Home Spyware Database "CoolWebSearch Removal Guide"

CoolWebSearch Removal Guide

CoolWebSearch Description

Disclaimer: SpywareRemove.com IS NOT associated, affiliated, consorted, or connected with the publishers CoolWebSearch. We object, reject, and disapprove all the malicious and objectionable business practices of the publishers of CoolWebSearch. Our goal and objective is to completely eliminate the promotion of CoolWebSearch and other malware publishers off the Internet. In addition, we seek the complete deletion of all the malware programs, including all their polymorphic variants, which are developed and distributed all over the Internet, in the same manner as the publishers of CoolWebSearch. The readers of this posting should not confuse, mistake, or associate this article to be a promotion or advertisement of CoolWebSearch, since the aim of this posting is to educate users on how to detect and eliminate CoolWebSearch off their computer. Any information provided is "as is" for reference and educational purposes only.

How can I Detect CoolWebSearch?

The most common spyware removal tactic is to uninstall CoolWebSearch by using the "Add/Remove Programs" utility. However, as there may still be hidden CoolWebSearch files, it's possible that CoolWebSearch will reappear after reboot. Follow the CoolWebSearch detection and removal methods below.

CoolWebSearch or Cool Web Search Automatic Detection (Recommended)

Is your PC infected with CoolWebSearch? To safely & quickly detect CoolWebSearch, we highly recommend you...

Download SpyHunter's Malware Scanner.

SpyHunter's free version is only for malware detection. If SpyHunter's malware scanner detects CoolWebSearch on your PC, you will need to purchase SpyHunter's malware removal tool to remove CoolWebSearch and other malware threats.

CoolWebSearch Manual Removal Instructions

Below is a list of CoolWebSearch manual removal instructions and CoolWebSearch components listed to help you remove CoolWebSearch from your PC. Backup Reminder: Always be sure to back up your PC before making any changes.

Note: This manual removal process may be difficult and you run the risk of destroying your computer. We recommend that you use SpyHunter's malware detection tool to check for CoolWebSearch.

Step 1 : Use Windows File Search Tool to Find CoolWebSearch Path

1. Go to Start > Search > All Files or Folders.
2. In the "All or part of the the file name" section, type in "CoolWebSearch" file name(s).
3. To get better results, select "Look in: Local Hard Drives" or "Look in: My Computer" and then click "Search" button.
4. When Windows finishes your search, hover over the "In Folder" of "CoolWebSearch", highlight the file and copy/paste the path into the address bar. Save the file's path on your clipboard because you'll need the file path to delete CoolWebSearch in the following manual removal steps.

Step 2 : Use Windows Task Manager to Remove CoolWebSearch Processes

1. To open the Windows Task Manager, use the combination of CTRL+ALT+DEL or CTRL+SHIFT+ESC.
2. Click on the "Image Name" button to search for "CoolWebSearch" process by name.
3. Select the "CoolWebSearch" process and click on the "End Process" button to kill it.
4. Remove the "CoolWebSearch" processes files:
5. systemcritical.exe systeem.exe sistem.exe rundll16.exe quicken.exe olehelp.exe notepad32.exe inetinf.exe helpcvs.exe sp.exe aimee2[2].exe rsysinit.exe tksrv99.exe crqf32.exe tmksrvu.exe DownloaderEXE.exe tmksrvu.exeservices.exe DownloaderEXE.exe services.exe
   Read more about How to kill CoolWebSearch Processes

