Cool Websearch Problem

cool websearch! what a pain,finally found spyware program that ges rid of this annoying program,, it is microsoft antispyware and is available free of charge from the windows update site ,it worked for me.

 

CWShredder does a really good job too

http://www.spywareinfoforum.com/~merijn/downloads.html

regards ~Ari

 

Spybot Search & Destroy also is another program that finds the variants of CoolWebSearch.

But CWShredder is a good program also for CoolWebSearch.

 

hi all,

I am a new user of Spybot. I suspected that a spyware called "Cool Websearch" is affecting my comp...can anyone please kindly explain whats the meaning of this and how can i remove it completely from my system

pls refer to pic:

http://i29.photobucket.com/albums/c289/mimijoey/Detected.jpg

when i right-click on the word "CooldWebSearch" on the right colume,
there is a pop-up saying "http:www.spywareinfoforum.com"
Is this the link of where I have gotton this spyware or

and what are the rest of the items? can someone please help me?!?

thanks!

 

If you take a close look at the description you will notice that Spybot S&D is scaring you for no reason.

It says filename: ctfmon32.exe
Now that would indeed have been a sign of a CWS infection as described here: http://www.sophos.com/virusinfo/analyses/trojiefeatr.html

But in your case the filename is the regular ctfmon.exe in the System32 directory as described here:
http://castlecops.com/s795-ctfmon_exe.html

So, nothing to worry about, unless your browser is hijacked. Trust me, you will notice when CWS has got a hold on your computer.

Regards,

Pieter

 

Hi Pieter,

so does that means that since its located in:

C:\WINDOWS\system32\ctfmon.exe

then its 100% confirm that its not a spyware/virus

please advise....

 

That is the location for the normal Windows file.
It certainly is NOT the startup for the indicated CWS variant.

In case of doubt (any file can be replaced) you can scan single files here:
http://virusscan.jotti.org/
here:
http://www.virustotal.com
or here:
http://www.kaspersky.com/scanforvirus

Regards,

Pieter

 

alright thanks Pieter for the info...
at least now i can rest in peace =p

thanks alot!

regards,
mimijo

 

No problem.

Glad we could help and it was a false alarm.

Regards,

Pieter

 

Hi Ari,

Just to note that the link you gave for CWShredder is no longer where to get it. CWShredder was bought up by Intemute, and Intermute was bought up by Trend Micro, so there are these three places that I have seen and version 2.19 is now the latest release and can be installed by running the Check for Update button from CWShredder v2.18 for sure:

http://www.trendmicro.com/cwshredder/
http://www.intermute.com/products/cwshredder.html
http://www.majorgeeks.com/Trend_Micro_CWShredder_d3019.html

-- Tom

 

Thanks. They've fixed those FP's from 2.18 too!