everytime i boot my computer, the antispyware detects
coolwebsearch tryin to install, n i click remove
everytime, but doesnt seem to be removed. If i can get
help with removing this, it would be helpful.

Thanks

Pravin wrote:
> everytime i boot my computer, the antispyware detects
> coolwebsearch tryin to install, n i click remove
> everytime, but doesnt seem to be removed. If i can get
> help with removing this, it would be helpful.

Hi

Have you done any scans in safe mode ? Do that,
choose fullscan with all options checked.

Also fill your "toolbox" with these tools to make this cleaning
better.

- Download/Install CCleaner, www.ccleaner.com, remove all
temporarily junk

- Download/Install Lavasofts Adaware

http://www.download.com/Ad-Aware-SE-....html?tag=list


All scans then in safe mode, press F8 during reboot.

--
plun

CoolWebSearch is a constantly mutating major nuisance. The best tool to
diagnose it is HijackThis, and expert advice. HijackThis shows all possible
traces of software, anything that MIGHT be malware, and lets an expert
identify the bad stuff manually.

HijackThis http://www.tomcoyote.com/hjt/

Create a separate folder for HijackThis, such as C:\HijackThis - copy the
downloaded file there.

Then, run HijackThis ("Scan"). Do NOT make any changes immediately. Save
the HJT Log.

http://forums.spywareinfo.com/index.php?showtopic=227

Finally, have your HJT log interpreted by experts at one or more of the
following security forums (and please post a link to your forum posts,
here):

Aumha: http://forum.aumha.org/index.php

Net-Integration: http://forums.net-integration.net/

Spyware Info: http://forums.spywareinfo.com/

Spyware Warrior: http://spywarewarrior.com/index.php

Tom Coyote: http://forums.tomcoyote.org/
--

Andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm


"Pravin" <(E-Mail Removed)> wrote in message
news:066601c545d8$605bf960$(E-Mail Removed)...
> everytime i boot my computer, the antispyware detects
> coolwebsearch tryin to install, n i click remove
> everytime, but doesnt seem to be removed. If i can get
> help with removing this, it would be helpful.
>
> Thanks

Have the same issue with YourSiteBar. And check below, there is a thread
for your issue already.

My solution was to finally uninstall MSAS and wait until the next beta.
This false-positive is way too annoying.


"Pravin" <(E-Mail Removed)> wrote in message
news:066601c545d8$605bf960$(E-Mail Removed)...
> everytime i boot my computer, the antispyware detects
> coolwebsearch tryin to install, n i click remove
> everytime, but doesnt seem to be removed. If i can get
> help with removing this, it would be helpful.
>
> Thanks

It use to be CWSHREDDAR was the only program that would
get rid of CoolWebsearh (CWS) but now that a big company
has bought it doesn't work anymore I to have just
contracted the Hijacker again and have been working for a
week to remove it. It goes out on the net when you logon
or restart and downloads all it's nasty little friends so
it multiplies. I have tried every spyware program
available on the market and none of them work even though
they say they do in bold print. They remove it and when
you reboot it's back. Don't waste your money. There are
only 2 ways to get rid of it now. Reinstall the operating
system after erasing all data on your hard drive or
Download a free program call HIJACKTHIS run a log and
post it on thier website and after some time they will
get back to you and tell you what you need to do to your
REGISTRY to make the problem go away. I'm not comfortable
with the REGISTRY option because they don't know for
shure if it will work. They are making an educated guess.
All computers are different. So It's time to reformat and
reload the operating system. Hopefully you can do that.

Ken






>-----Original Message-----
>everytime i boot my computer, the antispyware detects
>coolwebsearch tryin to install, n i click remove
>everytime, but doesnt seem to be removed. If i can get
>help with removing this, it would be helpful.
>
>Thanks
>.
>

Right click My Computer > Properties > System Restore (tab) > Check "Turn
Off System Restore". Restart the system in safe mode:
Restart in safe mode instructions:
http://www.microsoft.com/resources/d..._failsafe.mspx

Open Microsoft Antispyware and choose Scan Options > Full System Scan (check
boxes below) and click Run Scan Now, after the scan is finished, restart and
renable System Restore. Its possible that CWS is restoring itself with
system snap shots.
--

Andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

"Ken" <(E-Mail Removed)> wrote in message
news:13bf01c545f6$714c14d0$(E-Mail Removed)...
> It use to be CWSHREDDAR was the only program that would
> get rid of CoolWebsearh (CWS) but now that a big company
> has bought it doesn't work anymore I to have just
> contracted the Hijacker again and have been working for a
> week to remove it. It goes out on the net when you logon
> or restart and downloads all it's nasty little friends so
> it multiplies. I have tried every spyware program
> available on the market and none of them work even though
> they say they do in bold print. They remove it and when
> you reboot it's back. Don't waste your money. There are
> only 2 ways to get rid of it now. Reinstall the operating
> system after erasing all data on your hard drive or
> Download a free program call HIJACKTHIS run a log and
> post it on thier website and after some time they will
> get back to you and tell you what you need to do to your
> REGISTRY to make the problem go away. I'm not comfortable
> with the REGISTRY option because they don't know for
> shure if it will work. They are making an educated guess.
> All computers are different. So It's time to reformat and
> reload the operating system. Hopefully you can do that.
>
> Ken
>
>
>
>
>
>
>>-----Original Message-----
>>everytime i boot my computer, the antispyware detects
>>coolwebsearch tryin to install, n i click remove
>>everytime, but doesnt seem to be removed. If i can get
>>help with removing this, it would be helpful.
>>
>>Thanks
>>.
>>

I've done all that already... not a Newbie

Ken

>-----Original Message-----
>Right click My Computer > Properties > System Restore
(tab) > Check "Turn
>Off System Restore". Restart the system in safe mode:
>Restart in safe mode instructions:
>http://www.microsoft.com/resources/d...ation/windows/
xp/all/proddocs/en-us/boot_failsafe.mspx
>
>Open Microsoft Antispyware and choose Scan Options >
Full System Scan (check
>boxes below) and click Run Scan Now, after the scan is
finished, restart and
>renable System Restore. Its possible that CWS is
restoring itself with
>system snap shots.
>--
>
>Andre
>http://spaces.msn.com/members/adacosta
>FAQ for MS AntiSpy
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm
>
>"Ken" <(E-Mail Removed)> wrote in
message
>news:13bf01c545f6$714c14d0$(E-Mail Removed)...
>> It use to be CWSHREDDAR was the only program that would
>> get rid of CoolWebsearh (CWS) but now that a big
company
>> has bought it doesn't work anymore I to have just
>> contracted the Hijacker again and have been working
for a
>> week to remove it. It goes out on the net when you
logon
>> or restart and downloads all it's nasty little friends
so
>> it multiplies. I have tried every spyware program
>> available on the market and none of them work even
though
>> they say they do in bold print. They remove it and when
>> you reboot it's back. Don't waste your money. There are
>> only 2 ways to get rid of it now. Reinstall the
operating
>> system after erasing all data on your hard drive or
>> Download a free program call HIJACKTHIS run a log and
>> post it on thier website and after some time they will
>> get back to you and tell you what you need to do to
your
>> REGISTRY to make the problem go away. I'm not
comfortable
>> with the REGISTRY option because they don't know for
>> shure if it will work. They are making an educated
guess.
>> All computers are different. So It's time to reformat
and
>> reload the operating system. Hopefully you can do that.
>>
>> Ken
>>
>>
>>
>>
>>
>>
>>>-----Original Message-----
>>>everytime i boot my computer, the antispyware detects
>>>coolwebsearch tryin to install, n i click remove
>>>everytime, but doesnt seem to be removed. If i can get
>>>help with removing this, it would be helpful.
>>>
>>>Thanks
>>>.
>>>
>
>
>.
>

