system
36
Gunnerpunk, I’ve been researching this for the past couple of days, and have been unable to remove it from my machine! The newest (I think built yesterday) version of CWShredder can identify and remove this, but it seems to somehow still re-install itself on reboot. CWShredder classifies this as CWS.SearchX – the search page that comes up is SearchX, right?
That “kemffdf.dll” stuff in your HJT log is the problem, and the filename for the dll is randomly generated every time the thing re-installs itself.
Can’t really help you out to much except to say that I’m in the same boat, and it seems like the people who make CWShredder are on it… check out http://www.spywareinfo.com/~merijn/cwschronicles.html#searchx
Nick