“CoolWebSearch is a particularly malevolent form of ad-ware. It’s characterized by the presence of a stubborn BHO (Browser Helper Object).

The BHO it installs changes your Internet Explorer home page and breeds innumerable popup ads. (BHO’s are found at location 19.)

If you use Silent Runners, you’ll notice a BHO with a strange file name and a DLL extension. If you delete the BHO registry key, delete the DLL file and reboot, you’ll find that a new BHO with a different strange name has taken its place. No matter how many times you delete it, it keeps coming back under a different name. Unfortunately, Silent Runners doesn’t identify any other suspicious program….

We’ve developed a simple, four-step removal procedure for NT-type operating systems. (The AppInit_Dlls value doesn’t exist in the registry of Windows 95, Windows 98, Windows 98 SE, or Windows Millennium, so the procedure doesn’t apply. If launched under one of these operating systems, the scripts will simply refuse to run.)

Like any disinfection procedure, it’s a bit risky — it deletes an important registry key and subsequently restores a revised version. If something goes wrong, your PC may no longer work normally.
You use this procedure at your own risk!”