IF YOU DON"T KNOW WHAT YOU ARE DOING, PLEASE DO NOT ATTEMPT, YOU COULD HOSE YOUR SYSTEM. (disclaimer)
It sounds like you have coolweb,cwshredder isn't working becaue the company that make cwshredder gave up.
There are over 50 variations of coolweb. It installs in three parts, one on the startup, one in the registery, and a file you can't see unless you have your system set to show hidden files and system files.
One variation of coolweb is tied to the computerclock, and reinstalls when your computer hits a certain predefined time.
Run msconfig, and look at your startup tab, you will have to google every file under the command heading to see if it is Legitimate.
Also Cntl alt Del and open up task manager, you will also have to look under processes that are running to see if they are legit. An example is svchost.exe, which is a legitmate file, but scvhost.exe is not.
Write down the entire location of all rogue files.
This thing is a real pain in the a** to remove, because if you miss one file, the entire system will become reinfected.
After doing that and deleting and unchecking rogue files, a good program to use to assist is spybot s&d, you have to go to advance mode and under tools check the box that says browser pages, and change all redirects from
res:// etc... to a start page of your choise(sp), if not, when you restart IE, it will go to that res location and it will execute a java script and your toast again.
OK, after all of this, run adaware, and write down the location of where the files identified as coolweb are. Now don't let adaware delete them, go there yourself and manually delete them, if they don't delete, don't worry...yet.
Now, reboot, and go to safe mode. Run spybot, then adaware, go to the place to make sure the files really are gone, adaware usually will take care of the files in the registery, google the files adaware finds, there is a web site that will tell you which registery changes were made, but I can't remember the name right now.
One miss and you will have to do it all over again.
If you attempt this yourself, google coolweb removal, and read up ont it, I might be forgetting something.
The easy way is to get your important file, reformat, and reload. Then install your antivirus, update, adaware, spybot, and immunize your system with spybot s&d, then install spywareblaster by javacoolsoftware.(
http://www.javacoolsoftware.com)
and get all operating system updates as soon as you can.
ALSO, check this first, there is something called vx2 that is pretty bad, install a plugin for adaware to remove this type of infection.
Like I said, this thing is a real pain, one miss and you have to do it all over again, read the hijackthis forums, they will help you spot rogue files.
Good luck!!
Oh yeah, don't use the msjava console, uninstall it and use the latest java console by SUN.
