Multiple Programs – 1.xx.xx.DLL

Files called 1.00.06.dll, 1.00.08.dll, 1.01.02.dll, 1.01.03.dll or 1.01.05.dll install with a CoolWebSearch variant. The most noteworthy action this file performs is to "hijack" all of your web searches to "4-counter.com". It also generates popup ads.

There are many different variants of this adware/spyware program. Background on CoolWebSearch can be found at http://www.doxdesk.com/parasite/CoolWebSearch.html.

We would recommend removing these files using WinPatrol. First, kill them in your Active Task list. Next, remove them from your IE Helpers and Startup Programs. If all of the CWS related files aren't removed at once, they may reappear due to settings in your Windows Registry. So be on the lookout for any 6 or 8 character filenames that have no description and seem to be made of a random gathering of letters and numbers.

If you are unable to get rid of these files, you might try http://www.mysteryware.com. Scroll down to find "CoolWebShredder", a free CoolWebSearch removal tool.

Adware

Remove