CoolWebSearch Removal: Remove CoolWebSearch Forever

Let our support team solve your problem with CoolWebSearch and repair CoolWebSearch right now!

Leave the detailed description of your CoolWebSearch problem in the form below. Our support team will contact you in several minutes and give a step-by-step instruction on how to fix CoolWebSearch problem. Please be specific. Do your best describing the problem. This will help us recommend right and complete CoolWebSearch problem removal solution.

Describe your problem here and we'll contact you in several minutes:

We'll reply you in 10 minutes or less
* Name:
* E-mail:
* Problem summary:
* Detailed problem
description:

We'll contact you in 10 minutes or less after you click on this button! Individual solution guaranteed!

Warning:

1) We hate spam as much as you do. We will not share your email with any third party or publish it anywhere. Your email is used only to contact you and give you CoolWebSearch removal solution.
2) All fields of this form are obligatory.

Guaranteed Problem Solution
Software Industry Professionals Member
Threat's description and solution are developed by Security Stronghold security team. Let professionals make your problems solved now!
Download solution for CoolWebSearch and addclass.exeaddclass.exe now!

What is CoolWebSearch? Technical details of CoolWebSearch problem and CoolWebSearch removal tool

Methods for manual CoolWebSearch removal

Free download of a program that will solve your problem automatically

Free instant professional support in solving CoolWebSearch error from our Security Support Team

Threat's profile

Threat indicator: HIGH
Name of the threat: CoolWebSearch
Command or file name: addclass.exeaddclass.exe
Threat type: Hijacker
Affected OS: Win32 (Windows 9x, Windows XP, Windows Vista)

CoolWebSearch intrusion method

CoolWebSearch copies its file(s) to your hard disk. Its typical file name is addclass.exeaddclass.exe. Then it creates new startup key with name CoolWebSearch and value addclass.exeaddclass.exe. You can also find it in your processes list with name addclass.exeaddclass.exe or CoolWebSearch.

If you have further questions about CoolWebSearch, please fill in the form above and we'll contact you shortly.

» Download program to remove CoolWebSearch (CoolWebSearch Removal Tool)

Recommended Solution

If you are not sure what to delete, use our award winning program - CoolWebSearch Removal Tool.

CoolWebSearch Removal Tool will find and fully remove CoolWebSearch and all problems associated with CoolWebSearch virus.

Fast, easy, and handy, CoolWebSearch Removal Tool protects your computer against CoolWebSearch that does harm to your computer and breaks your privacy. CoolWebSearch Removal Tool scans your hard disks and registry and destroys any manifestation of CoolWebSearch. Standard anti-virus software can do nothing against malicious programs like CoolWebSearch. Remove CoolWebSearch straight away!

» Download CoolWebSearch Removal Tool now for free

How to fix CoolWebSearch

This problem can be solved manually by deleting all registry keys and files connected with CoolWebSearch, removing it from starup list and unregistering all corresponding DLLs. Additionally missing DLL's should be restored from distribution in case they are corrupted by CoolWebSearch.

To get rid of CoolWebSearch, you should:

