Google Answers Logo
View Question
 
Q: Removing Coolsearch from my browser ( Answered,   0 Comments )
Question  
Subject: Removing Coolsearch from my browser
Category: Computers > Security
Asked by: uncledavey-ga
List Price: $20.00
Posted: 21 Jan 2004 08:34 PST
Expires: 20 Feb 2004 08:34 PST
Question ID: 298739
When I search via the address bar, it goes to "coolsearch" How can I
get rid of this?
Answer  
Subject: Re: Removing Coolsearch from my browser
Answered By: bobbie7-ga on 21 Jan 2004 09:22 PST
 
Hello uncledavey,


?When I search via the address bar, it goes to "coolsearch" How can I
get rid of this??


CoolWebSearch is part of a new strain of trojans that have recently
been identified that all have one thing in common: they install
through the ByteVerify exploit in the MS Java VM and change the IE
homepage, search page, search bar, etc.

Here is  an article which details the variants of the browser hijacker
known as CoolWebSearch (CWS).
http://www.spywareinfo.com/~merijn/cwschronicles.html


----------
CWShredder
----------

CWShredder is a  program dedicated to removing CoolWebSearch. It can
be downloaded in several forms:


Normal form, will work for most people: 
http://www.merijn.org/files/CWShredder.exe
  

If you get a message saying 'A required dll, MSVBVM60.DLL, was not
found', install this first:
Visual Basic 6 runtime libraries from Microsoft  
http://download.microsoft.com/download/vb60pro/Redist/sp5/WIN98Me/EN-US/vbrun60sp5.exe


If you can't or won't download bare executables for some reason, try
this link to the zipped version:
Zipped version of CWShredder  
http://www.merijn.org/files/cwshredder.zip


If you get a virus warning for W32/Generic.worm!p2p, try this link instead: 
Unpacked version of CWShredder 
http://www.merijn.org/files/cwshredder_u.zip


This removal tool will be updated for any new variants of
CoolWebSearch, as well as new affiliates that are sighted. It can
remove all of the variants mentioned above.

Note that CWShredder is update very often. If you have a copy that's
more than a week old, check for an update.
http://www.merijn.org/cwschronicles.html#cwshredder


You may have to run Cool Web Shredder 2 times to eliminate the problem.


?This thing solved a problem that adaware, spybot search and destroy
could not fix, I had a trojan that would set my home page to
www.hugesearch.net and I even went into the regedit several times and
searched for it and removed it, then I would go into the control panel
and delete cookies, temp internet files and clear history and set my
home page to www.msn.com and close it all out and open IE and it would
work fine but after a reboot it did it again. After running this thing
called Cool Web Shredder about 2 times my problem was gone.?

Spyblocker Forum
http://spyblocker-software.com/IPB/index.php?s=d6355d2646582be51e1940b87be8498b&showtopic=548&st=0&#entry2421


From Annoyances.org - Cool-search variant

?Download cwshredder to your desktop. I use the unzipped version. Note
the message about the msvbvm60.dll patch in case you need it. Go
offline. Close all running programs by pressing ctrl,alt,delete and
end task on everything except explorer and systray. Some items will
take more than one attempt to close. Then run cwshredder.?
http://www.annoyances.org/exec/forum/winme/t1073188948


From Computing.net:

?The person responsible for this goes by the name Leos Rousek. I
e-mailed him asking how to remove cool-search.net and he replied as
follows: please use CWShredder. (..)?I have been able to get my
homepage back by using the CWShredder tool. It was great.?
http://www.computing.net/windows95/wwwboard/forum/153358.html



From Computercops.biz:

?Looks like you have the same problem as I had. The cool-search page
always loaded in IE after power on/off. (..) Download cwshredder.
Worked great for me.?
http://www.computercops.biz/postt12530.html



Search Criteria:
how to get rid of cool search
cool search hijack

I hope you find this helpful! If anything is unclear with my answer,
please ask for clarification.


Best regards,
Bobbie7-ga
Comments  
There are no comments at this time.

Important Disclaimer: Answers and comments provided on Google Answers are general information, and are not intended to substitute for informed professional medical, psychiatric, psychological, tax, legal, investment, accounting, or other professional advice. Google does not endorse, and expressly disclaims liability for any product, manufacturer, distributor, service or service provider mentioned or any opinion expressed in answers or comments. Please read carefully the Google Answers Terms of Service.

If you feel that you have found inappropriate content, please let us know by emailing us at answers-support@google.com with the question ID listed above. Thank you.
Search Google Answers for
Google Answers  


Google Home - Answers FAQ - Terms of Service - Privacy Policy