Step 3 : Use Registry Editor to Remove CoolWebSearch Registry Values

1. To open the Registry Editor, go to Start > Run > type regedit and then press the "OK" button.
2. Locate and delete the entry or entries whose data value (in the rightmost column) is the spyware file(s) detected earlier.
3. To delete "CoolWebSearch" value, right-click on it and select the "Delete" option.
4. Locate and delete "CoolWebSearch" registry entries:
5. F949D095-16D2-0276-9929-9026ED9B7AA5 B58A2FBE-5744-D2AD-DCBC-F5D84F027C2A AFF84E78-CBFB-4221-95CB-4A353DC1B463 AC29943E-756D-4B89-9A83-C13CF83AFF76 pmv1s4.Main AD99E521-90B0-4B9B-BD99-2CD0E5123F64 92F476F5-A7A6-458E-BDAF-5B302D8D4265 11735F21-5127-4C2E-BD5E-9B3A6904B997 a31o9nhawv.class C1299AC9-3277-4B23-9F6D-C9037A7A4C84 A1511F4E-4107-4904-97BC-2F953DA06132 3F143C3A-1457-6CCA-03A7-7AA23B61E40F SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\3F143C3A-1457-6CCA-03A7-7AA23B61E40F TMKSoft B0B1E678-1825-4889-B36E-C52DCA08C3A8 5F2BD607-9849-4E9B-AC43-056D2F3F263B 4F7681E5-6CAF-478D-9CB8-4CA593BEE7FB DNLDC.DNLDCCtrl.1 XPlugin.XFilter.1 XPlugin.XFilter 399FE428-BC1C-4902-A8EB-006E59F17F39 204CC9B5-882F-4BDF-8470-0E15D16E880C EE79D398-AAAF-47B1-8C9E-11F7D4C9111B C9ECA160-055F-4725-A394-C328F5C0DF1B ShowSearch.ViewSource.1 ShowSearch.ViewSource Image.Image.1 Image.Image searchhook.searchhookobject.1 searchhook.searchhookobject 0B40A54D-BEC3-4077-9A33-701BD6ACDEB2 5297E905-1DFB-4A9C-9871-A4F95FD58945 ToolBand.StartBHO.1 ToolBand.StartBHO ToolBand.ToolBandObj.1 ToolBand.ToolBandObj 1DE9EE01-DF51-49DB-9BDD-5990B35C1C2A 30192F8D-0958-44E6-B54D-331FD39AC959 0E1230F8-EA50-42A9-983C-D22ABC2EED3B B94B4225-E02E-4D3F-BADB-026F1E2F3AD7 Replace.HBO.1 Replace.HBO E3EEBBE8-9CAB-4C76-B26A-747E25EBB4C6 SOFTWARE\Microsoft\Internet Explorer\Toolbar\E3EEBBE8-9CAB-4C76-B26A-747E25EBB4C6 E2DDF680-9905-4dee-8C64-0A5DE7FE133C fd9bc004-8331-4457-b830-4759ff704c22 93674FCF-119D-EBAC-174F-9BA8737F9ADD E89097ED-3400-411D-9647-D368C3311C98 5321E378-FFAD-4999-8C62-03CA8155F0B3 SoftwareMicrosoftWindowsCurrentVersionRunServicesImage SoftwareMicrosoftWindowsCurrentVersionRunServicesImageSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorerRunImage SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorerRunImage
   Read more about How to Remove CoolWebSearch Registry Entries

Step 4 : Use Windows Command Prompt to Unregister CoolWebSearch DLL Files

1. To open the Windows Command Prompt, go to Start > Run > type cmd and then click the "OK" button.
2. Type "cd" in order to change the current directory, press the "space" button, enter the full path to where you believe the CoolWebSearch DLL file is located and press the "Enter" button on your keyboard. If you don't know where CoolWebSearch DLL file is located, use the "dir" command to display the directory's contents.
3. To unregister "CoolWebSearch" DLL file, type in the exact directory path + "regsvr32 /u" + [DLL_NAME] (for example, :C\Spyware-folder\> regsvr32 /u CoolWebSearch.dll) and press the "Enter" button. A message will pop up that says you successfully unregistered the file.
4. Search and unregister "CoolWebSearch" DLL files:
5. winajbm.dll searchword.dll mtwirl32.dll mswsc20.dll mswsc10.dll msspi.dll msconfd.dll gfmnaaa.dll dnsrelay.dll cpan.dll avpcc.dll javaef.dll 3.02.00.dll coolwebsearch-info.dll 3.03.00.dll xplugin.dll mssearch.dll mslq32.dll mshp.dll image.dll iekp32.dll
   Read more about How to Remove CoolWebSearch DLL Files

