CoolWebSearch - XXXToolBar

[Jason]

I have been hijacked by CoolWebSearch and XXXToolBar.

In IE 6 when I click search on google.com I get a new
window which opens Cool Web Search. I can close it, but it
reloads three times and then prompts me to install
XXXToolBar. Google does open up in another window. I use
WinME.

Now I have run the latest update of Ad-Aware and gotten
rid of all spyware it found on the PC. This one is still
there.

I have run BHOCaptor, it finds NO BHO's at all.

I have downloaded and ran CoolWebShredder and it found
nothing. This program was specificly supposed to take care
of this problem.
http://www.spywareinfo.com/~merijn/files/beta/cwshredder.zi
p

I have searched the registry for anything remotely close
to this and I cannot find anything.

All assistance is greatly appreciated. I am sure that I am
not the only one with this issue.
Any Help is appreciated!

 

[YK]

I have been hijacked by CoolWebSearch and XXXToolBar.

In IE 6 when I click search on google.com I get a new
window which opens Cool Web Search. I can close it, but it
reloads three times and then prompts me to install
XXXToolBar. Google does open up in another window. I use
WinME.

Now I have run the latest update of Ad-Aware and gotten
rid of all spyware it found on the PC. This one is still
there.

I have run BHOCaptor, it finds NO BHO's at all.

I have downloaded and ran CoolWebShredder and it found
nothing. This program was specificly supposed to take care
of this problem.
http://www.spywareinfo.com/~merijn/files/beta/cwshredder.zi
p

I have searched the registry for anything remotely close
to this and I cannot find anything.

All assistance is greatly appreciated. I am sure that I am
not the only one with this issue.
Any Help is appreciated!

The ba$tards keep morphing to block detection.

Try using:
SpywareBlaster to stop these nasties.
http://www.javacoolsoftware.com/spywareblaster.html
Update the reference file through the online update function.
Enough is Enough You will have to put some sites into the Trusted Zone.
i.e. MS Windows Update
http://www.staff.uiuc.edu/~ehowes/resource6.htm Actually the whole site is
great for understanding security.

A good HOSTS file:
http://www.mvps.org/winhelp2002/hosts.htm <== minimal
http://asp.flaaten.dk/proxo/forum.asp?FORUM_ID=20 <== discussion and the
best HOSTS file

 

[siljaline]

I have been hijacked by CoolWebSearch and XXXToolBar.

In IE 6 when I click search on google.com I get a new
window which opens Cool Web Search. I can close it, but it
reloads three times and then prompts me to install
XXXToolBar. Google does open up in another window. I use
WinME.

Now I have run the latest update of Ad-Aware and gotten
rid of all spyware it found on the PC. This one is still
there.

I have run BHOCaptor, it finds NO BHO's at all.

I have downloaded and ran CoolWebShredder and it found
nothing. This program was specificly supposed to take care
of this problem.
http://www.spywareinfo.com/~merijn/files/beta/cwshredder.zi
p

I have searched the registry for anything remotely close
to this and I cannot find anything.

All assistance is greatly appreciated. I am sure that I am
not the only one with this issue.
Any Help is appreciated!

Lavasoft's Ad-aware now fully detects this pest.
http://ftp.pcworld.com/pub/new/privacy___security/aaw6181.exe
Lavasoft/Ad-aware home: http://www.lavasoftusa.com

I see that you ran the Beta CWS shredder, if no joy with Ad-aware, use the
latest release of CWS shredder:
http://www.spywareinfo.com/~merijn/files/cwshredder.zip

HTH



--
siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_

 

[Jone Doe]

http://www.webattack.com/get/cwshredder.shtml

try the download again.

 

[TonyKlein]

The latest version of Coolwwwsearch also hacks the Registry LSP settings.
CWShredder hasn'r been updated to deal with this yet.

Please do the following:
Go to http://www.tomcoyote.org/hjt/ , and download Hijack This.

Unzip, doubleclick HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, and save the log somewhere.

NOTE: Most of what Hijack This lists will be harmless or even required, so do NOT fix anything yet.

Next, go to http://www.spywareinfo.com/forums/

Sign in, go to the Browser Hijacking/Spyware Removal section, press "new topic", explain your
problem, and copy and
paste the contents of the Hijack This log into your new message. You'll get expert assistance in
dealing with your problem.
--

Cheers, Tony

NOTE: Please reply to the group, and not to me personally.
E-mail address is void.

 

[siljaline]

The latest version of Coolwwwsearch also hacks the Registry LSP settings.
CWShredder hasn'r been updated to deal with this yet.

Ooops - Merijn is a baaad boy


--
siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_