Can't remove Spyware: CoolWWWSearch.WCADW

I'm running both Spybot S&D and Ad-Aware but the following just keeps on coming back:

CoolWWWSearch.WCADW: IE Search page (Registry change, fixing failed)

Spybot offers to re-run on boot up but still cannot remove this item.

Any suggestions:

Thanks
bigstarAsked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
moduloConnect With a Mentor Commented:
PAQed with no points refunded (of 100)

modulo
Community Support Moderator
0
 
MicrotechCommented:
Hi bigstar,
http:Q_20975384.html#10973796 a tool to remove all spyware including coolweb etc


Hope This helps
0
 
tanelornCommented:
Hi
run your updated spyware tools in safe mode.

that should take care of it for you


Tanelorn
0
The 14th Annual Expert Award Winners

The results are in! Meet the top members of our 2017 Expert Awards. Congratulations to all who qualified!

 
tanelornCommented:
I'm sorry,  
boot your machine into safemode by pressing F8 at startup,  once the system boots up,  run your tools.

T
0
 
matthew1471Commented:
I'll just expand on that :$

Keep pressing F8 rapidly at startup just before the Windows logo comes up and select "Safe Mode"...

Is Ad-Aware actually detecting the spyware? You might need to hit "Web Update" in Ad-aware..
0
 
dheeruthakurCommented:
do this its defnetely help you.
         in internet explorer(properties) - set about blank then run this tools.

·      RepairDefaultPrefix.reg <http://mvps.org/winhelp2002/RepairDefaultPrefix.reg> [right-click and select: Save As]
Repairs the corrupted or altered (spyware) HTTP prefixes
Note: HijackThis can also repair the DefaultPrefix entry [more info <http://www.spywareinfo.com/~merijn/htlogtutorial.html>]

dheerendra
(Network Engineer)

0
 
jvuzCommented:
0
 
BAFPCommented:
This worked for me:
>Use Spybot but also enable teatimer (comes with Spybot) then run a scan.
>once scan is finished, reboot computer.
>Spybot will run again. clean any thing that was found.
>Spybot Teatimer will then report that its noticed a registry change, tick the box that reads 'remember this..' and then click on deny change.
>That's it.

What this does is it will disable the program from running - effectively deleting it and making sure it doesnt comeback.

I hope this helps you out.

regards

BAFP
0
 
BAFPCommented:
oh when u do the first scan, make sure you click all the spyware and click Fix It. then follow the remaining intructions.
0
 
bigstarAuthor Commented:
So far I've tried running Spybot and Ad-Aware (with latest updates) in safe mode, then usermode. This is my company machine and I had to get the admin credentials. When I ran the progs in safe mode, I am seeing a different set of spyware found, I.E. not CoolWWWSearch.WCADW. When I return to my ordinary user mode, CoolWWWSearch is still there and still immovable.

I have also removed the Java VM as suggested.

Admittedly I have not tried all the solutions here, but I'm disappointed to know the safe mode method has not worked.

Can this be remedied?
0
 
matthew1471Commented:
How about making the user an Admin, Booting into safe mode, logging in as that user....Clearing computer of Spyware..

Remove Admin privallages..and then be done ready for tea time ;)?
0
 
bigstarAuthor Commented:
Hmmn

Good Idea Matthew.

I'll give it a bash.

Looking forward to teatime :)
0
 
Debsyl99Commented:
Hi

Let's hope that works ok. If it doesn't, then disable system restore if xp or Me, restart in safe mode, run this and post the log up here for us to have a look at,
Hijackthis
http://www.spychecker.com/program/hijackthis.html

Deb :))
0
 
kinveachyCommented:
Read this:

http://www.experts-exchange.com/Web/Browser_Issues/Q_20975384.html

Many experts contributed to this and it'll give you the right info you need to remove all spyware etc!

Good Luck

Kin
0
 
jvuzCommented:
Have you tried the collwebshredder already?
0
 
4ceReconSniperCommented:
update its definitions it solved my problem
0
 
MichaelKnollCommented:
Dear Bigstar:

Perhaps this is a variant or alias of CoolWebSearch.  Details and manual removal instructions are on Pest Patrol's web site at http://pestpatrol.com/pestinfo/c/coolwebsearch.asp.

Regards,
Michael Knoll
0
 
lawyerboy780Commented:
Dear Bigstar...

If you haven't already solved your CoolWebSearch problem, try CWShredder.  You can download it from the following sites:

http://www.softpedia.com/progDownload/CWShredder-Download-8114.html
http://www.majorgeeks.com/download4086.html
http://www.pcworld.com/downloads/file_download.asp?fid=23551&fileidx=1

Regards
James H
0
 
matthew1471Commented:
"Hmmn

Good Idea Matthew.

I'll give it a bash."

Wonder how that went, logically it was a good solution,
0
All Courses

From novice to tech pro — start learning today.