1. Kill the following processes and delete the appropriate files:

• addms32.dll
• alg32.exe
• ALLE.DLL
• appkc32.dll
• asd3.dll
• avext.dll
• backgrrd.gif
• be11f25e.exe
• BIGC.DLL
• boontconf.exe
• censored youngest porn.url
• cws.txt
• dlsmgr.exe
• down0.exe
• ebcp.dll
• free hidden cams world.url
• free spy cam.url
• free web cams chats.url
• free xxx pics & movies.url
• fresh xxx pics & movie.url
• get this 4 free.url
• giantantispywaremain.exe-0f089a5a.pf
• hosts
• hosts.is
• hpdj61r2.ini
• htass.dll
• htassui.exe
• image.dll
• inst_debug.log
• IPAW.DLL
• IPVD.DLL
• javaez.dll
• LCEJHO.DLL
• lookupsys.exe
• message.exe
• msew32.dll
• mshelper_beta.dll
• msqsb.dll
• mssearch.dll
• msspi.dll
• msz{.dll
• netdaemon
• netoe32.dll
• netps32.dll
• nhmn.dll
• ntxv32.dll
• POPCORN64.EXE
• sdk??.dll
• SELECT.EXE
• seqsb.dll
• SOCKS.EXE
• spoolsvu.exe
• sunasservalert.exe-0421e014.pf
• super xxx pics.url
• tbar.exe
• tbar.exe-0d36889e.pf.
• updatelavasoft.exe
• winbas12.exe
• winshow.*
• winupdate*.exe
• winupdate.com
• winupdate.exe
• won.---
• young masha sucking huge dick until her lips teared open.url
• ~ fully categories porn database. enjoy!.url
• ~ new porn pics everyday.url

Warning: you should delete only those files which checksums are listed as malicious. There may be valid files with the same names in your system. We recommend you to use CoolWebSearch Removal Tool for safe problem solution.

2. Delete the following malicious folders:

• C:\Windows\msew\
• C:\Documents and Settings\User\Application Data\iefeatsl\
• C:\Documents and Settings\User\Application Data\ienh\
• C:\Documents and Settings\User\Application Data\iewr\
• C:\Documents and Settings\User\Application Data\mskz\
• C:\Documents and Settings\User\Application Data\sysrd\
• C:\Documents and Settings\User\Application Data\systh\
• C:\Documents and Settings\User\Application Data\sysxd\
• C:\Documents and Settings\User\Application Data\winus\
• C:\Documents and Settings\User\Application Data\winzf\
• C:\Program Files\common files\msinfo\
• C:\Program Files\internet explorer\toolbar\
• C:\Windows\inet20026\
• C:\Windows\inet20091\
• C:\Program Files\dlsmgr\
• C:\Windows\nsdb\

