| Author | Thread |
|
|
05/11/2004 10:39:21 PM · #1 |
I have a coolwebsearch 'spyware.' It is utterly impossible to remove. It has hijacked the homepage of my IE and will not let go. No, there's no fix as of yet. I have an advanced variant of something that WILL NOT let me delete it. I have tried downloading CWShredder from a different machine, burning it and putting in cd drive. It won't even recognize that there's a file there. Try to go to spybot's homepage and my entire IE page closes.
I'm so utterly sick of this spyvirus that I can't even summon a good rant about it!
I will, don't worry. *sigh*
Anyone had CWS? (old version) or struggling with the new ones?
UGH
M |
|
|
|
05/11/2004 10:44:35 PM · #2 |
I downloaded Spybot Search and Destroy, and it got rid of the spyware on my machine and I haven't had any problems with it. It somehow deletes the programs that have embedded themselves in the registry. I have no clue how it really works, but it does. The website asks if you want to donate to the cause, but it is not required and is a free program. It's a thought, anyway. Hope it helps; that spyware stuff sucks!!!
website...click to download for your platform
|
|
|
|
05/11/2004 10:48:59 PM · #3 |
This won't help him. CoolWebSearch blocks access to the Spybot S&D web site. It also kills the running processes of applications that can remove CWS.
Mavrik, try running in Safe Mode and see if you can run CWSShredder. If that does not work, message back here and we'll go to plan B.
-Terry
|
|
|
|
05/11/2004 10:50:44 PM · #4 |
Sorry; it's one of those tech things that goes right over my head. Good luck!
|
|
|
|
05/11/2004 10:51:24 PM · #5 |
Try downloading from this mirror site
Spybot at download.com
If that doesn't work, PM me, I can mail you the Spybot installer.
Message edited by author 2004-05-11 22:58:03.
|
|
|
|
05/11/2004 10:55:56 PM · #6 |
| spybot is free but don't just look in your registry for spyware or viruses. I have been readin now that they will re-write a dll file for IE and keep changing your start page as well. Also want to remind ppl that they should not be connceted to the internet when checking for viruses or spyware as they can transmit and resend to the last ip (being yours) after/during your search for these things. good luck with you problem. |
|
|
|
05/11/2004 10:56:09 PM · #7 |
Again, no good. If he's been hit with the latest version of CWS it will kill the running process of S&D.
-Terry
|
|
|
|
05/11/2004 10:56:10 PM · #8 |
Spybot does NOT work against most Cool Web Search attacks. CWS has many variants and often loads a hidden file into your system folder so that even after Spybot or AdAware "cleans" it from the registry and fixes the altered settings upon reboot CWS is again reloaded on your system.
Have you tried using CWShredder or HijackThis to see if you can't clean it up through those?
Look for jushed32.exe in your windows directory. This was the file that kept reloading CWS on my computer.
Also go to //www.spywareinfo.com/~merijn/ and download the CWShredder and HijackThis programs. They'll make cleaning a whole lot easier.
EDIT: I hate being a slow typer... look at all the posts that slipped in while I was writing. lol
Message edited by author 2004-05-11 22:57:17. |
|
|
|
05/11/2004 11:02:14 PM · #9 |
Originally posted by TechnoShroom:
Have you tried using CWShredder or HijackThis to see if you can't clean it up through those? |
Originally posted by mavrik:
I have tried downloading CWShredder from a different machine, burning it and putting in cd drive. It won't even recognize that there's a file there. |
|
|
|
|
05/11/2004 11:07:14 PM · #10 |
you have to try a SpySweeper thay help a lot/ or if you use winXP or Win ME try a restor point they work some times o yee and load NOD32 anty virus.
|
|
|
|
05/12/2004 12:15:48 AM · #11 |
That sucks. I hope you figure it out soon. I have no advice to give you on the topic, since you are my IT guy, but I do hope you figure it out soon.
|
|
|
|
05/12/2004 12:19:23 AM · #12 |
If it shows as a process running in the task manager you can kill it there. Take note of the exe process name and edit the registry (if there's an entry for it) and remove the keys.
