I have a coolwebsearch 'spyware.' It is utterly impossible to remove. It has hijacked the homepage of my IE and will not let go. No, there's no fix as of yet. I have an advanced variant of something that WILL NOT let me delete it. I have tried downloading CWShredder from a different machine, burning it and putting in cd drive. It won't even recognize that there's a file there. Try to go to spybot's homepage and my entire IE page closes.
I'm so utterly sick of this spyvirus that I can't even summon a good rant about it!
I will, don't worry. *sigh*
Anyone had CWS? (old version) or struggling with the new ones?
I downloaded Spybot Search and Destroy, and it got rid of the spyware on my machine and I haven't had any problems with it. It somehow deletes the programs that have embedded themselves in the registry. I have no clue how it really works, but it does. The website asks if you want to donate to the cause, but it is not required and is a free program. It's a thought, anyway. Hope it helps; that spyware stuff sucks!!!
spybot is free but don't just look in your registry for spyware or viruses. I have been readin now that they will re-write a dll file for IE and keep changing your start page as well. Also want to remind ppl that they should not be connceted to the internet when checking for viruses or spyware as they can transmit and resend to the last ip (being yours) after/during your search for these things. good luck with you problem.
Spybot does NOT work against most Cool Web Search attacks. CWS has many variants and often loads a hidden file into your system folder so that even after Spybot or AdAware "cleans" it from the registry and fixes the altered settings upon reboot CWS is again reloaded on your system.
Have you tried using CWShredder or HijackThis to see if you can't clean it up through those?
Look for jushed32.exe in your windows directory. This was the file that kept reloading CWS on my computer.
Also go to //www.spywareinfo.com/~merijn/ and download the CWShredder and HijackThis programs. They'll make cleaning a whole lot easier.
EDIT: I hate being a slow typer... look at all the posts that slipped in while I was writing. lol
If it shows as a process running in the task manager you can kill it there. Take note of the exe process name and edit the registry (if there's an entry for it) and remove the keys.
All I can suggest. I had something similar just not as invasive.
When I got bombarded with spyware I first tried Adware. It didn't get rid of everything. I think downloaded Spybot and was finally able to get rid of the rest.
Use both Adaware and Spytbot for best results. Both are free and can be found at download.com
Edit: I should also note that once you run them, reboot and run again. If it finds a couple more, get rid of them and reboot. I had to reboot about 3 times but they did get rid of everything.
When I got bombarded with spyware I first tried Adware. It didn't get rid of everything. I think downloaded Spybot and was finally able to get rid of the rest.
Use both Adaware and Spytbot for best results. Both are free and can be found at download.com
Edit: I should also note that once you run them, reboot and run again. If it finds a couple more, get rid of them and reboot. I had to reboot about 3 times but they did get rid of everything.
Once again, CoolWebSearch prevents Spybot S&D and AdAware from running.
Once again, CoolWebSearch prevents Spybot S&D and AdAware from running.
Sounds like this is basically a virus. Might be worth checking the virus sites, they very often have manual fixes, if none of the automated tools work.
thanks for posting this mick, first i have heard of a hosts file and the CWS thingy.
I think one of my neighbors has this CWS thing, she is NOT computer Savy at ALL. she just tells me "something is wrong" and it does not work right and can I fix it.
Spybot does NOT work against most Cool Web Search attacks. CWS has many variants and often loads a hidden file into your system folder so that even after Spybot or AdAware "cleans" it from the registry and fixes the altered settings upon reboot CWS is again reloaded on your system.
Have you tried using CWShredder or HijackThis to see if you can't clean it up through those?
Look for jushed32.exe in your windows directory. This was the file that kept reloading CWS on my computer.
Also go to //www.spywareinfo.com/~merijn/ and download the CWShredder and HijackThis programs. They'll make cleaning a whole lot easier.
EDIT: I hate being a slow typer... look at all the posts that slipped in while I was writing. lol
lol cool web search is from looking at porn sites. I get this all the time when people ask me to fix there machine. just remember if you ask someone to fix your machine make sure you don't save porn sites in you favorites and delete all cookies and temp internet file. lmao
