I have a computer with 2 OS installed (Win98SE and WinXP SP2) in my office. We can only connect to the internet under Win98SE. We used IE 5.5 SP2 for the browser and I forgot to install any popup blocker. Unfortunately, the new operator hardly browsed internet before. She clicked yes/ok everytime there's popup. Because of it the Win98SE was infected by lots of spywares, malwares, trojans, etc.

I installed XoftSpy 4.10. The software could recognize and remove all the intruders. However, there's 1 malware that always comes back eventhough XoftSpy has reported that it had been quarantined. It is CoolWebSearch malware.

I found out that the malware always creates file se.dll (17 KB) in c:\windows\temp. I couldn't delete it under Windows, but it's also useless deleting it in DOS command prompt since it always comes back again. Then I deleted every registry that has value se.dll, not to forget the startup in the msconfig, but they're also useless.

Is there any way to remove this malware completely?

Btw, there're 2 system files that have text of "c:\windows\temp\se.dll" inside, those are: system.dat and user.dat. But I don't know if editing them will harm the OS or not.

I would try spybot search and destroy, adaware, and the microsoft spyware remover software. Some require more work so if that doesn't work try googling for a solution.

<pre><font color=red>A64 3200+ Winchester
DFI Lan Party NF4 Ultra-D
1GB Corsair 4400C25PT
WD740GD, WD2000JB, WD1200JB
ATI X800XL
Dell 2405FPW</pre><p>

Try this:<A HREF="http://www.softpedia.com/get/Internet/Popup-Ad-Spyware-Blockers/CoolWebShredder.shtml" target="_new">CoolWebShredder</A>

or this:<A HREF="http://www.softpedia.com/get/Internet/Popup-Ad-Spyware-Blockers/CWShredder.shtml" target="_new">CWShredder</A>

....WW (5.0)

Thanks a lot. Finally the malware can be removed. ^^