3. Delete the following malicious registry entries and\or values:

• Key: clsid\{00110011-4b0b-44d5-9718-90c88817369b}

• Key: clsid\{086ae192-23a6-48d6-96ec-715f53797e85}

• Key: clsid\{150fa160-130d-451f-b863-b655061432ba}

• Key: clsid\{17da0c9e-4a27-4ac5-bb75-5d24b8cdb972}

• Key: clsid\{1f48aa48-c53a-4e21-85e7-ac7cc6b5ffb2}

• Key: clsid\{2d38a51a-23c9-48a1-a33c-48675aa2b494}

• Key: clsid\{2e9caff6-30c7-4208-8807-e79d4ec6f806}

• Key: clsid\{30192f8d-0958-44e6-b54d-331fd39ac959}

• Key: clsid\{3f388100-865f-43e3-9a30-b56bb098d927}

• Key: clsid\{4b607c1d-43b2-4f6f-b76e-96eb3233bded}

• Key: clsid\{587dbf2d-9145-4c9e-92c2-1f953da73773}

• Key: CLSID\{6CC1C91A-AE8B-4373-A5B4-28BA1851E39A}

• Key: clsid\{79369d5c-2903-4b7a-ade2-d5e0dee14d24}

• Key: clsid\{799a370d-5993-4887-9df7-0a4756a77d00}

• Key: CLSID\{8003a1f9-de91-4eb2-b97c-fe3a37db0cab}

• Key: clsid\{92f02779-6d88-4958-8ad3-83c12d86adc7}

• Key: CLSID\{98dbbf16-ca43-4c33-be80-99e6694468a4}

• Key: CLSID\{a55581dc-2cdb-4089-8878-71a080b22342}

• Key: CLSID\{b81197b4-4e57-4db6-ae1d-23e49355bb2d}

• Key: CLSID\{b847676d-72ac-4393-bfff-43a1eb979352}

• Key: clsid\{cf021f40-3e14-23a5-cba2-717765721306}

• Key: CLSID\{d3c4dbc7-bcd0-4864-88d3-7b93c73b515a}

• Key: clsid\{e2ddf680-9905-4dee-8c64-0a5de7fe133c}

• Key: CLSID\{e3eebbe8-9cab-4c76-b26a-747e25ebb4c6}

• Key: CLSID\{e7afff2a-1b57-49c7-bf6b-e5123394c970}

• Key: clsid\{fd9bc004-8331-4457-b830-4759ff704c22}

• Key: clsid\{ff1bf4c7-4e08-4a28-a43f-9d60a9f7a880}

• Key: interface\{7142c3e1-1fe1-4a2a-b882-681dc7db0d30}

• Key: interface\{84f2d0d3-79de-42cd-b8bb-f7dbaebddd4e}

• Key: ml.iehlprobj

• Key: typelib\{a65529dd-4833-4784-a594-205f4a50267a}

• Key: software\gs1

• Key: software\classes\clsid\{00110011-4b0b-44d5-9718-90c88817369b}

• Key: software\classes\clsid\{086ae192-23a6-48d6-96ec-715f53797e85}

• Key: software\classes\clsid\{150fa160-130d-451f-b863-b655061432ba}

• Key: software\classes\clsid\{17da0c9e-4a27-4ac5-bb75-5d24b8cdb972}

• Key: software\classes\clsid\{1f48aa48-c53a-4e21-85e7-ac7cc6b5ffb1}

• Key: software\classes\clsid\{1f48aa48-c53a-4e21-85e7-ac7cc6b5ffb2}

• Key: software\classes\clsid\{2d38a51a-23c9-48a1-a33c-48675aa2b494}

• Key: software\classes\clsid\{2e9caff6-30c7-4208-8807-e79d4ec6f806}

• Key: software\classes\clsid\{30192f8d-0958-44e6-b54d-331fd39ac959}

• Key: software\classes\clsid\{3f388100-865f-43e3-9a30-b56bb098d927}

• Key: software\classes\clsid\{587dbf2d-9145-4c9e-92c2-1f953da73773}

• Key: software\classes\clsid\{6CC1C91A-AE8B-4373-A5B4-28BA1851E39A}

• Key: software\classes\clsid\{79369d5c-2903-4b7a-ade2-d5e0dee14d24}

• Key: software\classes\clsid\{799a370d-5993-4887-9df7-0a4756a77d00}

• Key: software\classes\clsid\{92f02779-6d88-4958-8ad3-83c12d86adc7}

• Key: software\classes\clsid\{98dbbf16-ca43-4c33-be80-99e6694468a4}

• Key: software\classes\clsid\{a55581dc-2cdb-4089-8878-71a080b22342}

• Key: software\classes\clsid\{b847676d-72ac-4393-bfff-43a1eb979352}

• Key: software\classes\clsid\{bc97b254-b2b9-4d40-971d-78e0978f5f26}

• Key: software\classes\clsid\{cf021f40-3e14-23a5-cba2-717765721306}

• Key: software\classes\clsid\{e2ddf680-9905-4dee-8c64-0a5de7fe133c}

• Key: software\classes\clsid\{e3eebbe8-9cab-4c76-b26a-747e25ebb4c6}

• Key: software\classes\clsid\{e7afff2a-1b57-49c7-bf6b-e5123394c970}

• Key: software\classes\clsid\{fd9bc004-8331-4457-b830-4759ff704c22}

• Key: software\classes\clsid\{ff1bf4c7-4e08-4a28-a43f-9d60a9f7a880}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{00110011-4b0b-44d5-9718-90c88817369b}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{150fa160-130d-451f-b863-b655061432ba}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{17da0c9e-4a27-4ac5-bb75-5d24b8cdb972}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{1e1b2879-88ff-11d2-8d96-d7acac95951f}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{1f48aa48-c53a-4e21-85e7-ac7cc6b5ffb2}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{2e9caff6-30c7-4208-8807-e79d4ec6f806}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{30192f8d-0958-44e6-b54d-331fd39ac959}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{4b607c1d-43b2-4f6f-b76e-96eb3233bded}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{587dbf2d-9145-4c9e-92c2-1f953da73773}

