Re: Popup Ads in IE6 when using Google

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

I stand by my original post, and certainly not in any mean spirited way,
either. CWS can be - and usually is - notoriously difficult to remove; and
even when it is removed, the process of removal can substantially compromise
a system. Clean install is often the better solution, unless the user has a
known-good disk image.

I emphasized the word 'reputable' because there are plenty of scam web sites
claiming to remove CWS that only stick more malware on the computer. I did
not suggest that the web site you posted is such a scam.

Therefore, a user has "everything to gain and nothing to lose" by attempting
removal, but must understand that clean install could very likely be the
ultimate outcome.

Personally, I image my system partition daily (and sometimes more often) so
if I were to become 'infected' I wouldn't even bother with removal, since I
can restore a recent, known-good image in under 5 minutes and be back on my
way.

--
Ted Zieglar
"You can do it if you try."

"Jan Il" <abuse@xxxxxxxxxxxxx> wrote in message
news:%23j813eEbFHA.228@xxxxxxxxxxxxxxxxxxxxxxx
> "Ted Zieglar" <teddyz@xxxxxxxxxxx> wrote in message
> news:O5w%232uCbFHA.2520@xxxxxxxxxxxxxxxxxxxxxxx
> > CoolWebSearch is among the most intransigent of all spyware, and
extremely
> > difficult to remove. You're almost certainly looking at wiping your hard
> > disk and starting from scratch. You may as well search the web for CWS
> > removal tools (from reputable organizations) since you have everything
to
> > gain and nothing to lose.
>
> If you have read the information I provided for Martin in my earlier post,
> Dealing with Unwanted Spyware and Parasites:
> http://mvps.org/winhelp2002/unwanted.htm
> you would have seen that there is a very large section that covers the
> Coolwebsearch and it's variety of variants, which is from a very
"reputable
> organization" of experts in this field. Also, it is not true at all that
he
> will have to wipe his hard drive to get rid of the variant(s), even if
they
> are the latest and greatest. That is why he was instructed to post his
> HiJackThis log at the forum, so that the experts there who are specialists
> with scumware detection and removal and know the necessary procedures can
> help him get rid of it without such unnecessary measures.
>
> Jan :)
> MS MVP - IE/OE
> Smiles are meant to be shared,
> that's why they're so contagious.
>
> Replies are posted only to the newsgroup for the benefit or other readers.
> How to make a good newsgroup post:
> http://www.dts-l.org/goodpost.htm
>
>
>
>
>
> > --
> > Ted Zieglar
> > "You can do it if you try."
> >
> > "Martin Lewis" <lewism@xxxxxxxxxxx> wrote in message
> > news:OYPXTPCbFHA.796@xxxxxxxxxxxxxxxxxxxxxxx
> >> If you're still following this,I followed all steps but computer still
> >> infected. General slowdown including Windows Explorer and pop-ups in
> >> IE6 when going to Google.
> >>
> >> Ad-Aware shows CoolWebSearch. Of course I can delete the entries but
> >> they return on reboot.
> >>
> >> Posted to forum Tues AM but no response yet.
> >>
> >
http://forum.aumha.org/viewtopic.php?t=14069&sid=f860079d1a20363f7d72a9d2dd3811cf
> >>
> >> Jan Il wrote:
> >>
> >> > Hi Martin :-)
> >> >
> >> > Pleasepost your log tothe following forum to allow the experts there
to
> >> > analyze it for you.
> >> > AumHa HiJackThis Forum
> >> > http://forum.aumha.org/viewforum.php?f=30
> >> >
> >> >> my add/remove shows: "shoppingwizard", "offeroptimizer", "casprog"
> >> >
> >> >
> >> > Did you uninstall them?
> >> >
> >> >>
> >> >> booted in safemode ran adaware & spybot.
