What is CoolWebSearch (CWS)

CoolWebSearch (also known as CoolWWWSearch or abbreviated as CWS) is a well-known spyware program that installs itself on Microsoft Windows based computers. It first appeared in May 2003.

CoolWebSearch has numerous effects when it is successfully installed on a user’s computer. The program can change an infected computer’s web browser homepage to coolwebsearch.com, and although originally thought to only work on Internet Explorer, recent variants affect Mozilla Firefox as well as others. It can also create pop-up ads that redirect to other websites including pornography sites, collect private information about users and slow the speed of infected computers.

Coolwebsearch uses innovative techniques to evade detection and removal, and as such many common spyware removal programs fail to properly remove the software.

Some versions of CoolWebSearch can be installed through drive-by installation, in which a computer browsing a webpage automatically installs CWS. CWS itself attempts to evade others by not labelling its ads, not providing an EULA, not providing any data about itself and not having a website. Certain variants insert links on random text, leading to advertiser websites. Other attempts to access websites are redirected to pay-per-click search engines that may install more malware display ads. Some variants of CWS also add links topornography and gambling sites to the user’s Desktop, Internet Explorer’s bookmarks and history. Certain versions attempt to edit users’ trusted sites and modify security settings as well as to hide from removal programs. Variants are often named for the effects they have such as msconfig, Msoffice, Mupdate, Msinfo and Svchost32.

How can I remove the Coolwebsearch virus

Trend Micro CWShredder is the premier tool to find and remove traces of CoolWebSearch.

CWShredder removes these browser hijackers. CoolWebSearch installs dozens of bookmarks–mostly to porn Web sites–on your desktop, changes your home page without asking, and continually changes it back if you attempt to correct it. Furthermore, it significantly slows down the performance of your PC, and introduces modifications which cause Microsoft Windows™ to freeze, crash or randomly reboot.

remove coolwebsearch

This tool will find and destroy all traces of the CoolWebSearch hijacker on your system. Trend Micro CWSShredder includes:

  • Redirections to CoolWebSearch related pages
  • Redirections when mistyping URLs
  • Redirections when visiting Google
  • Enormous IE slowdowns when typing
  • IE start page/search page changing on reboot
  • Sites in the IE Trusted Zone you didn’t add
  • Pop-ups in Google and Yahoo when searching
  • Errors at startup mentioning WIN.INI or IEDLL.EXE
  • Unable to change or see certain items in IE Options
  • Unable to access IE Options at all

And did we mention that it is a freeware?

[Download CWSShredder]