Malware Software

[Newsgroup]

On my system I keep getting this 'malware' which I just can not get out. I
use ADware v6.0, which detects and removes the software, but when the PC is
rebooted, the same software/malware appears. The only info that I can
provide is the logfile of Adware (below).

PS: I am not very good at editing the registry, so if possible, provide some
help that may not require me to go into the registry!

Someone said the problem was with some *.dll file in my PC, which allows the
malware to be placed in my IE, even though Adware does remove it (I think)
when it detects it.

Thanks in advance.

Started registry scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

CoolWebSearch Object recognized!
Type : RegValue
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : SOFTWARE\Microsoft\Internet Explorer\Main
Value : HOMEOldSP


CoolWebSearch Object recognized!
Type : RegValue
Data :
Rootkey : HKEY_CURRENT_USER
Object : SOFTWARE\Microsoft\Internet Explorer\Main
Value : HOMEOldSP


Registry scan result :
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 2
Objects found so far: 2

 

[Jim Macklin]

Try SpyBot Search and Destroy from www.safer-networking.org

Also do a Google for "remove cool web search" [use the
quotes]


| On my system I keep getting this 'malware' which I just
can not get out. I
| use ADware v6.0, which detects and removes the software,
but when the PC is
| rebooted, the same software/malware appears. The only
info that I can
| provide is the logfile of Adware (below).
|
| PS: I am not very good at editing the registry, so if
possible, provide some
| help that may not require me to go into the registry!
|
| Someone said the problem was with some *.dll file in my
PC, which allows the
| malware to be placed in my IE, even though Adware does
remove it (I think)
| when it detects it.
|
| Thanks in advance.
|
| Started registry scan
| ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
|
| CoolWebSearch Object recognized!
| Type : RegValue
| Data :
| Rootkey : HKEY_LOCAL_MACHINE
| Object : SOFTWARE\Microsoft\Internet
Explorer\Main
| Value : HOMEOldSP
|
|
| CoolWebSearch Object recognized!
| Type : RegValue
| Data :
| Rootkey : HKEY_CURRENT_USER
| Object : SOFTWARE\Microsoft\Internet
Explorer\Main
| Value : HOMEOldSP
|
|
| Registry scan result :
| ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
| New objects : 2
| Objects found so far: 2
|
|

 

[Ramesh [MVP]]

Get CWShredder which specializes in removing CoolWebSearch variants. Close all browser windows before scanning.

* CoolWebSearch Shredder : [Link courtesy of Siljaline]
http://www.wilderssecurity.com/attachments/cwshredder1521.zip
or
www.majorgeeks.com keyword [CWShredder]

Download Spybot S&D and scan the system:
Spybot Search & Destroy: http://www.safer-networking.org/

--
Ramesh - Microsoft MVP
www.mvps.org/sramesh2k
----------------------------------------
Free Online Virus Scanners and Security Tests:
http://www.mvps.org/sramesh2k/Scanners.htm
----------------------------------------


On my system I keep getting this 'malware' which I just can not get out. I
use ADware v6.0, which detects and removes the software, but when the PC is
rebooted, the same software/malware appears. The only info that I can
provide is the logfile of Adware (below).

PS: I am not very good at editing the registry, so if possible, provide some
help that may not require me to go into the registry!

Someone said the problem was with some *.dll file in my PC, which allows the
malware to be placed in my IE, even though Adware does remove it (I think)
when it detects it.

Thanks in advance.

Started registry scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

CoolWebSearch Object recognized!
Type : RegValue
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : SOFTWARE\Microsoft\Internet Explorer\Main
Value : HOMEOldSP


CoolWebSearch Object recognized!
Type : RegValue
Data :
Rootkey : HKEY_CURRENT_USER
Object : SOFTWARE\Microsoft\Internet Explorer\Main
Value : HOMEOldSP


Registry scan result :
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 2
Objects found so far: 2