All I can suggest. I had something similar just not as invasive.
|
|
|
|
05/12/2004 12:25:26 AM · #13 |
Ugh.... I have been struggling with backweblite, it slows everything down all the time....
What have you downloaded or installed or opened from the net, so we can avoid the CWS?
Have you looked it up on Techtv.com?
The Screensavers or Call for help shows, or forums??
Hope you get rid of it, Good Luck....This has lots of info how to get rid of it
Message edited by author 2004-05-12 00:28:01.
|
|
|
|
05/12/2004 12:35:13 AM · #14 |
When I got bombarded with spyware I first tried Adware. It didn't get rid of everything. I think downloaded Spybot and was finally able to get rid of the rest.
Use both Adaware and Spytbot for best results. Both are free and can be found at download.com
Edit: I should also note that once you run them, reboot and run again. If it finds a couple more, get rid of them and reboot. I had to reboot about 3 times but they did get rid of everything.
Message edited by author 2004-05-12 00:36:31.
|
|
|
|
05/12/2004 04:27:40 AM · #15 |
Originally posted by ButterflySis:
When I got bombarded with spyware I first tried Adware. It didn't get rid of everything. I think downloaded Spybot and was finally able to get rid of the rest.
Use both Adaware and Spytbot for best results. Both are free and can be found at download.com
Edit: I should also note that once you run them, reboot and run again. If it finds a couple more, get rid of them and reboot. I had to reboot about 3 times but they did get rid of everything. |
Once again, CoolWebSearch prevents Spybot S&D and AdAware from running.
-Terry
|
|
|
|
05/12/2004 04:36:31 AM · #16 |
Originally posted by ClubJuggle:
Once again, CoolWebSearch prevents Spybot S&D and AdAware from running. |
Sounds like this is basically a virus. Might be worth checking the virus sites, they very often have manual fixes, if none of the automated tools work. |
|
|
|
05/12/2004 05:30:16 AM · #17 |
The latest CWShredder can be found here (if you can't access the spyware.info site).
|
|
|
|
05/12/2004 09:53:23 AM · #18 |
|
|
|
05/12/2004 11:20:43 AM · #19 |
| This is the first I've heard of CoolWebSearch. Where does it come from? e-mail? download? |
|
|
|
05/12/2004 11:30:11 AM · #20 |
thanks for posting this mick, first i have heard of a hosts file and the CWS thingy.
I think one of my neighbors has this CWS thing, she is NOT computer Savy at ALL. she just tells me "something is wrong" and it does not work right and can I fix it.
James
|
|
|
|
05/16/2004 10:37:54 PM · #21 |
Originally posted by TechnoShroom:
Spybot does NOT work against most Cool Web Search attacks. CWS has many variants and often loads a hidden file into your system folder so that even after Spybot or AdAware "cleans" it from the registry and fixes the altered settings upon reboot CWS is again reloaded on your system.
Have you tried using CWShredder or HijackThis to see if you can't clean it up through those?
Look for jushed32.exe in your windows directory. This was the file that kept reloading CWS on my computer.
Also go to //www.spywareinfo.com/~merijn/ and download the CWShredder and HijackThis programs. They'll make cleaning a whole lot easier.
EDIT: I hate being a slow typer... look at all the posts that slipped in while I was writing. lol |
lol cool web search is from looking at porn sites. I get this all the time when people ask me to fix there machine. just remember if you ask someone to fix your machine make sure you don't save porn sites in you favorites and delete all cookies and temp internet file. lmao |
|
|
|
05/16/2004 10:44:36 PM · #22 |
Originally posted by coolhar:
This is the first I've heard of CoolWebSearch. Where does it come from? e-mail? download? |
P2P |
|
Home -
Challenges -
Community -
League -
Photos -
Cameras -
Lenses -
Learn -
Help -
Terms of Use -
Privacy -
Top ^
DPChallenge, and website content and design, Copyright © 2001-2025 Challenging Technologies, LLC.
All digital photo copyrights belong to the photographers and may not be used without permission.
Current Server Time: 08/28/2025 03:19:38 PM EDT.
