CoolWebSearch.ehttp manual removal:
Delete registry values:Browse to the key:'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
Delete value 'AddClass'
Browse to 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix'
Replace 'http://ehttp.cc/?' with 'http://'.
Delete files:AddClass.exe
Post Comment:
Attention: Use this form only if you have additional information about CoolWebSearch.ehttp parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Comments from visitors:
1. by Guest. 2004-11-13 15:11:04
This spyware got my machine and even Norton did not get it. I have lost a few days of Internet access due to it, but now it all works. They really need to start treating people who infect computers as criminals. I have lost 6 computers in the last 5 years to viruses.
I have the problem also from that ehttp.cc but the registry 'HKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows CurrentVersion URL DefaultPrefix' i have found it but where is the text ehttp.cc ?