Cool Websearch Problem

Discussion in 'privacy problems' started by davehillfrom brid, May 9, 2005.

Thread Status:
Not open for further replies.
  1. cool websearch! what a pain,finally found spyware program that ges rid of this annoying program,, it is microsoft antispyware and is available free of charge from the windows update site ,it worked for me.
     
  2. *Ari*

    *Ari* Registered Member

    Joined:
    Feb 15, 2002
    Posts:
    431
    Location:
    Finland
  3. + ShADoW +

    + ShADoW + Registered Member

    Joined:
    May 10, 2005
    Posts:
    31
    Spybot Search & Destroy also is another program that finds the variants of CoolWebSearch.

    But CWShredder is a good program also for CoolWebSearch.
     
  4. mimijo

    mimijo Registered Member

    Joined:
    Nov 8, 2005
    Posts:
    45
    hi all,

    I am a new user of Spybot. I suspected that a spyware called "Cool Websearch" is affecting my comp...can anyone please kindly explain whats the meaning of this and how can i remove it completely from my systemo_O

    pls refer to pic:

    http://i29.photobucket.com/albums/c289/mimijoey/Detected.jpg

    when i right-click on the word "CooldWebSearch" on the right colume,
    there is a pop-up saying "http:www.spywareinfoforum.com"
    Is this the link of where I have gotton this spyware oro_O

    and what are the rest of the items? can someone please help me?!?

    thanks!
     
  5. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,330
    Location:
    Netherlands
    If you take a close look at the description you will notice that Spybot S&D is scaring you for no reason.

    It says filename: ctfmon32.exe
    Now that would indeed have been a sign of a CWS infection as described here: http://www.sophos.com/virusinfo/analyses/trojiefeatr.html

    But in your case the filename is the regular ctfmon.exe in the System32 directory as described here:
    http://castlecops.com/s795-ctfmon_exe.html

    So, nothing to worry about, unless your browser is hijacked. Trust me, you will notice when CWS has got a hold on your computer. :(

    Regards,

    Pieter
     
  6. mimijo

    mimijo Registered Member

    Joined:
    Nov 8, 2005
    Posts:
    45

    Hi Pieter,

    so does that means that since its located in:

    C:\WINDOWS\system32\ctfmon.exe

    then its 100% confirm that its not a spyware/viruso_O

    please advise.... :(
     
  7. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,330
    Location:
    Netherlands
  8. mimijo

    mimijo Registered Member

    Joined:
    Nov 8, 2005
    Posts:
    45
    alright thanks Pieter for the info...
    at least now i can rest in peace =p

    thanks alot!

    regards,
    mimijo
     
  9. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,330
    Location:
    Netherlands
    No problem.

    Glad we could help and it was a false alarm. :)

    Regards,

    Pieter
     
  10. lotuseclat79

    lotuseclat79 Registered Member

    Joined:
    Jun 16, 2005
    Posts:
    5,094
    Hi Ari,

    Just to note that the link you gave for CWShredder is no longer where to get it. CWShredder was bought up by Intemute, and Intermute was bought up by Trend Micro, so there are these three places that I have seen and version 2.19 is now the latest release and can be installed by running the Check for Update button from CWShredder v2.18 for sure:

    http://www.trendmicro.com/cwshredder/
    http://www.intermute.com/products/cwshredder.html
    http://www.majorgeeks.com/Trend_Micro_CWShredder_d3019.html

    -- Tom
     
  11. bigbuck

    bigbuck Registered Member

    Joined:
    Jul 7, 2004
    Posts:
    4,877
    Location:
    Qld, Aus
    Thanks. They've fixed those FP's from 2.18 too!
     
Thread Status:
Not open for further replies.