Its possibly a variant.
--

Andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

<(E-Mail Removed)> wrote in message
news:140d01c545fe$45180920$(E-Mail Removed)...
> I've done all that already... not a Newbie
>
> Ken
>
>>-----Original Message-----
>>Right click My Computer > Properties > System Restore
> (tab) > Check "Turn
>>Off System Restore". Restart the system in safe mode:
>>Restart in safe mode instructions:
>>http://www.microsoft.com/resources/d...ation/windows/
> xp/all/proddocs/en-us/boot_failsafe.mspx
>>
>>Open Microsoft Antispyware and choose Scan Options >
> Full System Scan (check
>>boxes below) and click Run Scan Now, after the scan is
> finished, restart and
>>renable System Restore. Its possible that CWS is
> restoring itself with
>>system snap shots.
>>--
>>
>>Andre
>>http://spaces.msn.com/members/adacosta
>>FAQ for MS AntiSpy
> http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm
>>
>>"Ken" <(E-Mail Removed)> wrote in
> message
>>news:13bf01c545f6$714c14d0$(E-Mail Removed)...
>>> It use to be CWSHREDDAR was the only program that would
>>> get rid of CoolWebsearh (CWS) but now that a big
> company
>>> has bought it doesn't work anymore I to have just
>>> contracted the Hijacker again and have been working
> for a
>>> week to remove it. It goes out on the net when you
> logon
>>> or restart and downloads all it's nasty little friends
> so
>>> it multiplies. I have tried every spyware program
>>> available on the market and none of them work even
> though
>>> they say they do in bold print. They remove it and when
>>> you reboot it's back. Don't waste your money. There are
>>> only 2 ways to get rid of it now. Reinstall the
> operating
>>> system after erasing all data on your hard drive or
>>> Download a free program call HIJACKTHIS run a log and
>>> post it on thier website and after some time they will
>>> get back to you and tell you what you need to do to
> your
>>> REGISTRY to make the problem go away. I'm not
> comfortable
>>> with the REGISTRY option because they don't know for
>>> shure if it will work. They are making an educated
> guess.
>>> All computers are different. So It's time to reformat
> and
>>> reload the operating system. Hopefully you can do that.
>>>
>>> Ken
>>>
>>>
>>>
>>>
>>>
>>>
>>>>-----Original Message-----
>>>>everytime i boot my computer, the antispyware detects
>>>>coolwebsearch tryin to install, n i click remove
>>>>everytime, but doesnt seem to be removed. If i can get
>>>>help with removing this, it would be helpful.
>>>>
>>>>Thanks
>>>>.
>>>>
>>
>>
>>.
>>

Ya think....LOL Time to reinstall operating system,
drivers and software. What does Microsoftantispyware
actually look for if not common spyware?

Ken


>-----Original Message-----
>Its possibly a variant.
>--
>
>Andre
>http://spaces.msn.com/members/adacosta
>FAQ for MS AntiSpy
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm
>
><(E-Mail Removed)> wrote in message
>news:140d01c545fe$45180920$(E-Mail Removed)...
>> I've done all that already... not a Newbie
>>
>> Ken
>>
>>>-----Original Message-----
>>>Right click My Computer > Properties > System Restore
>> (tab) > Check "Turn
>>>Off System Restore". Restart the system in safe mode:
>>>Restart in safe mode instructions:
>>>http://www.microsoft.com/resources/documentation/window
s/
>> xp/all/proddocs/en-us/boot_failsafe.mspx
>>>
>>>Open Microsoft Antispyware and choose Scan Options >
>> Full System Scan (check
>>>boxes below) and click Run Scan Now, after the scan is
>> finished, restart and
>>>renable System Restore. Its possible that CWS is
>> restoring itself with
>>>system snap shots.
>>>--
>>>
>>>Andre
>>>http://spaces.msn.com/members/adacosta
>>>FAQ for MS AntiSpy
>> http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm
>>>
>>>"Ken" <(E-Mail Removed)> wrote in
>> message
>>>news:13bf01c545f6$714c14d0$(E-Mail Removed)...
>>>> It use to be CWSHREDDAR was the only program that
would
>>>> get rid of CoolWebsearh (CWS) but now that a big
>> company
>>>> has bought it doesn't work anymore I to have just
>>>> contracted the Hijacker again and have been working
>> for a
>>>> week to remove it. It goes out on the net when you
>> logon
>>>> or restart and downloads all it's nasty little
friends
>> so
>>>> it multiplies. I have tried every spyware program
>>>> available on the market and none of them work even
>> though
>>>> they say they do in bold print. They remove it and
when
>>>> you reboot it's back. Don't waste your money. There
are
>>>> only 2 ways to get rid of it now. Reinstall the
>> operating
>>>> system after erasing all data on your hard drive or
>>>> Download a free program call HIJACKTHIS run a log and
>>>> post it on thier website and after some time they
will
>>>> get back to you and tell you what you need to do to
>> your
>>>> REGISTRY to make the problem go away. I'm not
>> comfortable
>>>> with the REGISTRY option because they don't know for
>>>> shure if it will work. They are making an educated
>> guess.
>>>> All computers are different. So It's time to reformat
>> and
>>>> reload the operating system. Hopefully you can do
that.
>>>>
>>>> Ken
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>>-----Original Message-----
>>>>>everytime i boot my computer, the antispyware detects
>>>>>coolwebsearch tryin to install, n i click remove
>>>>>everytime, but doesnt seem to be removed. If i can
get
>>>>>help with removing this, it would be helpful.
>>>>>
>>>>>Thanks
>>>>>.
>>>>>
>>>
>>>
>>>.
>>>
>
>
>.
>

