Although it was made to remove CoolWebSearch, this should remove any spyware or adware from your computer
Download the above files and follow below instructions.
IMPORTANT: If you are using Windows XP disable "Xp's file recovery program before removing ANY virus because if you don't you will get the virus back when windows recovers files.
1. RUN CWShredder. Drag the CWShredder program out of its zip file. Close all browsers and other running programs. Click “Fix” to run it. (For more detail on this tool, see CWShredder – recommended for all users.) NOTE: I now recommend running CWShredder first because some current versions of CoolWebSearch block Ad-Aware and similar tools from working effectively. CWShredder is now an essential tool.
RUN AD-AWARE. Install Ad-Aware. Update it before running it. Run it. Let it remove everything.
NOTE: For parasites that are currently running, Ad-Aware may not be able to remove them on the first pass. It may only be able to disable the auto-launch which activates them at computer start-up. Usually it will ask you if you want it to try again after a reboot. Say yes, then reboot. Even if it doesn’t ask, rebooting and running it again is a good idea.
(OPTIONAL for more advanced users: Install and run Spybot S&D. In most cases you can safely remove all red-colored items it identifies; but use your discretion with respect to its recommendations.)
This is a usefull for reading your host file that you may also want to download.
2. If the above fails:
First look for the following files and if you have them, delete them:
avserve.exe
_.exe
wupdater.exe
se.exe
These next two you have to careful with:
Widows has a file called msconfig.exe that is needed by windows but there is a virus file called msconf.exe or msconfg.exe that needs to be deleted. Notice they look almost the same.
The next file is the same way. svchost.exe is needed by windows XP but there is a virus filed called svhost.exe that needs to be deleted. Again they look almost the same.
Then run CWS.SmartKiller. The CWS.SmartKiller tool attacks the CoolWebSearch.SmartSearch parasite which can disable CWShredder and other leading antiparasite programs.
Run "regedit", do a search for CoolWebSearch and delete anything refering to it in your registry.
Be sure SpyBot is running on the highest sucurity level and reboot your computer.
Repeat everything in section "1" then reboot again.
Run "regedit", do a search for CoolWebSearch. If there is nothing there, the virus is gone.
If you do however find a referance to CoolWebSearch this time, you have a more serious problem and the virus will more then likely need to be found and manually removed.
Run "msconfig" and write down everything that is running on startup.
99 times out of a hundred,,, one of the files running at start up is the host file that triggers CoolWebSearch. Finding which one can be tricky. It is best to do a search on each file if you are not sure which files need to be running and see where they are. If you are not sure after that do a search on the web for that file name to see what it does. If you can't find the file with a web search, then more then likely it is uneeded.
Now one at a time. Uncheck one of the uneeded files, save it and reboot.
Run "regedit", do a search for CoolWebSearch.
If you still find a referance, run "msconfig" and uncheck another file
Repeat this untill the host file is found.
If you don't find the host file this way,,,here is another site that may help http://www.spysweeper.com/remove-coolwebsearch.html.
If this doesn't get it, then you may have the virus attached to a critical file and may be looking at having to reinstall windows.
note: Once you know the virus is killed you can turn "file recovery" back on.
Now that you gotten rid of the viruses, you want to keep them off! The most effective way to do this is to run your windows firewall at the medium sucurity level and then download and install ZoneAlarm. It is alot better firewall then what comes with windows. You can also run this at medium level.
more downloads here