cherryman,

i can suggest 4 or 5 freeware firewalls, that i feel would offer you more security than your current one. there are boatloads of firewalls out there, some better than others.

shelf life

[tashi]

Cherryman has a topic here:
http://forums.maddoktor2.com/index.php?showtopic=6656

Which forum do you wish to receive assistance at Cherryman?

[Cherryman]

Would like suggestions on a new freeware firewall, have not had any problems with wyvernworks like I had with others. Also was not aware there is some kind of "rule" on how many forums I can post on. Am first time poster not really my thing, however have not run across this type of problem before so I thought I would get as many thoughts on it as possible since I did not recieve any replys for 3-4 days here.

[tashi]

Hello.
We have a topic here:
If you have waited three days for advice post here. (http://forums.spybot.info/showthread.php?p=4836#post4836)
However shelf life responded within two days. :)

He will give you information on firewalls.

If you would like to continue here regarding the problem you are experiencing with Spybot and coolwwwsearch.feat2dll. let us know.

It would be best at that point to start a topic in the main forum:
http://forums.spybot.info/forumdisplay.php?f=4 with a link back to this one so that you may receive assistance from Advisors who have been researching such.

Cheers.

[shelf life]

hi Cherryman,


Also was not aware there is some kind of "rule" on how many forums I can post on
theres really no rule, just nice to know so that efforts arent duplicated.

i would continue with the feat2dll problem in the link Tashi posted.

firewalls in no special order:

http://www.kerio.com/kpf_download.html (limited free version after 30 days)

http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp?dc=12bms&ctry=US&lang=en

http://www.jetico.com/index.htm#/jpfirewall.htm

http://www.majorgeeks.com/download1056.html (outpost Lite)

[tashi]

Hello, this topic will now be archived to prevent others with similar issues posting in it.
If you need it re-opened please pm shelf life.

Thank you.