Wilders Security Forums  

Go Back   Wilders Security Forums > Security Products > other anti-malware software
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old July 12th, 2003, 05:28 PM
Pieter_Arntz's Avatar
Pieter_Arntz Pieter_Arntz is offline
Spyware Veteran
 
Join Date: Apr 2002
Location: Netherlands
Posts: 12,718
Default CoolWebSearch removal tool

Written by Merijn (creator of HijackThis):
http://www.spywareinfoforum.com/~merijn/files/beta/cwshredder.zip

Regards,

Pieter
__________________
Regards,

Pieter
Itīs nice to be important, but itīs more important to be nice.

It's human to make mistakes. It's even more so to blame the computer for it.
  #2  
Old July 13th, 2003, 04:53 AM
Pieter_Arntz's Avatar
Pieter_Arntz Pieter_Arntz is offline
Spyware Veteran
 
Join Date: Apr 2002
Location: Netherlands
Posts: 12,718
Default Re:CoolWebSearch removal tool

New URL: http://www.spywareinfoforum.com/~mer...cwshredder.zip

People that use a cascading style sheet of their own should make a backup.

Regards,

Pieter
__________________
Regards,

Pieter
Itīs nice to be important, but itīs more important to be nice.

It's human to make mistakes. It's even more so to blame the computer for it.
  #3  
Old July 13th, 2003, 11:06 AM
spy1's Avatar
spy1 spy1 is offline
Massive Poster
 
Join Date: Dec 2002
Location: Clover, SC
Posts: 3,130
Default Re:CoolWebSearch removal tool

?

Not Found
The requested URL /~merijn/files/beta/cwshredder.zip was not found on this server.


--------------------------------------------------------------------------------

Apache/1.3.27 Server at www.spywareinfoforum.com Port 80
__________________
"When fascism comes to America it will come wrapped in the flag and carrying a cross." Sinclair Lewis
  #4  
Old July 13th, 2003, 11:52 AM
Pieter_Arntz's Avatar
Pieter_Arntz Pieter_Arntz is offline
Spyware Veteran
 
Join Date: Apr 2002
Location: Netherlands
Posts: 12,718
Default Re:CoolWebSearch removal tool

Hi Pete,

Thatīs why I posted the second link, when it was no longer a beta.

Regards,

Pieter
__________________
Regards,

Pieter
Itīs nice to be important, but itīs more important to be nice.

It's human to make mistakes. It's even more so to blame the computer for it.
  #5  
Old July 13th, 2003, 12:45 PM
spy1's Avatar
spy1 spy1 is offline
Massive Poster
 
Join Date: Dec 2002
Location: Clover, SC
Posts: 3,130
Default Re:CoolWebSearch removal tool

Heck, I never even saw the second link, Pieter. Thanks. Pete
__________________
"When fascism comes to America it will come wrapped in the flag and carrying a cross." Sinclair Lewis
  #6  
Old July 30th, 2003, 02:42 PM
Pieter_Arntz's Avatar
Pieter_Arntz Pieter_Arntz is offline
Spyware Veteran
 
Join Date: Apr 2002
Location: Netherlands
Posts: 12,718
Default Re:CoolWebSearch removal tool

There has been an update:

Quote:
CWShredder 1.03:
* Kills the oemsyspnp.inf and new registry values installed by the new variant.
* Now targets 38 registry values, checked against a blacklist of 56 domains belonging to CWS affiliates.

http://www.spywareinfoforum.com/~merijn/files/c.../cwshredder.zip


Note: If anyone can get their hands on any software that installs the variant that uses msspi.dll to popup ads at Google and Yahoo, I can add support for removing that as well. Reward for the first finder
__________________
Regards,

Pieter
Itīs nice to be important, but itīs more important to be nice.

It's human to make mistakes. It's even more so to blame the computer for it.
  #7  
Old July 30th, 2003, 03:06 PM
Douglas
 
Posts: n/a
Default Re:CoolWebSearch removal tool

FYI, our own Pieter is responsible for the naming of this tool.

He's too humble to have mentioned it yet.

Douglas
  #8  
Old August 9th, 2003, 05:01 PM
Pieter_Arntz's Avatar
Pieter_Arntz Pieter_Arntz is offline
Spyware Veteran
 
Join Date: Apr 2002
Location: Netherlands
Posts: 12,718
Default Re:CoolWebSearch removal tool

Version 1.06 already.

This tool will find and destroy all traces of the
CoolWebSearch (CWS) hijacker on your system. This
includes:

* Safe removal of msspi.dll
* Removes the new dnsrelay.dll variant
* Now targets 81 blacklisted domains


* Redirections to CoolWebSearch related pages
* Redirections when mistyping URLs
* Enormous IE slowdowns when typing
* IE start page/search page changing on reboot
* Sites in the IE Trusted Zone you didn't add

This (not yet) includes:
* Popups in Google and Yahoo when searching
__________________
Regards,

Pieter
Itīs nice to be important, but itīs more important to be nice.

It's human to make mistakes. It's even more so to blame the computer for it.
  #9  
Old August 13th, 2003, 06:26 AM
Pieter_Arntz's Avatar
Pieter_Arntz Pieter_Arntz is offline
Spyware Veteran
 
Join Date: Apr 2002
Location: Netherlands
Posts: 12,718
Default Re:CoolWebSearch removal tool

A nice write-up by Merijn on CWS can be found here: http://www.spywareinfoforum.com/~mer...hronicles.html

Regards,

Pieter
__________________
Regards,

Pieter
Itīs nice to be important, but itīs more important to be nice.

It's human to make mistakes. It's even more so to blame the computer for it.
 

Wilders Security Forums > Security Products > other anti-malware software « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 06:24 PM.


Powered by vBulletinŪ Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright Đ2002 - 2013, Wilders Security Forums