First time posting here and thought I would say HELLO. I have also posted in Hijackthislogs.com and Castlecops.com but thought I would try this one too. I ran into a problem and it seems that my computer has CWS.Google MS.3 which Pest Patrol Evaluator found. It first started with Spywareblocker from Webroot finding CWS_xplugin. I installed CWShedder and it found no Coolwebsearch or any of it's variants. It may just be a false positive from Pest Patrol but I am not sure. I wasn't sure where to post this so I thought this would be a good place to start and maybe someone there could direct me to the correct posting place. I hope someone can help me with this as I am not very computer literate and it is beginning to drain my brain. Have a great day and THANKS>>>>>

Hello and welcome to the forum.

Sure I will help you remove your spyware.

Download & Save this to a folder where you can find it then close all open windows and run it.
CW Shredder

Then Download, Update, and run these in this order and delete everything that is found.
Ad-Aware SE Click the download com top rated 5 on the right side of the page.
SpyBot S&D 1.3 Click any of the download now buttons.
TrendMicro Free Virus Scan Click the Scan Now, It's Free.

Post back and let us know how things are now.

Hi River_Rat: Thank you for getting back to me so quickly. I already have installed on my computer Ad-Aware SE Personal 1.05, Spybot Search & Destroy 1.3, Spywareblaster, Spywareguard, Hijackthis 1.98.2, CWShredder 2.00.0, WinPatrol 8.0.1.0, Pest Patrol Evaluator, Earthlink spywareblocker by Webroot and Yahoo Anti-spy v1.8. They have all been updated as of today. Yesterday I ran all of them and only the Earthlink spywareblocker found CWS_xplugin. That made me think it was a variant of Coolwebsearch so I then installed CWShredder and clicked Fix. It said I had no Coolwebsearch on computer. I then ran Pest Patrol evaluator and it found CWS.Google MS.3 as well as Winnet. I got rid of Winnet by deleting it. That just left the CWS.Google MS.3

After I posted the first time to this BB, I looked in Spywareblaster and it has xxxtoolbar.com listed as being blocked and that is where Pest Patrol said the CWS.Google MS.3 was located. I then went to registry, found, but didn't know what to do next. I wasn't even sure if I had it or not.

I was told by someone in Hijackthis.com that it could be a false positive reading from Pest Patrol but I am not sure. I tried to run the Micro Trend House Call but for some reason it will not run.

Hope I have explained this well enough. Any thoughts? Do you think I have the CWS.Google MS.3 on my computer and if so, how do I get rid of it for good. My brain is becoming fried with all this so any help would be greatly appreciated.

Well the next step would be to go to Folder Options in the Control Panel>View tab>put a dot in Show Hidden Files & Folders then post a HJT Log on this forum and they will check it for you.
http://www.bleepingcomputer.com/forums/forum22.html

Thanks. Do I post the log in this same thread or start a new one in the Hijackthislog section? I will run HJT now and get it ready so as soon as I hear back from you I will post log. And thanks. Waiting for your reply shortly....

Hi. I just posted my Hijackthislog in the Hijackthislog forum section and here is the link in case you need to see it. Thanks for all your help and I will be waiting for someone to get back to me so I will know if I am clean or if I have to do some work to get rid of CWS.Google MS.3

http://www.bleepingcomputer.com/forums/ind...=ST&f=22&t=4761

Are people working on your log at any of the other forums? If so I would prefer that you only get help from one forum at a time for the same log as it can get confusing

Hi there yjsk2100

I contacted PestPatrol about this, and they advised that this is a false positive, caused by PP flagging the registry entry in Spyware Blaster for xxxtoolbar.com.
If you delete GoogleMS3 in PP, SpywareBlaster then reports as being unprotected from xxxtoolbar.
They recommended that I set PP to "ignore" GoogleMS3, which I felt quite happy to do as scans with Adawre and Spybot S&D were clear.

This has worked for me at any rate!

Luci2a

Ya Grinler I directed him to post his HJT log in the HJT forum so the people over there help him see if he had something the adware tools wouldn't clean up.
You can go ahead and lock this thread or what ever it is that needs to be done.

Thanks Luci I will keep that info for future use.

Hi. I did post in Castlecops.com as well as here because I didn't realize it was wrong to do so. Sorry about that..... Also one question:



How do I have PP ignore GoogleMS.3. I looked at PP and did not see where I could do this. Any help before you close this thread? And I will not post in more than one at a time in the future....... So please keep this thread open for now.

He wasn't talking about posting in different websites just different forums on Bleeping Computer.
Stick around and chat with everyone and read the tutorials lots of good info and everyone around here will also throw in a little humor every now & then.

On the main scanning page of PestPatrol there is an "exclude" button. When a pest which is known to be a false positive comes up, highlight it and just hit that button. The exclusion will then show up in Options > What to exclude.

Cheers
Luci2a

luci2a: Hi. Thanks for the quick reply. I understand now. I need to run the scan again and then exclude it from there. I was just looking in the PP program itself and got lost. Will run scan as soon as I send this. Also heard back from PP by e-mail and was told same thing you said earlier - it was a false positive.

Also to River_Rat. I am a she not a he.....ROFL.... And I will continue to use Bleeping Computer and read other posts just to see what everyone has to say.

To River Rat: Do you need to run more than one spyware remover? I figured one was sufficient. I currently use Mcfee.

Hello sciachir and welcome to the forum.
I will answer your question but from now on please direct all new question to a new thread.

McAfee is not a spyware remover it is a virus protection and runs in the background and should be updated regularly either manual or automatic.
Yes you should only run 1 virus protection and 1 firewall.

Spyware removers do not run in the background you have to update and run them manually.

You can run a spyware blocker in the background that will block a number of known spyware, here is a couple that I can recommend.

Ie-Spyad

Spyware Blaster The free version will have to be updated & enabled manually, recommend a couple of times a week.

Sorry I sometimes have a problem with opening my mouth and inserting my foot from time to time.

Welcome to the club, River_Rat, I've known the taste of leather a time or two myself, and of course to sciachir. Many thanks for revealing that identity detail so the rest of us might not duplicate the error that seems to be everpresently a possibility with the nicks that come from all over the world.

River_Rat: There was no way for you to know the gender of the person asking questions in this thread with all the different ID logons that we use. Just thought I would let you know my gender since reading post and seeing "HE". Thanks for all of your help with the CWS.Google MS.3 I just realized I had the wrong Pest Patrol installed on my computer. It is only the evaluator and will not block anything, remove anything or update itself. Guess I will have to uninstall version 4 and install version 5. Was told I had wrong one from Pest Patrol via e-mail. Catch you later......