> >> >>
> >> >> Ad-aware shows coolwebsearch (3 objects) and mru list (6 objects)
> >> >
> >> >
> >> > Did you run the CW Shredder in Safe Mode to remove them?
> >> >
> >> >>
> >> >>
> >> >> Hijack this:
> >> >
> >> >
> >> > <<log snipped at it will be posted on forum for analysis:>>
> >> >
> >> >>
> >> >> next step will be to go to one of the foums.
> >> >
> >> >
> >> > Very good! Please post the link to the forum where you post your log
> >> > back here so that we can follow the progress there. :-)
> >> >
> >> > You're doing very well! Please be aware that the folks on the forums
> >> > are a little busy, so please be patient. Be sure to tell them that I
> >> > sent you, briefly explain your problem and what you have done thus
far,
> >> > and follow all preliminary instructions before posting your log.
> >> >
> >> >
> >> > Jan :)
> >> > MS MVP - IE/OE
> >> > Smiles are meant to be shared,
> >> > that's why they're so contagious.
> >> >
> >> > Replies are posted only to the newsgroup for the benefit or other
> > readers.
> >> > How to make a good newsgroup post:
> >> > http://www.dts-l.org/goodpost.htm
> >> >
> >> >
> >> >>
> >> >> Jan Il wrote:
> >> >>
> >> >>> Hi Martin :-)
> >> >>>
> >> >>> Most likely you have scumware on your system causing the problem.
> >> >>> Follow
> >> >>> the information here to clean your system:
> >> >>>
> >> >>> Dealing with Unwanted Spyware and Parasites:
> >> >>> http://mvps.org/winhelp2002/unwanted.htm
> >> >>>
> >> >>> If this does not resolve the problem post back here and we'll take
> >> >>> further
> >> >>> steps.
> >> >>>
> >> >>> Hope this helps :-)
> >> >>>
> >> >>> Jan :)
> >> >>> MS MVP - IE/OE
> >> >>> Smiles are meant to be shared,
> >> >>> that's why they're so contagious.
> >> >>>
> >> >>> Replies are posted only to the newsgroup for the benefit or other
> >> >>> readers.
> >> >>> How to make a good newsgroup post:
> >> >>> http://www.dts-l.org/goodpost.htm
> >> >>>
> >> >>> > Just started getting Pop-up ads in IE6 relating to search terms
> >> >>> when > using
> >> >>> > Google. This doesn't happen using other search engines in IE6 or
> >> >>> going > to
> >> >>> > Google when using Netscape or Mozilla.
> >> >>> >
> >> >>
> >> >>
> >> >> --
> >> >> Martin Lewis
> >> >> Media Development Specialist
> >> >> Onondaga Community College
> >> >> Syracuse, NY
> >> >> www.sunyocc.edu/~lewism
> >> >> lewism@xxxxxxxxxxx
> >> >> mlewis@xxxxxxxxxxxx
> >> >>
> >> >>
> >> >
> >>
> >
> >
>


.

Relevant Pages

  • Re: OT: Computer help!!
    ... I run Vista Ultimate in a VMware virtual machine so I can still ... compatibility window and launched it without problems. ... OK, it looks like CoolWebSearch isn't as benign as I thought it was, ... I had the CWS thing ages ago. ...
    (alt.guitar)
  • (OT) Spyware - CoolWebSearch
    ... I received the following link from a computer security-related newsletter ... components of CoolWebSearch) to collect a massive amount of personal ... CWS can be very difficult to remove from a system. ... There's a CWS detector/cleaner called CWShredder that is frequently ...
    (alt.marketing.online.ebay)
  • Re: CWS = Crummy Windows Security
    ... >CWS, CoolWebSearch, is a particularly nasty incarnation of ad-ware. ... delivering the message to this intended recipient, ... Nufarm Americas Inc. and its affiliated companies. ...
    (NT-Bugtraq)
  • Re: OT: Computer help!!
    ... I run Vista Ultimate in a VMware virtual machine so I can still ... compatibility window and launched it without problems. ... it looks like CoolWebSearch isn't as benign as I thought it ... I had the CWS thing ages ago. ...
    (alt.guitar)