Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

CoolWebSearch browser hijacker


  • Please log in to reply
7 replies to this topic

#1 94vette

94vette

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:35 PM

Posted 20 April 2005 - 06:50 PM

Hi, Everyone

This is my first time here and $5 says I picked the wrong category, but here goes ...

I have Windows ME with the CoolWebSearch hijacker hiding somewhere. I use CWShredder every night, but the little so-and-so keeps coming back.

Is there any way to get rid of this for good. What is it, anyway?

Thanks for your help!

94vette

BC AdBot (Login to Remove)

 


#2 tg1911

tg1911

    Lord Spam Magnet


  • Members
  • 19,274 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:SW Louisiana
  • Local time:07:35 PM

Posted 20 April 2005 - 07:56 PM

I suggest you post a HijackThis log for examination.
They will show you how to disinfect your computer.

Read the pinned post in the HijackThis forum, here
Please read, and follow, all directions carefully.

Then, run a log, and post it in the HJT forum, at this link. Do not, fix anything, yet.
A member, of the HJT Team, will help you out.
It may take a while to get a response, because the HJT Team are very busy. Please, be patient, these people are volunteers. They will help you out, as soon as possible.

NOTE:
Once you have made the post, please, DO NOT make another post in the HJT forum, until it has been responded to by a member of the HJT Team. The first thing they look for, when looking for logs to reply to, is 0 replies. If you make another post, there will be 1 reply. The team member, glancing over the replies, might assume someone is already helping you out, and will not respond. So, just make your post, and let it sit there, until a team member responds. This way you will be taken care of, in the most timely manner.
MOBO: GIGABYTE GA-MA790X-UD4P, CPU: Phenom II X4 955 Deneb BE, HS/F: CoolerMaster V8, RAM: 2 x 1G Kingston HyperX DDR2 800, VGA: ECS GeForce Black GTX 560, PSU: Antec TruePower Modular 750W, Soundcard: Asus Xonar D1, Case: CoolerMaster COSMOS 1000, Storage: Internal - 2 x Seagate 250GB SATA, 2 x WD 1TB SATA; External - Seagate 500GB USB, WD 640GB eSATA, 3 x WD 1TB eSATA

Become a BleepingComputer fan: Facebook

#3 jbravo

jbravo

  • Members
  • 81 posts
  • OFFLINE
  •  
  • Local time:08:35 PM

Posted 21 April 2005 - 07:17 AM

I think the spyware is not properly cleaned by u'r anti spyware. before running any antispywares, start in safe mode and try scanning and cleaning all spywares.

I suggest that even hijack this should be used in safe mode for a complete problem free spyware analysis.

jbravo

#4 badkarma9999

badkarma9999

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:08:35 PM

Posted 23 April 2005 - 10:23 PM

there used to be a program n maybe still is that is made to just get rid of coolweb n all its aliass,i cant remember the name but u could try a google search for coolweb removal.

#5 Gumdrop

Gumdrop

  • Members
  • 36 posts
  • OFFLINE
  •  
  • Local time:07:35 PM

Posted 29 April 2005 - 03:20 AM

I don't know if it's okay to post this as I'm obviously new here, but I've had some problems the past week and have been reading a lot at the AVG forum and there is a post there by a moderator which tells you how to clean an infected computer. It mentions CW Shredder and CoolWebSearch.

Maybe it will help someone here?

http://forum.grisoft.cz/freeforum/read.php?4,27725,backpage=

If I'm overstepping any boundaries here, I surely apologise!!


. )) -::-
. .))
((. . -::-Kris
-::- ((.*


#6 Herk

Herk

  • Members
  • 1,609 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:S.E. Idaho, USA
  • Local time:09:35 PM

Posted 29 April 2005 - 10:08 AM

There are a variety of Cool Web Search infections. Some of them can be cured by simply using tools such as CW Shredder. But some of them must be repaired using difficult manual processes - using search tools or file-killing tools and these methods are not easy to use. That is why a Hijackthis! log is recommended. The latest Cool Web variants are dastardly and damaging and often repairs must also be made to the infected system. So far as I know, there are no automatic programs to fix these more difficult infections.

#7 94vette

94vette
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:35 PM

Posted 30 April 2005 - 02:27 PM

:thumbsup:

Thanks, everyone, for your help, your great suggestions! I'll see about the Hijackthis business and hope it's not too techy. :flowers: Hopefully my little critter is NOT of the dastardly type and I'll be able to understand and follow removal instructions.

Thanks, again! This is a great community! :trumpet:

94vette

#8 Crusty

Crusty

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:08:35 PM

Posted 01 May 2005 - 12:41 PM

You need CoolWebShredder.
http://www.snapfiles.com/get/coolwebshredder.html
CoolWebSearch is constantly changed to avoid removal and needed a stand alone program to remove it.
I imagine the folks that make CoolWebShredder often download the CoolWebSearch spyware and use a program that tracks the installation (such as inctrl http://www.pcmag.com/article2/0,4149,9882,00.asp ) to update their software's ability to remove it.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users