CoolWebSearch.notepad32, also called
TROJ_STARTPAGE.G, drops a file named
notepad32.exe in C: or %WinDir% and modifies the
appropriate registry key to make notepad32.exe
start when a user attempts to open a .txt files.
notepad32.exe reinstalls CoolWebSearch.time.
Also known as: Trojan.Bookmarker.C,
CWS.Smartfinder
Files: notepad32.exe
CoolWebSearch.notepad32 Automatic Removal:
Using Spyware Doctor
to remove CoolWebSearch.notepad32 AUTOMATICALLY!
Sponsored Links:
CoolWebSearch.notepad32 Manual Removal:
Please follow the
instructions below if you would like to remove
CoolWebSearch.notepad32 manually. Please notice
that you must follow the instructions very
carefully and delete everything that is
mentioned. In most cases the removal will fail if
one single item is not deleted.
Start your computer in safe mode.
Start Windows Explorer and delete:
C: \otepad32.exe
%WinDir% \otepad32.exe
Note: %WinDir% is a variable. By
default, this is C:\Windows (Windows
95/98/Me/XP) or C:\WINNT (Windows NT/2000).
Start the registry editor. This is done by
clicking Start then Run. (The Run dialog will
appear.) Type regedit and click OK. (The
registry editor will open.)
Browse to the key:
'HKEY_LOCAL_MACHINE \ SOFTWARE \ Classes \
txtfile \ shell \ open \ command '
In the right pane, set the '(Default)' value
to:
'%SystemRoot%\system32\NOTEPAD.EXE %1'.
Exit the registry editor.
More
Removal Instructions for Adware/Spyware Programs -
'C'