CoolWWWSearch.SmartSearch

[thinkpositiv]

Hello everybody,

today a spybot-scan returned the following scan result:

CoolWWWSearch.SmartSearch 1 entries Hijackers

The "infected" executable file "uninstall.exe" is in the root-directory. It seems to be the uninstaller of a fotobook-software i updated recently.

I checked my system using the following tools:
- AVG Anti-Virus Free >> everything OK
- HijackThis (v2.0.2) >> logfile OK
- VIRUSTOTAL (check of "uninstall.exe") >> no error

I think it's a FalsePositive but i'm not sure.

Can anybody help me ?

Thanks !!!!

thinkpositiv

[pskelley]

Welcome to Safer Networking, I wish to be sure you have viewed and understand this information.
"BEFORE you POST" (READ this Procedure before Requesting Assistance) http://forums.spybot.info/showthread.php?t=288
All advice given is taken at your own risk.
Please make sure you have read this information so we are on the same page.

Can anybody help me ?
1) Spybot S&D questions would go here:
http://forums.spybot.info/forumdisplay.php?f=4

2) Questions about false positives here:
http://forums.spybot.info/forumdisplay.php?f=16

before you post, make sure your version is up to date and fully immunized when run:
Spybot-S&D 1.6 has arrived! 8. July 2008
http://www.safer-networking.org/en/
http://www.safer-networking.org/en/news/2008-07-08.html
http://www.safer-networking.org/en/faq/index.html

3) This is the malware removal forum, I have posted a link to the directions that would need to be followed above and they are also pinned (sticky) to the top of this forum.

Thanks

[thinkpositiv]

Hello pskelly!

Thank you for your reply! I've red the information "Before you post". Unfortunately I didn't understand everything because English is not my native language. I hope i didn't do any mistake and I try to follow the rules of this forum but i don't know what to do know.

Thanks!

[pskelley]

One thing we can not have if we are to work on your computer is a communication gap. It may be better that we do not proceed beyond this point. What is your native language, perhaps I can direct you to a forum in that language, or one of the helpers here speaks it. You have provided no information in your public profile:
http://forums.spybot.info/member.php?u=50951

Thanks

[thinkpositiv]

Hello pskelly,
i agree - language problems could result in a bigger problem.
My native language is german.
Thank you.

[pskelley]

Thanks for the response, I am sure you know the creator of Spybot S&D and this forum is your countryman.

GERMAN/DUTCH FORUM
http://forums.spybot.info/forumdisplay.php?f=15

haben Sie einen großen Tag