Trend Micro CWShredder is the premier tool to find and remove traces of CoolWebSearch - the name for a wide range of insidious browser hijackers from your PC.
CWShredder is a free and small utility for removing CoolWebSearch (aka CoolWwwSearch, White-Pages.ws, YouFindAll and many more other names).
The CoolWebSearch Chronicles detail the variants of the browser hijacker known as CoolWebSearch (CWS). CoolWebSearch is known to be one of the most difficult spyware infections to detect and remove.
CoolWebSearch has evolved as a series of 'variants', each somewhat different than its predecessors, with the later variants significantly more complex to detect and remove.
It is believed that the reason why new variants of CoolWebSearch are regularly released is to avoid or defeat attempts to remove it from a computer which it has infected.
CWS is a robust infection that exhibits robust intelligence, technical prowess and a determination to survive removal attempts. CWS wants to live.
The difficulty of removing CWS from a user's system is significant. In the early variants, CWS was slightly tricky to remove, but it could be done, carefully, by a knowledgeable Windows user.
However, CWS has stepped up the battle and recent variants are virtually impossible to remove manually. Some CWS variants even use methods of hiding and running themselves that had never been used before in any other spyware strains.
The chronological order in which the CWS variants appeared is detailed here, along with the approximate dates when they appeared online.
However, since the programmers of CWS have released over two dozen versions of their hijacker in such a short time, and are crunching out new ones practically every week, this document might be out of date at times.
InterMute's CWShredder tool to remove CoolWebSearch is updated regularly when new variants emerge.
This tool will find and destroy all traces of the CoolWebSearch (CWS) hijacker on your system. This includes:
· Redirections to CoolWebSearch related pages
· Redirections when mistyping URLs
· Redirections when visiting Google
· Enormous IE slowdowns when typing
· IE start page/search page changing on reboot
· Sites in the IE Trusted Zone you didn't add
· Popups in Google and Yahoo when searching
· Errors at startup mentioning WIN.INI or IEDLL.EXE
· Unable to change or see certain items in IE Options
· Unable to access IE Options at all
There are [7] new variants supported in this version. The new variants include:
1. CWS.SnugWeb
2. CWS.CoolSearchA
3. CWS.EZSearch
4. CWS.CraftSearch
5. CWS.FindOnline
6. CWS.ShopNav.D
7. CWS.WebSearch
NOTE: There is a variant of the Coolwebsearch trojan spreading that closes several anti-spyware apps when you try to open them. If this is happening to you, download PepiMK's CoolWWWSearch.SmartKiller removal tool first and run it.
After it does its job, CWShredder and HijackThis will run properly (as well Spybot S&D, Ad-aware and several anti-spyware forums).
