How to Remove the Cool Web Search Virus

Save

Cool Web Search is a browser hijacker virus. This means that the virus changes your Internet home page, most often to CoolWebSearch.com or Cool-Search.ws. In addition, the Cool Web Search virus may redirect your Internet searches and flood your computer with pornographic popup advertisements. The best way to remove the Cool Web Search virus is to run your antivirus program. However, the virus can also be removed manually by following the steps below.

End Infected Processes

  • Press Ctrl + Alt + Delete.

  • Select "Task Manager," then click on the "Processes" tab.

  • End the following processes:

    "services.exe"
    "DownloaderEXE.exe"
    "tmksrvu.exe"

    To end a process, right-click on it and select "End Process."

Delete Infected DLL Files

  • Hold down the Windows key and press "R." This opens the Run box.

  • Type "cmd" (without the quotation marks) into the Run box and click "OK." This opens the Command Prompt.

  • Type the following (without the quotation marks) into the Command Prompt. Be sure to press ENTER after every line.

    “regsvr32 /u iekp32.dll"
    “regsvr32 /u image.dll"
    “regsvr32 /u mshp.dll"
    “regsvr32 /u mslq32.dll"
    “regsvr32 /u mssearch.dll"
    “regsvr32 /u xplugin.dll"

Delete Infected Registry Values

  • Hold down the Windows key and press "R." This opens the Run box.

  • Type "regedit" (without the quotation marks) into the Run box, then click "OK." The Registry Editor opens.

  • Locate the following registry values in the left pane of the Registry Editor and delete them:

    "SOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorerRunImage"
    "SoftwareMicrosoftWindowsCurrentVersionRunServicesImage"

    To delete a registry value, right-click on it and select "Delete." If you are having trouble locating a registry value, click "Edit," then "Find," and then type the name of the registry value into the box.

Delete Infected Files

  • Click on the "Start" menu.

  • Select the "Search Files and Folders" box.

  • Search for and delete the following files and folders:

    "SexDownloader.cab"
    "update911.js"
    "DNLDC.ocx"

    To delete a file or folder, right-click on it and select "Delete."

References

  • Photo Credit angry!!! image by kuhar from Fotolia.com
Promoted By Zergnet

Comments

You May Also Like

  • How to Get Rid of a Hijack Virus

    A computer virus is a program that has the ability to copy itself and spread from one computer to another. A hijack...

  • How to Remove My Web Search

    My Web Search is a toolbar that is downloaded along with the Fun Web Products suite of applications, such as Smiley Central...

Related Searches

Check It Out

Geek Vs Geek: Robot battles, hoverboard drag race, and more

M
Is DIY in your DNA? Become part of our maker community.
Submit Your Work!