How can I remove the Coolwebsearch virus that is causing additional windows to open when I start Firefox?
When I open Firefox and go to Google news, an additional window opens for registrydefender or news9today. Even though I close it, it keeps re-opening. I have run various malware and antivirus programs but cannot remove it.
All Replies (6)
Have you tried CWShredder? Its sole purpose in life is to remove stubborn CoolWebSearch infections.
Thanks for the reply. I ran the CWS Shredder and it indicated that I do not have the CoolWebSearch so something else is causing these Pop ups and Redirects. I have the Popup blocker on and have tried to block the redirected sites but new ones keep appearing and my malware software and antivirus are not detecting anything.
A few other ideas.
- Rule out a Firefox add-on as the cause
- Try a specialized malware removal forum
Regarding #1:
Your plugin list shows the Mozilla ActiveX plugin, which is defunct and should be uninstalled ASAP. It isn't reliable above Firefox 1.5, and may have unpatched security problems. How to uninstall.
Before proceeding, you probably should make a backup of your computer for safekeeping. To back up Firefox, see Backing up your information.
Next, try starting Firefox in Firefox Safe Mode. Be careful not to "reset" anything permanently if you didn't back up.
Does that fix it? If not, try creating a new (blank) profile: Managing profiles.
Does that fix it? If so, you can try to determine which add-on is to blame, or move key settings like bookmarks from your current profile to the new one. See: Recovering important data from an old profile.
Regarding #2:
There are several well regarded forums. One typical request is that you generate a detailed log of what is running on your computer. For example:
HijackThis Tutorial - How to use HijackThis to remove Browser Hijackers & Spyware - BleepingComputer
Malware and Spyware Cleaning Guide - Geeks to Go!
Before diving into that, have you tried these easier-to-use tools?
HouseCall : http://housecall.trendmicro.com/
Malwarebytes Anti-malware : http://www.malwarebytes.org/mbam.php
SUPERAntiSpyware : http://www.superantispyware.com/
Gewysig op deur jscher2000 - Support Volunteer
Thank you. I will try your suggestions. I no longer believe that I have the CWS problem but it may be due to Mozilla Firefox plug ins or even my HughesNet satellite software. I have been working with Malwarebytes to try and fix the problem, but with no success.
I have finally solved the problem with extensive help from support at Malwarebytes using the bleepingcomputer.com tutorial, as you mentioned and downloading their free ComboFix program. Thanks again for your help.