CoolWebSearch

  • Thread starter Thread starter Greg Andrew
  • Start date Start date
G

Greg Andrew

Can anyone tell me where to find a utility that will effectively remove the
CoolWebSearch adware? I have downloaded several and none seem to do the
job. This has really stumped me. I am about ready to do a reformat!
 
Webroot's Spy Sweeper is about the best that I know and should do the job
without any problems. Approx $25 at Sam's Club.
 
I have run several of these different utilities and they indicate it has
been removed. When I run a spybot or Ad-aware they indicate the
CoolWebSearch is still there. Any ideas?
 
Greg said:
I have run several of these different utilities and they indicate it has
been removed. When I run a spybot or Ad-aware they indicate the
CoolWebSearch is still there. Any ideas?
Click to expand...

What happens when you try to use AdAware and Spybot to remove them? Have
you scanned in Safe Mode?

Alias
 
Greg said:
I have run several of these different utilities and they indicate it
has been removed. When I run a spybot or Ad-aware they indicate the
CoolWebSearch is still there. Any ideas?
Click to expand...

Yes, but have you specifically run cwshredder? It is designed specifically
to remove CoolWebSearch. Make sure you run it in safe mode and no other
windows are open. Boot into safe mode then Start ==> Run ==>
x:\path\cwshredder.exe where x is the drive and path is the path to the file
e.g. c:\temp\cwshredder.exe. Once you have done this run Adaware and Spybot
again while still in safe mode.

If this doesn't work try the trial version of Ewido www.ewido.com If it
works consider buying the program. It is well worth it.

Kerry
 
I have run cwshredder in safe mode. It finds one and indicates it removes
it. But when I run the Ad-aware, still in safe mode, it still finds it and
cannot delete it. There is always a long dll file name it can't remove it
indicates is associated with the CoolWebSearch.
 
Greg said:
I have run cwshredder in safe mode. It finds one and indicates it removes
it. But when I run the Ad-aware, still in safe mode, it still finds it and
cannot delete it. There is always a long dll file name it can't remove it
indicates is associated with the CoolWebSearch.
Click to expand...

Copy the file name by hand. Go into CMD and navigate to the directory
the file is in and rename it .old. Then delete it. Get out of CMD and
run AdAware again and see if it's still there.

Alias
 
Greg said:
I have run cwshredder in safe mode. It finds one and indicates it
removes it. But when I run the Ad-aware, still in safe mode, it
still finds it and cannot delete it. There is always a long dll file
name it can't remove it indicates is associated with the
CoolWebSearch.
Click to expand...

Try Ewido www.ewido.com

If that doesn't get rid of it try HijackThis and post the results in one of
the forums dedicated to it's use. You can download it as well as other
anti-spyware tools here

http://www.spywareinfo.com/~merijn/downloads.html

A quick tutorial on it's use is here:

http://tomcoyote.com/hjt/

Kerry
 
Greg Andrew said:
Can anyone tell me where to find a utility that will effectively remove
the CoolWebSearch adware? I have downloaded several and none seem to do
the job. This has really stumped me. I am about ready to do a reformat!
Click to expand...

Is it possible that it's coming back via Windows System Restore? Try this:

Right-click on "My Computer", click on "Properties"
Click on the "System Restore" tab
Check the "Turn off System Restore" box
Click on "OK"
Re-boot into safe mode
Run cwshredder
Re-boot, re-scan to see if it worked
Turn System Restore back on

For more info:
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/xpsysrst.mspx

Good luck!
 
Is it possible that it's coming back via Windows System Restore?
Click to expand...

Totally impossible unless the user actually runs System Restore, and
the o.p. did not indicate that this was being done.

Try this:

Right-click on "My Computer", click on "Properties"
Click on the "System Restore" tab
Check the "Turn off System Restore" box
Click on "OK"
Re-boot into safe mode
Run cwshredder
Re-boot, re-scan to see if it worked
Turn System Restore back on
Click to expand...


Never repeat never repeat never turn off System Restore on a system
that is infested with malware of any kind. Doing so could leave you
with a totally unusable system if the malware removal attempts get
botched in some way. An infested but still functional system is
infinitely better than an unusable one.

Items in System Restore are totally encapsulated and cannot possibly
reinfect the computer or spread to others unless and until System
Restore is run to backdate the system to an time when it was infected.

Once the system has been totally cleaned up and is operating
satisfactorily then it may be prudent to clean up System Restore.
However disabling is still not the best way of doing this. A better
method is to first create a new System Restore point and then use the
Advanced options in Disk Cleanup to remove all but the most recent
restore point.

Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2006)
On-Line Help Computer Service
http://onlinehelp.bc.ca

"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

CoolWebSearch 3
coolwebsearch 6
`i 7
Trojan/ Spyware nightmare! 7
Blue text behind icons 1
coolwebsearch hijacker 2
I click on my spyware exe and Windows begins to install Windows Office XP 10
Small url and port utility wanted. 3

Back
Top