Anyone ever gotten rid of the coolwebsearch trojan?

[Mr. Fed]

Looks like I picked it up on my laptop.  Tried Spybot S&D, Malwarebytes, CWshredder.  No joy.  Anyone have any luck?

[Caine]

nothing specific to that pile of S, but if the main anti-malware systems haven't wiped it, you may want to consider a nuke & rebuild.  it's been a long while since that junk was on any machine i had and iirc, it was gone after i dug around in the registry and wiped out some entries.  it seems they may have hardened the installation against removal. 

how much did those utilities help?  what traces are still present afterwards?  how much control do you have now and does it prevent you from running the registry editor or other programs?

your best bet may be to boot the computer into safe mode with networking and copy all of you docs to another computer.  or if you want to be extra careful, pull the hard drive, attach it to a usb>sata/IDE device and read the files that way (after scanning on the clean one of course)

[morlac]

TDSkiller worked on one I had.  though it depends on what flavor of the virus you have.  i was about a 20 mins from nuking and reinstalling but glad I did not.

[Tokek]

Check out http://www.bleepingcomputer.com/. I helped removed them while I was actively volunteering there but I haven't done it since I've moved back to Indonesia so I'm out of practice and out of the loop on what's new.

[papasmurff]

I know this may sound odd... but when removing any type of spyware it is best done in safe mode.  I have run malware bytes on a computer without being in safe mode and it doesn't do anything... when i switch over... it picks up all the pieces and clears them out...  just a suggestion before the nuke and rebuild process...

[Punisher]

I know this may sound odd... but when removing any type of spyware it is best done in safe mode.  I have run malware bytes on a computer without being in safe mode and it doesn't do anything... when i switch over... it picks up all the pieces and clears them out...  just a suggestion before the nuke and rebuild process...

This plus....

goto all the temp folders for each user and in the windows folders and delete them. Also open msconfig and see if it's in there and look at the path and nuke that as welll (usually in userdata or something and may be a weird fold like jeille or some other random letters.
Doing the above from a winpe or or other boot disc may work better.