websearch2 or coolsearchbar removal

[wolvern]

the main operating items for these are in C:\Documents and Settings\All Users\Application Data\

in a folder with an unusually large name like
OWNS INTRA LINK PLUS

delete the exe files in the folder when in safe mode
press (f8) or the key for boot options when starting up the cpu

and delete the 3 or so files in the folder mentioned or like folder to remove the small blue annoying bar forever or until u get it again

 

[aquias]

Wolvern,

It's always nice to see people posting up with help, but CWS variants are not so easily removed. Yes, some of the new tools better handle this nasty application...but below is one such instance of how to properly remove CWS

http://www.silentrunners.org/sr_cwsremoval.html

The best advice I can give anyone, research and continue to post for help on sites like Tek-Tips, spywarewarrior.com, castlecops.com, and vitalsecurity.org...or do a few searches and find the dozens of other sites offering help and information.

 

[pechenegs]

You also need a lot more tools to remove it properly, such as CWshredder, about buster and the cws reg fix as these pests make changes to the registry!

This is just the start, as the killbox, the hoster and deldomains might also be needed depending on what's showing up in a hijack this log!