CoolWebSearch.iefeatsl is a browser hijacker, implemented as two browser helper objects. If your homepage is redirected to 'www.search-aid.com' or if the browser's address is 'res://mshp.dll/index.html', you probably have this hijacker on your system.
There are many variants of CoolWebSearch.iefeatsl, trying to hide using pseudo-random names for its files and folders.
Classification: Adware
Variants
CoolWebSearch CoolWebSearch.alfasearch CoolWebSearch.control CoolWebSearch.cpan CoolWebSearch.ctrlpan CoolWebSearch.dnse CoolWebSearch.dnserr CoolWebSearch.ehttp CoolWebSearch.excel10 CoolWebSearch.explorer32 CoolWebSearch.iefeatsl CoolWebSearch.iefeatslupdate CoolWebSearch.keymgrldr CoolWebSearch.ld CoolWebSearch.madfinder CoolWebSearch.mssearch CoolWebSearch.mstaskm CoolWebSearch.msupdate CoolWebSearch.msupdater CoolWebSearch.mtwirl32 CoolWebSearch.olehelp CoolWebSearch.quicken CoolWebSearch.qttasks CoolWebSearch.soundmx CoolWebSearch.sys CoolWebSearch.time CoolWebSearch.winproc32 CoolWebSearch.xplugin CoolWebSearch.xpsystem
Files
IEFEATSL.DLL, MSIESH.DLL, mshp.dll, syskd.dll, winug.dll, iefn.dll, ield32.dll, winkq.dll, IEAL.DLL, wincq32.dll, SYSUT32.DLL, msea32.dll, IEMB32.DLL, SYSBS32.DLL, sysca32.dll, msqx32.dll, winmd32.dll, winph32.dll, winxw32.dll, mshy.dll
Vendor
CoolWebSearch.com
Detection
Bazooka Adware and Spyware Scanner detects CoolWebSearch.iefeatsl. Bazooka is freeware and detects spyware, adware, trojan horses, viruses, worms, etc
Manual removal (2 Steps)
1. go to control panel > add/remove programs and remove something called iefeatsl. This takes care of the problem.
2. Please follow the instructions below if you would like to remove CoolWebSearch.iefeatsl manually. Please notice that you must follow the instructions very carefully and delete everything that is mentioned. In most cases the removal will fail if one single item is not deleted. If Bazooka still detects CoolWebSearch.iefeatsl after stepping through the removal instructions, please double-check by stepping through them again.
Start the registry editor. This is done by clicking Start then Run. (The Run dialog will appear.) Type regedit and click OK. (The registry editor will open.)
Delete 'HKEY_LOCAL_MACHINE \ SOFTWARE \ Classes \ CLSID \ {587DBF2D-9145-4c9e-92C2-1F953DA73773}', if it exists.
Delete 'HKEY_LOCAL_MACHINE \ SOFTWARE \ Classes \ CLSID \ {FD9BC004-8331-4457-B830-4759FF704C22}', if it exists.
Delete 'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Browser Helper Objects \ {587DBF2D-9145-4c9e-92C2-1F953DA73773}', if it exists.
Delete 'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Browser Helper Objects \ {FD9BC004-8331-4457-B830-4759FF704C22}', if it exists.
Exit the registry editor.
Restart your computer.
Delete the directories listed below. It is likely that only one of them will be present:
%AppData%\IEFEATSL\
%AppData%\syskd\
%AppData%\winug\
%AppData%\iefn\
%AppData%\ield\
%AppData%\winkq\
%AppData%\IEAL\
%AppData%\wincq\
%AppData%\SYSUT\
%AppData%\msea\
%AppData%\IEMB\
%AppData%\SYSBS\
%AppData%\sysca\
%AppData%\msqx\
%AppData%\winmd\
%AppData%\winph\
%AppData%\winxw\
%AppData%\winxw\
%AppData%\mshy\
Note: %AppData% is a variable (?). By default, this is 'C:\WINDOWS\Profiles\%UserName%\Application Data\' or 'C:\WINDOWS\Application Data\' (Windows 95/98/Me) or 'C:\Documents and Settings\%UserName%\Application Data\' (Windows NT/2000/XP).
Note: %UserName% is a variable (?). This is set to your username.
Start Microsoft Internet Explorer.
In Internet Explorer, click Tools -> Internet Options.
Click the Programs tab -> Reset Web Settings.
Worked for me
