CoolWebSearch.alfasearch Description:
CoolWebSearch.alfasearch sets your Home Page,
Search Page, Search Bar, Search Url, Default Page
Url and Search Assistant to www.alfa-search.com.
The hijacker is implemented as a visual basic
script, that runs at startup. The hijacker also
puts a custom style sheet on your hard drive
named 'readme.txt'.
CoolWebSearch.alfasearch Automatic Removal:
Using Spyware Doctor
to remove CoolWebSearch.alfasearch AUTOMATICALLY!
Sponsored Links:
CoolWebSearch.alfasearch Manual Removal:
Please follow the
instructions below if you would like to remove
CoolWebSearch.alfasearch manually. Please notice
that you must follow the instructions very
carefully and delete everything that is
mentioned. In most cases the removal will fail if
one single item is not deleted.
- Start your computer in safe mode.
- Start the registry editor. This is done by
clicking Start then Run. (The Run dialog will
appear.) Type regedit and click OK. (The
registry editor will open.)
- Browse to the key:
'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \
Windows \ CurrentVersion \ Run'
- In the right pane, delete the value called 'Windows Security
Assistant', if it exists.
- Browse to the key:
'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \
Windows \ CurrentVersion \ RunServices'
- In the right pane, delete the value called
'Windows Security Assistant', if it exists.
- Browse to the key:
'HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \
Windows \ CurrentVersion \ Run'
- In the right pane, delete the value called
'Windows Security Assistant', if it exists.
- Exit the registry editor.
- Start Windows Explorer and delete:
%SystemDir% \undll32.vbe
%SystemDir% \eadme.txt
Note: %SystemDir% is a variable. By
default, this is C:\Windows\System (Windows
95/98/Me), C:\WINNT\System32 (Windows
NT/2000), or C:\Windows\System32 (Windows XP).
- Start the registry editor. This is done by
clicking Start then Run. (The Run dialog will
appear.) Type regedit and click OK. (The
registry editor will open.)
- Use the search function in the registry
editor to find www.alfa-search.com and restore
all the values that CoolWebSearch.alfasearch
has changed. (CoolWebSearch.alfasearch has
changed your Home Page, Search Page, Search
Bar, Search Url, Default Page Url and Search
Assistant to www.alfa-search.com)
- Exit the registry editor.
More
Removal Instructions for Adware/Spyware Programs -
'C'
|