coolwebsearch bar

[Pravin]

everytime i boot my computer, the antispyware detects
coolwebsearch tryin to install, n i click remove
everytime, but doesnt seem to be removed. If i can get
help with removing this, it would be helpful.

Thanks

 

[plun]

everytime i boot my computer, the antispyware detects
coolwebsearch tryin to install, n i click remove
everytime, but doesnt seem to be removed. If i can get
help with removing this, it would be helpful.

Hi

Have you done any scans in safe mode ? Do that,
choose fullscan with all options checked.

Also fill your "toolbox" with these tools to make this cleaning
better.

- Download/Install CCleaner, www.ccleaner.com, remove all
temporarily junk

- Download/Install Lavasofts Adaware

http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022-10319876.html?tag=list


All scans then in safe mode, press F8 during reboot.

 

[Andre Da Costa]

CoolWebSearch is a constantly mutating major nuisance. The best tool to
diagnose it is HijackThis, and expert advice. HijackThis shows all possible
traces of software, anything that MIGHT be malware, and lets an expert
identify the bad stuff manually.

HijackThis http://www.tomcoyote.com/hjt/

Create a separate folder for HijackThis, such as C:\HijackThis - copy the
downloaded file there.

Then, run HijackThis ("Scan"). Do NOT make any changes immediately. Save
the HJT Log.

http://forums.spywareinfo.com/index.php?showtopic=227

Finally, have your HJT log interpreted by experts at one or more of the
following security forums (and please post a link to your forum posts,
here):

Aumha: http://forum.aumha.org/index.php

Net-Integration: http://forums.net-integration.net/

Spyware Info: http://forums.spywareinfo.com/

Spyware Warrior: http://spywarewarrior.com/index.php

Tom Coyote: http://forums.tomcoyote.org/

 

[ccrashh]

Have the same issue with YourSiteBar. And check below, there is a thread
for your issue already.

My solution was to finally uninstall MSAS and wait until the next beta.
This false-positive is way too annoying.

 

[Ken]

It use to be CWSHREDDAR was the only program that would
get rid of CoolWebsearh (CWS) but now that a big company
has bought it doesn't work anymore I to have just
contracted the Hijacker again and have been working for a
week to remove it. It goes out on the net when you logon
or restart and downloads all it's nasty little friends so
it multiplies. I have tried every spyware program
available on the market and none of them work even though
they say they do in bold print. They remove it and when
you reboot it's back. Don't waste your money. There are
only 2 ways to get rid of it now. Reinstall the operating
system after erasing all data on your hard drive or
Download a free program call HIJACKTHIS run a log and
post it on thier website and after some time they will
get back to you and tell you what you need to do to your
REGISTRY to make the problem go away. I'm not comfortable
with the REGISTRY option because they don't know for
shure if it will work. They are making an educated guess.
All computers are different. So It's time to reformat and
reload the operating system. Hopefully you can do that.

Ken

 

[Andre Da Costa]

Right click My Computer > Properties > System Restore (tab) > Check "Turn
Off System Restore". Restart the system in safe mode:
Restart in safe mode instructions:
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/boot_failsafe.mspx

Open Microsoft Antispyware and choose Scan Options > Full System Scan (check
boxes below) and click Run Scan Now, after the scan is finished, restart and
renable System Restore. Its possible that CWS is restoring itself with
system snap shots.

 

[Guest]

I've done all that already... not a Newbie

Ken

-----Original Message-----
Right click My Computer > Properties > System Restore (tab) > Check "Turn
Off System Restore". Restart the system in safe mode:
Restart in safe mode instructions:
http://www.microsoft.com/resources/documentation/windows/ xp/all/proddocs/en-us/boot_failsafe.mspx

Open Microsoft Antispyware and choose Scan Options > Full System Scan (check
boxes below) and click Run Scan Now, after the scan is finished, restart and
renable System Restore. Its possible that CWS is restoring itself with
system snap shots.
--

Andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm




.

 

[Andre Da Costa]

Its possibly a variant.

 

[Guest]

Ya think....LOL Time to reinstall operating system,
drivers and software. What does Microsoftantispyware
actually look for if not common spyware?

Ken

 

[Robert Pendell]

Have you checked Add/Remove for an uninstall item? Just an idea as alot
of the spyware are now including a method of removal via the Add/Remove
Control Panel. Believe it or not but I have a friend that got bombarded
with spyware. We found that at least 10 of them were able to be removed
via Add/Remove. The remainder we cleaned using a combination of Spybot:
S&D, Adaware, and Microsoft Antispyware.

 

[Andre Da Costa]

Also check under Start > run > msconfig > Startup tab.
--

Andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

Have you checked Add/Remove for an uninstall item? Just an idea as alot
of the spyware are now including a method of removal via the Add/Remove
Control Panel. Believe it or not but I have a friend that got bombarded
with spyware. We found that at least 10 of them were able to be removed
via Add/Remove. The remainder we cleaned using a combination of Spybot:
S&D, Adaware, and Microsoft Antispyware.

--
Robert Pendell [385227]
(e-mail address removed)

I've done all that already... not a Newbie

Ken

 

[NonSuch]

CWS is hardly common spyware. It's impossible to know what
variant you have on your system without looking at a
HijackThis log. Some of the CWS variants are easily
removed by CWShredder (which does still work). Other
variants may involve a hidden dll or a malignant running
service. Those variants require special handling, as do a
few others.

I suggest you may want to go here:
http://forum.malwareremoval.com/index.php

Click on the "Downloads" button near the top of the page;
download HijackThis and extract it to a folder of its own
(such as C:\HijackThis).

Next, enter the Malware Removal forum and follow the
instructions regarding what to do before posting your HJT
log.

This particular forum, although run by experts in the
anti-malware field, is not busy yet because it's fairly
new. I suggest you take advantage of that condition and
post your log there as soon as possible. (It is on the
ASAP list of recommended sites).

If that forum doesn't suit you, take a look at the ASAP
list of recommended malware removal sites (Alliance of
Security Analysis Professionals) here:
http://asap.maddoktor2.com/