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6CC1C91A-AE8B-4373-A5B4-28BA1851E39A}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{799a370d-5993-4887-9df7-0a4756a77d00}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{98dbbf16-ca43-4c33-be80-99e6694468a4}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{a55581dc-2cdb-4089-8878-71a080b22342}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{b847676d-72ac-4393-bfff-43a1eb979352}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{cf021f40-3e14-23a5-cba2-717765721306}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{e2ddf680-9905-4dee-8c64-0a5de7fe133c}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{e7afff2a-1b57-49c7-bf6b-e5123394c970}

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fd9bc004-8331-4457-b830-4759ff704c22}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{ff1bf4c7-4e08-4a28-a43f-9d60a9f7a880}

• Key: software\microsoft\windows\currentversion\uninstall\{799a370d-5993-4887-9df7-0a4756a77d00}

• Key: software\microsoft\windows\currentversion\uninstall\{a55581dc-2cdb-4089-8878-71a080b22342}

• Key: software\microsoft\windows\currentversion\uninstall\{e7afff2a-1b57-49c7-bf6b-e5123394c970}

• Key: software\microsoft\internet explorerinternet0%\URLSearchHooks\{55B5630A-9715-8C99-CB77-0C50B7989809}

• Key: ae23.ae23obj

• Key: ae23.ae23obj.1

• Key: appid\{ac3f36d4-f905-4fe9-a926-eb937e66f591}

• Key: clsid\{0B6F9689-431B-4631-85CB-3CF087ECEDBD}

• Key: clsid\{1d27210e-2da2-41e2-a103-b5fd9d6a798b}

• Key: CLSID\{2862736E-7B27-418A-A4E8-F13FB2E8C945}

• Key: CLSID\{5607D0D5-3205-45F2-A125-63666696DDA0}

• Key: clsid\{9E6EC32A-7C19-4409-99E8-FC980BCDAF26}

• Key: CLSID\{a1376d2c-12eb-472b-9c8c-db24448d3c91}

• Key: CLSID\{B4E9FAC4-6DB5-4741-84C9-97923F6D5976}

• Key: clsid\{B9C571E2-8438-11D9-9E96-0004A58CF316}

• Key: HTASS.HTDP

• Key: HTASS.HTDP.1

• Key: interface\{1de9ee01-df51-49db-9bdd-5990b35c1c2a}

• Key: interface\{3d11cbe7-1eee-4c8f-ab5c-a4cf7939f1f1}

• Key: interface\{a1376d2c-12eb-472b-9c8c-db24448d3c91}

• Key: interface\{f9bdb492-37d6-4e33-b324-058b22e21ffa}

• Key: ml.iehlprobj.1

• Key: popup.pop

• Key: popup.pop.1

• Key: protocols\filter\text/plain

• Key: searchhook.searchhookobject

• Key: searchhook.searchhookobject.1

• Key: software\classes\clsid\{0B6F9689-431B-4631-85CB-3CF087ECEDBD}

• Key: software\classes\clsid\{4b607c1d-43b2-4f6f-b76e-96eb3233bded}

• Key: software\classes\clsid\{5321e378-ffad-4999-8c62-03ca8155f0b3}

• Key: software\classes\clsid\{8003a1f9-de91-4eb2-b97c-fe3a37db0cab}

• Key: software\classes\clsid\{9E6EC32A-7C19-4409-99E8-FC980BCDAF26}

• Key: software\classes\clsid\{a1376d2c-12eb-472b-9c8c-db24448d3c91}

• Key: software\classes\clsid\{B4E9FAC4-6DB5-4741-84C9-97923F6D5976}

• Key: software\classes\clsid\{b81197b4-4e57-4db6-ae1d-23e49355bb2d}

• Key: software\classes\clsid\{B9C571E2-8438-11D9-9E96-0004A58CF316}

• Key: software\classes\clsid\{d3c4dbc7-bcd0-4864-88d3-7b93c73b515a}

