wwwCoolSearch.cameup/hijack this problem

[davidlaw69]

OK, so a scan revealed that my computer is infected with coolwwwsearch.cameup. The scan also identified this with it:
(SBI $4A5E11C5) INTERFACE
KEY_CASES_ROOT\Interface\{95B92D92-8B7D-4A19-A3FI-43113BFDBCAS}

I downloaded HijackThis to great a log to show with this message, but I received this message when I did the scan:

For some reason your system denied write access to the Hosts file. If any hijacked domains are in this file HijackThis may NOT be able to fix this.

If that happens, you need to edit the file yourself. To do this, click Start, Run and type:

notepad C:\Windows\System32\drivers\etc\hosts

and press Enter. Find the line(s) HijackThis reports and delete them. Save the file as 'hosts' (with quotes) and reboot.

So I went to Start, but there was no Run (Windows 7). I typed in the string in the box for search programs and files, but the desired info did not emerge.

When I ran Spybot, it identified this as the offending registry key:

HKEY_CLASSES_ROOT\Interface\{95B92D92-8B7D-4A19-A3F1-43113B4DBCAF}

Can anyone tell me if it is safe for me to just delete this key?

Can someone walk me through what I need to do?

Thanks.

[Blade81]

Hi,


Download DDS and save it to your desktop from here (http://download.bleepingcomputer.com/sUBs/dds.com) or here (http://download.bleepingcomputer.com/sUBs/dds.scr) or here (http://www.forospyware.com/sUBs/dds).
Disable any script blocker, and then double click dds file to run the tool.
When done, DDS will open two (2) logs:
DDS.txt
Attach.txt

Save both reports to your desktop. Post them back to your topic.

[Blade81]

Due to inactivity, this thread will now be closed.

Note:If it has been three days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh DDS log and a link to your previous thread. Please do not add any logs that might have been requested in the closed topic, you would be starting fresh.

If it has been less than three days since your last response and you need the thread re-opened, please send me or other MOD a private message (pm). A valid, working link to the closed topic is required.