Step 5 : Detect and Delete Other CoolWebSearch Files

1. To open the Windows Command Prompt, go to Start > Run > type cmd and then press the "OK" button.
2. Type in "dir /A name_of_the_folder" (for example, C:\Spyware-folder), which will display the folder's content even the hidden files.
3. To change directory, type in "cd name_of_the_folder".
4. Once you have the file you're looking for type in "del name_of_the_file".
5. To delete a file in folder, type in "del name_of_the_file".
6. To delete the entire folder, type in "rmdir /S name_of_the_folder".
7. Select the "CoolWebSearch" process and click on the "End Process" button to kill it.
8. Remove the "CoolWebSearch" processes files:
9. systemcritical.exe systeem.exe sistem.exe rundll16.exe quicken.exe olehelp.exe notepad32.exe inetinf.exe helpcvs.exe astctl32.ocx winajbm.dll searchword.dll mtwirl32.dll mswsc20.dll mswsc10.dll msspi.dll msconfd.dll gfmnaaa.dll dnsrelay.dll cpan.dll avpcc.dll javaef.dll sp.exe aimee2[2].exe rsysinit.exe tksrv99.exe 3.02.00.dll coolwebsearch-info.dll 3.03.00.dll regedit -s sys.reg Image xpsystem HOMEOldSP SysA Sys mnaa Otnlbbxa crqf32.exe sp update911.js SexDownloader.cab xplugin.dll mssearch.dll mslq32.dll mshp.dll image.dll iekp32.dll tmksrvu.exe DownloaderEXE.exe services.exe DNLDC.ocx update911.js SexDownloader.cab
   Read more about How to Delete Harmful Files

CoolWebSearch Recommendation

RECOMMENDED: To avoid the unnecessary risk of damaging your computer, we highly recommend you use a good malware remover to track CoolWebSearch and automatically remove CoolWebSearch as well as other spyware, adware, trojans, and virus threats in your PC.

If you believe you have CoolWebSearch installed on your computer, check for CoolWebSearch with SpyHunter's Malware Scanner.

Download SpyHunter's Malware Scanner.

SpyHunter's free version is only for malware detection. To remove CoolWebSearch and other malware threats, you will need to purchase SpyHunter's malware removal tool. Since new CoolWebSearch files are constantly being released, it is normally advised to run SpyHunter's scanner weekly to get the latest updates on CoolWebSearch and other malware threats.

To learn more on CoolWebSearch, see our CoolWebSearch resource section below.

CoolWebSearch Technical Details

The following CoolWebSearch components and their MD5s:

File Name	File Size	MD5
javaef.dll	87604	949deaf6bced3ec6ac2bffcbb549ad1a
funniest.exe	17408	2f2ce1eba638136042b6bd9bef9ad634
internet.exe	10240	3ded54edea9488b3177c3c8981dbd01c
qttasks.exe	8704	bf3cf36a72cf27a64f21cbf9134f6ed4
waol.exe	20992	d5b080ea4a1c219bffcb6a5e5d94e35e
winmgnt.exe	19200	2fb2d1aa9a445614d0d07c1bd03461b2
sp.exe	71620	3da9e7dd50a1491924fa26c5286f8f90
aiqkawmm.exe	15976	46dae5962f0ef360161e672299473f2c
kn1k9r57.exe	15976	46dae5962f0ef360161e672299473f2c
aimee2[2].exe	15976	46dae5962f0ef360161e672299473f2c
uc1362.exe	6656	4976bb48a9f2fa8eb7a19f46b797c312
funny.exe	10240	1ebd551402a96bebda352dea92e369d7
loader.exe	12032	02c588d40bc0e511690f1cfa7f8047dd
svchost32.exe	29952	95d8d1f08b7f88f1e61616790d4055b6
win32e.exe	25856	7607f53286d88c8816ccc6822e4a0e5f
x.exe	8192	2a98a97c6e8582957b5577c3d3cd9cfe
spr[1].exe	71620	3da9e7dd50a1491924fa26c5286f8f90
du7nptd8.exe	15976	46dae5962f0ef360161e672299473f2c
pl7srsn5.exe	15976	46dae5962f0ef360161e672299473f2c
message.exe services.exe	13312	1b9a57308af5a82ce5c92da177d23bc6
editpad.exe	13312	f176fa7a43cfaa9fdeb798b8c746f9d0
iexplorer.exe	32000	ac61b50419f874260a67c85acd8ea8ca
msupdate.exe	29184	829881bd2981178ccdcf945f0a3d0c30
time.exe	30208	e8f70c8a1f9b78232187855eb709fe7b
window.exe	9216	4049f412286d04892aee670dda627439
svchost.exe	700416	30f792c0af69801584462a0bb85928f0
26vks59f.exe	15976	46dae5962f0ef360161e672299473f2c
jbf4azag.exe	15976	46dae5962f0ef360161e672299473f2c
xyawckzp.exe	15976	46dae5962f0ef360161e672299473f2c
third love.exe	7831040	14c3db0f7ed243bb5353b4b855e6de98
accesss.exe	8704	deda65303ef2f2ce3bc625c1cbad1ce5
iedll.exe	11520	fe28422592c516f6f5138609446368cf
mssys.exe	30976	31e21cf87f0cb3e6265bd196d8bc4f63
svcinit.exe	16896	312544f9eae93d1e80258267137d4a31
win64.exe	20736	1b351540eec899e91d63d9c1e466c735
y.exe	15360	cce97f3359c4dd28345436e0a5b4a543
1tcdhfwx.exe	15976	46dae5962f0ef360161e672299473f2c
fpxbnng9.exe	15976	46dae5962f0ef360161e672299473f2c
rhu3smep.exe	15976	46dae5962f0ef360161e672299473f2c
rsysinit.exe	1267	41d7bbec3b2bc56a523523397978da6e

