Please help me out .
coolwebsearch has brought my pc to the brink of disaster. i use windows xp and when i visited a site it gave me a spyware which resulted in displaying an unwanted desktop background, which is impossible to change because the properties of the windows desktop have been locked by this spyware. i.e when i right-click on the desktop the desktop properties show only the settings tab and the remainning tabs are missing.
when i scaned with an expired antispyware it gave me the results but didnt remove it because it was expired. the result is as follows:
A..._ | AD Begin2search
_ | (File) c:\windows\system\nsp2075.dll
_ | (File) c:\windows\system\nsb1220.dll
_ | (File) c:\windows\system\nspe260.dll
_ | (File) c:\windows\system\nsoe2b0.dll
_ | (File) c:\windows\system\nsbe313.dll
_ _ | AD CWS Hotoffers DesktopHijacker
_ | (Registry Entry) HKEY_CLASSES_ROOT\clsid\{145e6fb1-1256-44ed-a336-8bba43373be6}
_ | (Registry Entry) HKEY_CLASSES_ROOT\clsid\{b599c57e-113a-4488-a5e9-bc552c4f1152}
_ | (Registry Entry) HKEY_LOCAL_MACHINE\software\classes\clsid\{145e6fb1-1256-44ed-a336-8bba43373be6}
_ | (Registry Entry) HKEY_LOCAL_MACHINE\software\classes\clsid\{b599c57e-113a-4488-a5e9-bc552c4f1152}
_ | (Registry Entry) HKEY_LOCAL_MACHINE\software\classes\clsid\{145e6fb1-1256-44ed-a336-8bba43373be6} || inprocserver32
_ | (Registry Entry) HKEY_CLASSES_ROOT\clsid\{145e6fb1-1256-44ed-a336-8bba43373be6} || inprocserver32
_ | (File) c:\wp.bmp
now see my stupidity i began to remove the above things manually, and instead of removing the registry keys:
(Registry Entry) HKEY_LOCAL_MACHINE\software\classes\clsid\{145e6fb1-1256-44ed-a336-8bba43373be6} || inprocserver32
_ | (Registry Entry) HKEY_CLASSES_ROOT\clsid\{145e6fb1-1256-44ed-a336-8bba43373be6} || inprocserver32
(Registry Entry) HKEY_LOCAL_MACHINE\software\classes\clsid\{145e6fb1-1256-44ed-a336-8bba43373be6}
_ | (Registry Entry) HKEY_LOCAL_MACHINE\software\classes\clsid\{b599c57e-113a-4488-a5e9-bc552c4f1152}
i removed the entire class of registry keys which is :
HKEY_CLASSES_ROOT\clsid\{145e6fb1-1256-44ed-a336-8bba43373be6}
_ | HKEY_CLASSES_ROOT\clsid\{b599c57e-113a-4488-a5e9-bc552c4f1152}
now when i restarted the computer ...it started , it also connected to the internet , but i was unable to connect to any sight ..i.e. the browser didnt work..also no downloading was possible.
please help and tell how i can restore the above registry.
i have tried reboot in " restore to last good known configrations" but it too didnt work.
iqbal