CoolWebSearch

What is CoolWebSearch?

CoolWebSearch is a Trojan that hijacks your Internet Explorer's settings causing your default page and search settings go to either to CoolWebSearch's website or one of their affiliates. CWS is an abbreviated name for the CoolWebSearch Trojan that can automatically update itself as well as install a mini server on your computer without you knowing about it. CoolWebSearch puts a stylesheet in your Windows folder that contains JavaScript which tries to see if your viewing porn sites as well as the information to direct your homepage to www.coolwebsearch.com.

How to remove CoolWebSearch
If you willing to start from scratch you can simple reinstall your operating system, this will help eliminate all viruses, Trojans, and spyware from your computer but you do take the risk of losing valuable information if you forget to back everything up. Another solution would be to backup your registry once a week, and if you get the CoolWebSearch Trojan on your system you can simple restore you system registry to the previous date. The simplest way would be to install an anti-spyware program. However, not all anti-spyware programs have the ability to remove the CoolWebSearch virus. You might want to check with each manufacturer to make sure they can actually remove the CoolWebSearch not just quarantine it.

There is a program available called CWShredder that Dutch Student designed specifically to remove the CoolWebSearch Trojan. You can also manually remove the CoolWebSearch variants but it can be very difficult. By performing the following examples, you can take a risk of harming your operating system if you make a mistake. We are just giving some examples of how you can remove the CoolWebSearch variants but we don't recommend anyone trying these unless they are an experienced user.

Manual Removal Example
One of the CoolWebSearch variants is the PnP variant, if want to manually remove this CWS variant you would need to follow these steps:

1. Press the start icon on your toolbar then select run under your menu tab
2. Type regedit in the prompt box to open the system registry
3. Open the following selection: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
4. Once you're in the run directory you need to delete SysPnP if it is there
5. After deleting SysPnP go to the Windows folder on your hard drive and remove the oemsysinf.pnp file

If you suspect you might have a CoolWebsearch browser hijacker on your system, or would like to find out if you have a browser hijacker then check out our number one ranked product, Spysweeper that can scan your system to see if your system has already been affected. There are other manual methods available to remove CoolWebSearch variants from your computer, but we do strongly recommend purchasing an anti-spyware program that is designed to remove the CWS Trojan and other forms of spyware.