Have you checked Add/Remove for an uninstall item? Just an idea as alot
of the spyware are now including a method of removal via the Add/Remove
Control Panel. Believe it or not but I have a friend that got bombarded
with spyware. We found that at least 10 of them were able to be removed
via Add/Remove. The remainder we cleaned using a combination of Spybot:
S&D, Adaware, and Microsoft Antispyware.

--
Robert Pendell [385227]
(E-Mail Removed)

<(E-Mail Removed)> wrote in message
news:140d01c545fe$45180920$(E-Mail Removed)...
> I've done all that already... not a Newbie
>
> Ken
>
>>-----Original Message-----
>>Right click My Computer > Properties > System Restore
> (tab) > Check "Turn
>>Off System Restore". Restart the system in safe mode:
>>Restart in safe mode instructions:
>>http://www.microsoft.com/resources/d...ation/windows/
> xp/all/proddocs/en-us/boot_failsafe.mspx
>>
>>Open Microsoft Antispyware and choose Scan Options >
> Full System Scan (check
>>boxes below) and click Run Scan Now, after the scan is
> finished, restart and
>>renable System Restore. Its possible that CWS is
> restoring itself with
>>system snap shots.
>>--
>>
>>Andre
>>http://spaces.msn.com/members/adacosta
>>FAQ for MS AntiSpy
> http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm
>>
>>"Ken" <(E-Mail Removed)> wrote in
> message
>>news:13bf01c545f6$714c14d0$(E-Mail Removed)...
>>> It use to be CWSHREDDAR was the only program that would
>>> get rid of CoolWebsearh (CWS) but now that a big
> company
>>> has bought it doesn't work anymore I to have just
>>> contracted the Hijacker again and have been working
> for a
>>> week to remove it. It goes out on the net when you
> logon
>>> or restart and downloads all it's nasty little friends
> so
>>> it multiplies. I have tried every spyware program
>>> available on the market and none of them work even
> though
>>> they say they do in bold print. They remove it and when
>>> you reboot it's back. Don't waste your money. There are
>>> only 2 ways to get rid of it now. Reinstall the
> operating
>>> system after erasing all data on your hard drive or
>>> Download a free program call HIJACKTHIS run a log and
>>> post it on thier website and after some time they will
>>> get back to you and tell you what you need to do to
> your
>>> REGISTRY to make the problem go away. I'm not
> comfortable
>>> with the REGISTRY option because they don't know for
>>> shure if it will work. They are making an educated
> guess.
>>> All computers are different. So It's time to reformat
> and
>>> reload the operating system. Hopefully you can do that.
>>>
>>> Ken
>>>
>>>
>>>
>>>
>>>
>>>
>>>>-----Original Message-----
>>>>everytime i boot my computer, the antispyware detects
>>>>coolwebsearch tryin to install, n i click remove
>>>>everytime, but doesnt seem to be removed. If i can get
>>>>help with removing this, it would be helpful.
>>>>
>>>>Thanks
>>>>.
>>>>
>>
>>
>>.
>>