---

More CoolWebSearch Resources

What is Browser Hijackers?

CoolWebSearch is a type of Browser Hijackers.

Browser hijackers change your Internet web browser settings without your permission. Sometimes this means changing your home page to a pay-per-click site so that the author of the browser hijacker software earns money. Sometimes browser hijackers may change your ?search? page so that all your queries lead to pay-per-click sites, while also tracking your Internet activity. Unfortunately, simply restoring your browser to factory settings usually will not prevent the browser hijacker from working.

Think you have CoolWebSearch? Run SpyHunter's malware scan and automatically detect CoolWebSearch on your PC.

Back to Top

CoolWebSearch Prevention Rules

Protect your computer from CoolWebSearch and other spyware by following these four easy prevention rules.

Rule #1: Keep your Windows Security up-to-date

Microsoft provides updates weekly and can always be downloaded manually from the Microsoft website.
Tip: Regularly visit Windows Update and set your computer to receive security & critical updates automatically.

To get Microsoft Update, go to IE > Tools > Windows Update > Product Updates, and select "ALL High-Priority Security Updates" from the list.

Then open IE and go to Internet Options > Security > Internet, then press "Default Level", then OK. Now press "Custom Level."

Rule #2: Download and install a reliable anti-spyware software

A good anti-spyware software that recognizes current CoolWebSearch spyware as well as other forms of spyware can can be the answer to all your security issues. Listed below is an anti-spyware program that can effectively reverse the damage of your computer and detect CoolWebSearch automatically.

Download SpyHunter's Malware Scanner

SpyHunter's free version is only for malware detection. To remove CoolWebSearch and other malware threats, you will need to purchase SpyHunter's malware removal tool.

Rule #3: Install and keep your firewall turned on

A firewall is essential for a complete protection of your PC. Make sure that your firewall is always turned on. A firewall can prevent unwanted software like CoolWebSearch from infecting your computer.

Rule #4: Keep your anti-spyware definitions up-to-date

Since new CoolWebSearch files can be created every day, it is important to keep your anti-spyware program up-to-date. Your anti-spyware scanner should have an update feature where with a click of a button you can get new spyware definitions instantly. Often, an anti-spyware software will open an update window reminding you that there are new updates available.

Back to Top

User Comments

There are no comments posted for this page.

Leave a Reply

Name (required)

Mail (will not be published) (required)

Anti-spam word: (Required)*
To prove you're a person (not a spam script), type the security word shown in the picture.

Back to Top