I need some major computer help!!! ***ARRGGGHHH UPDATE***

[phorsenuf]

My boys computer got attacked by something! It is a browser hijack and it is stubborn! I can't get rid of it and it has totally shut down their access to the internet (not that thats a bad thing )
We have tried everything but to no avail. Is there a program or antivirus something that we could download to disk to install in their computer?
From what I can figure out it is called coolwebsearch.

Any help would be greatly appreciated!!!!

 

[Disney_1derland]

did you look on the microsoft website to see if that what it might be? should be on the main page with a link to a fix. sorry, other than that I'm not much help!

 

[Dan Murphy]

Looks at this, then click on the right there and give it a try.........

http://www.webroot.com/wb/news/spywarethreat/archive.php?threat=coolwebsearch

It is one of the several programs I have that work very well keeping things clean.

 

[Shelle&Dave]

I just fixed a friend of mine's computer. She had a couple of viruses and a ton of spyware. One of them I had a really tough time with. Every time she opened up Internet Explorer it would give her a C++ Library Runtime Error and shut IE down. After researching on the internet for awhile I found an old thread on a computer message board that suggested actually reinstalling the spyware that caused it (it was a search assistant just like coolwebsearch) and then uninstalling it the correct way. Apparently one of the spyware removal programs I used only pulled part of it out which was why she was getting errors. I downloaded the program and then went into Control Panel and found it in Add/Remove Programs. After uninstalling it and rebooting IE ran fine.

I don't know if this will help you at all. I have never dealt with coolwebsearch and don't know if it can be simply uninstalled. If it can't, then probably that site that Dan Murphy linked for you might be your best bet.

 

[phorsenuf]

Originally posted by Dan Murphy
Looks at this, then click on the right there and give it a try.........

http://www.webroot.com/wb/news/spywarethreat/archive.php?threat=coolwebsearch

It is one of the several programs I have that work very well keeping things clean.

I down;aoded Spyseeker (to disk) and the installed it on the boys computer. It worked and found 23 item, one of them being coolsearch whatever thingie and I removed it but its still happening.

I cannot connect to the internet thru their computer because of it.
Any other suggestions? Did I even copy the thing you were referring to Dan? LOL

I'm slowly going insane..........

 

[oogieboogie]

could you download mozilla, put in on a disk and install it on the boys' computer? That could help you get on the internet from their computer while you work on a fix.

Also, you might want to download Hijack This This program might help you locate and delete the coolwebsearch trojan.

I also download a free trial version of Trojan Hunter and that also helped clean up some of the issues.

Also, get CWShredder It's specifically deals with coolwebsearch. I used that after I did a spybot, ad-aware and that seemed to kill it.

You should boot up the computer in safe mode just to be sure.

 

[phorsenuf]

Originally posted by oogieboogie
could you download mozilla, put in on a disk and install it on the boys' computer? That could help you get on the internet from their computer while you work on a fix.

Also, you might want to download Hijack This This program might help you locate and delete the coolwebsearch trojan.

I also download a free trial version of Trojan Hunter and that also helped clean up some of the issues.

Also, get CWShredder It's specifically deals with coolwebsearch. I used that after I did a spybot, ad-aware and that seemed to kill it.

You should boot up the computer in safe mode just to be sure.

I downloaded and installed CWshredder and that said it cleaned everything up but it still goes to that about:blank page when you try to access the internet.
I installed Mozilla but that wouldn't connect.

Trojanhunter kept freezing up on me.
The only thing I haven't tried was hijack this, but that had a lot of warnings about what to delete and what not too

I'm sooooo confused.......

 

[sweet angel]

I had a problem accessing Internet Explorer awhile ago...turned out it was my Norton firewall.

 

[WillyJ]

Here's a program that fixes winsock 2 problems that might work. . ISP-Fix- Zip file


There's step-by-step instruction on how to remove the virus manually HERE but it looks like it'd be quite an ordeal. . might try the ISP Fix first and then tackle it manually as a last resort. .

Good luck with it!

 

[oogieboogie]

are you on a router? you might have to reset the router first before trying to connect to the internet again. You might have had your IP released.

If you have a router, try this - in this sequence:

1. turn of the computer
2. turn of the router
3. turn of the cable modem
leave everything off for at least 5 minutes

4. turn on the cable modem - wait till it establishes signal
5. turn on the router - wait about 1-2 minutes
6. turn on the computer

does it connect now?

 

[Shelle&Dave]

goes to that about :blank page when you try to access the internet

Woah...wait. When you open your browser and it goes to that blank page have you tried to type in another website address, or look at a site listed in your favorites? Maybe this is too easy, but now it sounds like your problem is it changed your homepage to the blank page. If that's the case it's easy to change your homepage back to whatever you want it to be.

 

[phorsenuf]

Originally posted by Shelle&Dave
Woah...wait. When you open your browser and it goes to that blank page have you tried to type in another website address, or look at a site listed in your favorites? Maybe this is too easy, but now it sounds like your problem is it changed your homepage to the blank page. If that's the case it's easy to change your homepage back to whatever you want it to be.

I can change my website address but the virus just changes it back. If type in a website or try to do a search I go nowhere but to that about:blamk page.

I'm going to try the ISP-fix and then disconnecting everything and see if that works.......


P.s. Thanks for all your help! Please keep the ideas coming

 

[Dan Murphy]

See if you can get to this and do a scan

http://www.pandasoftware.com/activescan/com/activescan_principal.htm

 

[Towncrier]

You need a program called "About:Buster" that is specifically written to remove the about:blank browser hijacker. You can find it by doing a google search or you can use the following link:

http://www.majorgeeks.com/download4289.html

Good luck. This is a nasty one.

 

[phorsenuf]

Originally posted by Towncrier
You need a program called "About:Buster" that is specifically written to remove the about:blank browser hijacker. You can find it by doing a google search or you can use the following link:

http://www.majorgeeks.com/download4289.html

Good luck. This is a nasty one.

Well, I think this program found the problem but I can't get rid of it. It comes up with these 3 things

C:\\windows\system32\javavl32.exe
C:\\windows\system32\msnb.exe
C:\\windows\system32\pobsr.dat


It says it removes them but then I get an alert from one of my programs that after I reboot then the java one keeps coming back. I looked thru the computer and can't find it. Help!
My next option is to just say the heck with it and just restore it back to its factory settings. Extreme I know but I'm getting a little fed up! LOL

 

[Patch'sD]

I would try a System Restore. If you have XP this should be running. You will have to hit a key, I believe F8 as you are bringing up the processor. Once the System Recovery or whatever screen comes up you should be given the option to recover your system to certain dates. Pick one that is well before the problem happened, it restores all settings to that point in time. Once that is done run the spyware software again to get rid of those pesky problems and reinstall all of the Pop-up Blockers and other Spyware programs