05-06-2004, 12:35 AM
FYI this is apparently a very large problem.
Cool Web Search (aka about:blank) is a browser hijacker that you just can't get rid of.
If you read my post titled Maleware, it describes the symptoms.
The following is what I have gathered to date;
Ok this revised solution seems to work the best.
Updated Solution, people were having problems deleting the .dll file from safe mode/Command Prompt Only
Download reglite
install "Reglite" and run it, enter HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs into the address bar.
Double click on AppInit_DLLs to open a "Data Editor" properties window, if the bottom textfield named "Value" contains a .dll file; then this is the hidden file you need to get rid off.
You should not be able to delete this file if you try to clear the value field, IMPORTANT: take note of the path and name of the .dll file. Write it down so you do not forget it.
Rename the Folder "Windows" (This is a purple "highlighted" folder in the left hand window) to NOTWINDOWS. Simply click on the folder, click on "Edit" in the menu bar and select "Rename".
Click AppInit_DLLs again and clear the value containing the .dll and ok it. This should have removed the .dll
Rename the windows folder back to its original name "Windows".
Run SpyBot, Ad-Aware and CWShredder
Check the following three links for instructions on downloading and running the applications listed:
How to use Spybot to remove Spyware
How to use Ad-Aware to remove Spyware
How to Remove CoolWebSearch with CoolWeb Shredder
Next step will be to remove this dll file so make sure you have it noted down.
Step 1
Download KillBox
Unzip and start the application
Paste in the dir <path and name of dll as found in the appinit value box> i.e C:\Windows\System32\nameofdll.dll
Menu Select Action -> Delete on Reboot
Select File -> Add file <It should add the path automatically>
<Same Window> Select Action -> Process and Reboot
If Step 1 didn't work
Step 2
Click "Start" => "Run" and type in "cmd" (Without the quotations) and click on "Okay".
This will open a command window I will assume you have a basic knowledge of DOS if you have any problems at this point just write back I will outline the commands.
Type in dir <path and name of dll as found in the appinit value box> and press "Enter". You should see the name of the file listed.
Go to the system32 folder (This is where the .dll file will typically reside) and type attrib -R "nameofdll".dll
Carry out Step 1 again
Restart your computer in safemode
Open cmd window again as before
Type dir <path and name of dll as found in the appinit value box> and locate the dll name the dll should now have been removed and will not be listed.
While in safe mode (How do I boot into "Safe" mode?), run the 3 ad-removal programs again, just to make sure all traces are gone.
Boot up pc as normal and you should be trouble free.
Problem is when I double click on AppInt DLLs it says "no value entered"
Goddammit, I'm so fucking frustrated!
Should I just delete my whole hard drive and use the restore disks??????
Help me!!!!!
:angry: :angry: :angry: :angry: :angry: :angry: :angry: :angry: :angry: :angry:
Cool Web Search (aka about:blank) is a browser hijacker that you just can't get rid of.
If you read my post titled Maleware, it describes the symptoms.
The following is what I have gathered to date;
Ok this revised solution seems to work the best.
Updated Solution, people were having problems deleting the .dll file from safe mode/Command Prompt Only
Download reglite
install "Reglite" and run it, enter HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs into the address bar.
Double click on AppInit_DLLs to open a "Data Editor" properties window, if the bottom textfield named "Value" contains a .dll file; then this is the hidden file you need to get rid off.
You should not be able to delete this file if you try to clear the value field, IMPORTANT: take note of the path and name of the .dll file. Write it down so you do not forget it.
Rename the Folder "Windows" (This is a purple "highlighted" folder in the left hand window) to NOTWINDOWS. Simply click on the folder, click on "Edit" in the menu bar and select "Rename".
Click AppInit_DLLs again and clear the value containing the .dll and ok it. This should have removed the .dll
Rename the windows folder back to its original name "Windows".
Run SpyBot, Ad-Aware and CWShredder
Check the following three links for instructions on downloading and running the applications listed:
How to use Spybot to remove Spyware
How to use Ad-Aware to remove Spyware
How to Remove CoolWebSearch with CoolWeb Shredder
Next step will be to remove this dll file so make sure you have it noted down.
Step 1
Download KillBox
Unzip and start the application
Paste in the dir <path and name of dll as found in the appinit value box> i.e C:\Windows\System32\nameofdll.dll
Menu Select Action -> Delete on Reboot
Select File -> Add file <It should add the path automatically>
<Same Window> Select Action -> Process and Reboot
If Step 1 didn't work
Step 2
Click "Start" => "Run" and type in "cmd" (Without the quotations) and click on "Okay".
This will open a command window I will assume you have a basic knowledge of DOS if you have any problems at this point just write back I will outline the commands.
Type in dir <path and name of dll as found in the appinit value box> and press "Enter". You should see the name of the file listed.
Go to the system32 folder (This is where the .dll file will typically reside) and type attrib -R "nameofdll".dll
Carry out Step 1 again
Restart your computer in safemode
Open cmd window again as before
Type dir <path and name of dll as found in the appinit value box> and locate the dll name the dll should now have been removed and will not be listed.
While in safe mode (How do I boot into "Safe" mode?), run the 3 ad-removal programs again, just to make sure all traces are gone.
Boot up pc as normal and you should be trouble free.
Problem is when I double click on AppInt DLLs it says "no value entered"
Goddammit, I'm so fucking frustrated!
Should I just delete my whole hard drive and use the restore disks??????
Help me!!!!!
:angry: :angry: :angry: :angry: :angry: :angry: :angry: :angry: :angry: :angry:
[size=1][size=2]You're just jealous cause the voices only speak to me.
Son's of Cunniligus - personal trainer.
I speak in tongues.[/size]
[/size]