• Key: software\classes\clsid\{EE743367-DD25-7646-8789-0FEEC66B36C0}

• Key: software\classes\HTASS.HTDP

• Key: software\classes\HTASS.HTDP.1

• Key: SOFTWARE\Classes\Interface\{0B6EF17E-18E5-4449-86EA-64C82D596EAE}

• Key: software\classes\protocols\filter\text/plain

• Key: software\classes\typelib\{4677FF8F-7740-4A9C-9F5E-E93794A86E85}

• Key: software\microsoft\code store database\distribution units\{10003000-1000-0000-1000-000000000000}

• Key: software\microsoft\windows\currentversion\app management\arpcache\{799a370d-5993-4887-9df7-0a4756a77d00}

• Key: software\microsoft\windows\currentversion\app management\arpcache\{a55581dc-2cdb-4089-8878-71a080b22342}

• Key: software\microsoft\windows\currentversion\app management\arpcache\{e7afff2a-1b57-49c7-bf6b-e5123394c970}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{011710E1-B483-710E-97E0-2570CF3083B8}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{06522D06-C6E0-4E8D-9B00-977CACADC01E}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{08BF86DB-5C89-8478-E292-8F836A27F58B}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{0B6F9689-431B-4631-85CB-3CF087ECEDBD}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{19C03A93-83B1-4234-8B1E-97395C36CBEC}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{EE743367-DD25-7646-8789-0FEEC66B36C0}

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HTAssLib

• Key: software\microsoft\windows\currentversion\uninstall\searchassistant uninstall

• Key: software\tsa

• Key: Software\WinShow

• Key: TYPELIB\{2c671705-77a7-4592-a484-545087ed9ee8}

• Key: TYPELIB\{3d11cbe7-1eee-4c8f-ab5c-a4cf7939f1f1}

• Key: typelib\{4677FF8F-7740-4A9C-9F5E-E93794A86E85}

• Key: TYPELIB\{7e68f5f3-782c-4bcd-88df-1e3d6350de4c}

• Key: TYPELIB\{a1376d2c-12eb-472b-9c8c-db24448d3c91}

• Key: TYPELIB\{ed7a0b22-11d9-4f74-8c1d-0936efa66b3d}

• Key: TYPELIB\{f7825d95-cdd7-4e73-bfdc-846de0f336be}

• Key: winlink.ViewSource

• Key: winlink.ViewSource.1

• Key: winshow.viewsource

• Key: winshow.viewsource.1

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CF021F40-3E14-23A5-CBA2-717765721316}

• Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{12D02C08-218F-4A11-BDE1-6611ADB7B81F}
  Value: {d1ac752e-883f-4ed8-8828-b618c3a72152}

• Key: Software\Microsoft\Internet Explorer\URLSearchHooks
  Value: _{A55581DC-2CDB-4089-8878-71A080B22342}

• Key: Software\Microsoft\Internet Explorer\URLSearchHooks
  Value: {A55581DC-2CDB-4089-8878-71A080B22342}

Warning: If value is listed for some registry entries, you should only clear these values and leave keys with such values untouched. We recommend you to use CoolWebSearch Removal Tool for safe problem solution.

Next threat: AntivirusGold »

Learn more about CoolWebSearch and addclass.exeaddclass.exe »

« Back to catalog

Solution: 808
Home | Partners | Shop | Support | Contact Us | Privacy Policy | Sitemap

Copyright © 2003-2009 Security Stronghold. All Rights Reserved.