CoolWebSearch Removal Tool

KAOSInc · Aug 15, 2005

I couldn't reply to http://forums.majorgeeks.com/showthread.php?t=69834 as apparently I don't have the privilege to!

CoolWebSearch Removal Tool: CWShredder

CWShredder description

A small utility for removing CoolWebSearch (aka CoolWwwSearch, YouFindAll, White-Pages.ws and a dozen other names).

The CoolWebSearch Chronicles detail the variants of the browser hijacker known as CoolWebSearch (CWS). CoolWebSearch is known to be one of the most difficult spyware infections to detect and remove.

This tool will find and destroy all traces of the CoolWebSearch (CWS) hijacker on your system. This includes:

· Redirections to CoolWebSearch related pages
· Redirections when mistyping URLs
· Redirections when visiting Google
· Enormous IE slowdowns when typing
· IE start page/search page changing on reboot
· Sites in the IE Trusted Zone you didn't add
· Popups in Google and Yahoo when searching
· Errors at startup mentioning WIN.INI or IEDLL.EXE
· Unable to change or see certain items in IE Options
· Unable to access IE Options at all

NOTE: There is a variant of the Coolwebsearch trojan spreading that closes several anti-spyware apps when you try to open them. If this is happening to you, download PepiMK's CoolWWWSearch.SmartKiller@ http://download.softpedia.com/software/antivirus/delcwssk.zip removal tool first and run it.

Download CWShredder & for more information @ http://www.softpedia.com/get/Internet/Popup-Ad-Spyware-Blockers/CWShredder.shtml

Edit: I actually thought that I had found this tool @ MajorGeeks, but i can't seem to source it!

KAOSInc · Aug 15, 2005

Couldn't edit my post but I did eventually find where it was located at MajorGeeks http://majorgeeks.com/CWShredder_Last_Merijn_Version_d4086.html

chaslang · Aug 15, 2005

CWShredder will not fix that infection. Please do not try to offer advice on fixing other threads by starting your own thread with fixes. The reason you cannot respond to other threads is by design. Only people who have been approved to help fight malware can respond to threads.

Also note the CWShredder is available here on MG's along with many other tools and is part of our default standard cleanup process which is always the first thing the users must run. So it has already been run too.

KAOSInc · Aug 16, 2005

daemonchild said:

Okay, I read the tutorial after I posted...was in a rush (sorry about that)...would a system restore fix the problem?

i.e. Instead of running through all of those steps. This is a work computer and time is an issue.
Click to expand...

I read that and thought that they may have missed the programme CWShredder.

What is Smartsearch.ws?

Smartsearch.ws is a website search engine with lots of search results for things like debt consolidation, refinancing, casinos, and more related searches generally seen in spam emails. Most searches appear to be affiliate links that make the owner of the site money through clickthroughs. It has a "search the web" option that doesnt appear to care what you type in the box, it simply shows another page of results from keywords that the site has in a database. It takes over as your start page and appears to be a variant of the CoolWebSearch homepage hijacker as well.

How do I Remove Smartsearch.ws?

Since Smartsearch.ws appears to be a variant of CoolWebSearch, the easiest way to regain control of your system would be to download and run a program called CWShredder, created by Merijn of Spywareinfo.com. Merijn has an entire page(http://www.spywareinfo.com/~merijn/cwschronicles.html) devoted to CoolWebSearch and its many variants.
Click to expand...

Oh I see, it's Smartsearch.M and not Smartsearch.ws!
And okay, I'm not as smart as you! But I'm sure someone out there would have easier steps to fix something occasionally! Something that you may have even overlooked!

chaslang · Aug 16, 2005

There are more than 160 forms of CWS infections. CWShredder does not fix many of them. Neither do most other tools. Some of the ones they do not fix are the typical ones seen here in HijackThis logs after running the cleaning procedures. Like:

- se.dll type problems
- most of the many forms of HSA hijackers (aka "Only The Best)
- most of the many forms of about:blank hijackers

And if you look at the thread now, you will see the problem is now fixed using the tools that I do know about. Do I know about all tools.....of course not. But I spend a lot more time doing this then most people and I pretty much stay on top of the easiest ways to fix problems. When no special tools exist, we use many procedures.

Log in or Sign up

CoolWebSearch Removal Tool

KAOSInc Private E-2

KAOSInc Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

KAOSInc Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member