:eek:

Dani AI

Generated

The Computerworld item linked by and the follow-ups from and show this is a classic CoolWebSearch (CWS) situation: many variants, browser hijacks and persistent components that a single scan often will not fully remove. A layered, methodical cleanup is required rather than hoping one product will fix it.

  • Work offline first: unplug the network to stop further downloads or redirects.
  • Boot into Safe Mode (standard Safe Mode, or Safe Mode with Networking only if a trusted update is required).
  • Back up important data and export the registry before making changes. Create a System Restore point if available.
  • Identify and terminate suspicious processes (Task Manager or Process Explorer), but note process names and locations before deletion.
  • Run multiple tools in sequence: an up-to-date antivirus, then anti-spyware scanners, then specialized tools aimed at CoolWebSearch variants (community tools like CWShredder and a current HijackThis run for a detailed log are commonly used). Repeat full-system scans after each cleanup pass.
  • Inspect startup entries and services (msconfig or Autoruns) and disable unknown items; check browser helper objects/add-ons and remove unfamiliar toolbars or ActiveX controls.
  • Examine the hosts file (Windows: C:\Windows\System32\drivers\etc\hosts) for redirects and clear unexpected lines; clear Temp and browser caches and reset home/search pages.
  • If the infection persists, run a bootable/offline rescue scanner (scan outside the running OS) or prepare for a clean OS reinstall after a verified backup.

Cautions: always export the registry and keep file backups before manual edits; avoid deleting things based only on a filename. HijackThis logs contain sensitive paths — sanitize logs before posting publicly. Given ’s note that several programs already failed, an offline rescue scan or clean reinstall is often the practical final step when persistence mechanisms defeat repeated removals.

Recommended Answers

All 4 Replies

That's not so good.....very alarming, what's the best spyware/antivirus to use?

Like your SIG

a-hem, where did you get that idea from;)

Where did you get your idea from? :D.

That's not so good.....very alarming, what's the best spyware/antivirus to use?

Good Question!!! I have Cool Web Search right now and am trying to get rid of it. I have already used several programs without much success of getting it removed.

- Mr Cuzac

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.