Home Spyware Database "CoolWebSearch Removal Guide"

CoolWebSearch Removal Guide

CoolWebSearch Description

CoolWebSearch or Cool Web Search Automatic Detection (Recommended)

Is your PC infected with CoolWebSearch? To safely & quickly detect CoolWebSearch, we highly recommend you...

Download SpyHunter's* Malware Scanner.

CoolWebSearch Manual Removal Instructions

Backup Reminder: Always be sure to back up your PC before making any changes.

Step 1 : Use Windows Task Manager to Remove CoolWebSearch Processes

Remove the "CoolWebSearch" processes files:
systemcritical.exe systeem.exe sistem.exe rundll16.exe quicken.exe olehelp.exe notepad32.exe inetinf.exe helpcvs.exe sp.exe aimee2[2].exe rsysinit.exe tksrv99.exe crqf32.exe tmksrvu.exe DownloaderEXE.exe tmksrvu.exeservices.exe DownloaderEXE.exe services.exe
Read more on How to kill CoolWebSearch Processes

Step 2 : Use Registry Editor to Remove CoolWebSearch Registry Values

Locate and delete "CoolWebSearch" registry entries:
F949D095-16D2-0276-9929-9026ED9B7AA5 B58A2FBE-5744-D2AD-DCBC-F5D84F027C2A AFF84E78-CBFB-4221-95CB-4A353DC1B463 AC29943E-756D-4B89-9A83-C13CF83AFF76 pmv1s4.Main AD99E521-90B0-4B9B-BD99-2CD0E5123F64 92F476F5-A7A6-458E-BDAF-5B302D8D4265 11735F21-5127-4C2E-BD5E-9B3A6904B997 a31o9nhawv.class C1299AC9-3277-4B23-9F6D-C9037A7A4C84 A1511F4E-4107-4904-97BC-2F953DA06132 3F143C3A-1457-6CCA-03A7-7AA23B61E40F SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\3F143C3A-1457-6CCA-03A7-7AA23B61E40F TMKSoft B0B1E678-1825-4889-B36E-C52DCA08C3A8 5F2BD607-9849-4E9B-AC43-056D2F3F263B 4F7681E5-6CAF-478D-9CB8-4CA593BEE7FB DNLDC.DNLDCCtrl.1 XPlugin.XFilter.1 XPlugin.XFilter 399FE428-BC1C-4902-A8EB-006E59F17F39 204CC9B5-882F-4BDF-8470-0E15D16E880C EE79D398-AAAF-47B1-8C9E-11F7D4C9111B C9ECA160-055F-4725-A394-C328F5C0DF1B ShowSearch.ViewSource.1 ShowSearch.ViewSource Image.Image.1 Image.Image searchhook.searchhookobject.1 searchhook.searchhookobject 0B40A54D-BEC3-4077-9A33-701BD6ACDEB2 5297E905-1DFB-4A9C-9871-A4F95FD58945 ToolBand.StartBHO.1 ToolBand.StartBHO ToolBand.ToolBandObj.1 ToolBand.ToolBandObj 1DE9EE01-DF51-49DB-9BDD-5990B35C1C2A 30192F8D-0958-44E6-B54D-331FD39AC959 0E1230F8-EA50-42A9-983C-D22ABC2EED3B B94B4225-E02E-4D3F-BADB-026F1E2F3AD7 Replace.HBO.1 Replace.HBO E3EEBBE8-9CAB-4C76-B26A-747E25EBB4C6 SOFTWARE\Microsoft\Internet Explorer\Toolbar\E3EEBBE8-9CAB-4C76-B26A-747E25EBB4C6 E2DDF680-9905-4dee-8C64-0A5DE7FE133C fd9bc004-8331-4457-b830-4759ff704c22 93674FCF-119D-EBAC-174F-9BA8737F9ADD E89097ED-3400-411D-9647-D368C3311C98 5321E378-FFAD-4999-8C62-03CA8155F0B3 SoftwareMicrosoftWindowsCurrentVersionRunServicesImage SoftwareMicrosoftWindowsCurrentVersionRunServicesImageSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorerRunImage SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorerRunImage
Read more on How to Remove CoolWebSearch Registry Entries

Step 3 : Use Windows Command Prompt to Unregister CoolWebSearch DLL Files

Search and unregister "CoolWebSearch" DLL files:
winajbm.dll searchword.dll mtwirl32.dll mswsc20.dll mswsc10.dll msspi.dll msconfd.dll gfmnaaa.dll dnsrelay.dll cpan.dll avpcc.dll javaef.dll 3.02.00.dll coolwebsearch-info.dll 3.03.00.dll xplugin.dll mssearch.dll mslq32.dll mshp.dll image.dll iekp32.dll
Read more on How to Remove CoolWebSearch DLL Files

