Hi,
I have a problem with some malware that SpyBot detects as "CoolTooBar" and which is linked to the following Registry key:
HKEY_CURRENT_USER\Software\Microsoft\adssite.
I have made SpyBot delete it several times and I have deleted it manually many times also using Regedit, but it keeps on coming back. It comes back specifically when I start my browser (FireFox).
This key is huge (1,2 Mb). It includes one subsection which is a WEB PAGE ! Another subsection called "related_sites" is also quite large.
SYMPTOMS:
Pop-up page with title "Ads served by Adssite". The page
in question is advertizing for mainstream products, well known companies.
Once this page took the form of a form to fill out with my name, city, zip code, my age, etc. and it poped-up just when I loaded this forum's page. "Spybot" was displayed quite large on the pop-up page in question.
I have been getting help from another forum (one person)
for the last four days, downloaded and used about a dozen progs, in addition to my security programs already installed (ZoneAlarm, SpyBot, AVG Antivirus, SpywareGuard, SpywareBlaster) but no success.
I need help please.
Marc