Step 4 : Detect and Delete Other CoolWebSearch Files

Remove the "CoolWebSearch" processes files:
systemcritical.exe systeem.exe sistem.exe rundll16.exe quicken.exe olehelp.exe notepad32.exe inetinf.exe helpcvs.exe astctl32.ocx winajbm.dll searchword.dll mtwirl32.dll mswsc20.dll mswsc10.dll msspi.dll msconfd.dll gfmnaaa.dll dnsrelay.dll cpan.dll avpcc.dll javaef.dll sp.exe aimee2[2].exe rsysinit.exe tksrv99.exe 3.02.00.dll coolwebsearch-info.dll 3.03.00.dll regedit -s sys.reg Image xpsystem HOMEOldSP SysA Sys mnaa Otnlbbxa crqf32.exe sp update911.js SexDownloader.cab xplugin.dll mssearch.dll mslq32.dll mshp.dll image.dll iekp32.dll tmksrvu.exe DownloaderEXE.exe services.exe DNLDC.ocx update911.js SexDownloader.cab
Read more on How to Delete Harmful Files

Step 5 : View the CoolWebSearch Components with its MD5s

Remove the "CoolWebSearch" components:

File Name	File Size	MD5
javaef.dll	87604	949deaf6bced3ec6ac2bffcbb549ad1a
funniest.exe	17408	2f2ce1eba638136042b6bd9bef9ad634
internet.exe	10240	3ded54edea9488b3177c3c8981dbd01c
qttasks.exe	8704	bf3cf36a72cf27a64f21cbf9134f6ed4
waol.exe	20992	d5b080ea4a1c219bffcb6a5e5d94e35e
winmgnt.exe	19200	2fb2d1aa9a445614d0d07c1bd03461b2
sp.exe	71620	3da9e7dd50a1491924fa26c5286f8f90
aiqkawmm.exe	15976	46dae5962f0ef360161e672299473f2c
kn1k9r57.exe	15976	46dae5962f0ef360161e672299473f2c
aimee2[2].exe	15976	46dae5962f0ef360161e672299473f2c
uc1362.exe	6656	4976bb48a9f2fa8eb7a19f46b797c312
funny.exe	10240	1ebd551402a96bebda352dea92e369d7
loader.exe	12032	02c588d40bc0e511690f1cfa7f8047dd
svchost32.exe	29952	95d8d1f08b7f88f1e61616790d4055b6
win32e.exe	25856	7607f53286d88c8816ccc6822e4a0e5f
x.exe	8192	2a98a97c6e8582957b5577c3d3cd9cfe
spr[1].exe	71620	3da9e7dd50a1491924fa26c5286f8f90
du7nptd8.exe	15976	46dae5962f0ef360161e672299473f2c
pl7srsn5.exe	15976	46dae5962f0ef360161e672299473f2c
message.exe services.exe	13312	1b9a57308af5a82ce5c92da177d23bc6
editpad.exe	13312	f176fa7a43cfaa9fdeb798b8c746f9d0
iexplorer.exe	32000	ac61b50419f874260a67c85acd8ea8ca
msupdate.exe	29184	829881bd2981178ccdcf945f0a3d0c30
time.exe	30208	e8f70c8a1f9b78232187855eb709fe7b
window.exe	9216	4049f412286d04892aee670dda627439
svchost.exe	700416	30f792c0af69801584462a0bb85928f0
26vks59f.exe	15976	46dae5962f0ef360161e672299473f2c
jbf4azag.exe	15976	46dae5962f0ef360161e672299473f2c
xyawckzp.exe	15976	46dae5962f0ef360161e672299473f2c
third love.exe	7831040	14c3db0f7ed243bb5353b4b855e6de98
accesss.exe	8704	deda65303ef2f2ce3bc625c1cbad1ce5
iedll.exe	11520	fe28422592c516f6f5138609446368cf
mssys.exe	30976	31e21cf87f0cb3e6265bd196d8bc4f63
svcinit.exe	16896	312544f9eae93d1e80258267137d4a31
win64.exe	20736	1b351540eec899e91d63d9c1e466c735
y.exe	15360	cce97f3359c4dd28345436e0a5b4a543
1tcdhfwx.exe	15976	46dae5962f0ef360161e672299473f2c
fpxbnng9.exe	15976	46dae5962f0ef360161e672299473f2c
rhu3smep.exe	15976	46dae5962f0ef360161e672299473f2c
rsysinit.exe	1267	41d7bbec3b2bc56a523523397978da6e

Back to Top

Site Disclaimer

Publication Date: Sun Apr 10 2005 17:52:36 EDT

User Comments

There are no comments posted for this page.

Leave a Reply

Name (required)

Mail (will not be published) (required)

Anti-spam word: (Required)*
To prove you're a person (not a spam script), type the security word shown in the picture.

Back to Top