reply to nklb
Finding out who benefits from CoolWebSearch is easy: let a computer get infected and then surf on it.CWS delivers pop-ups and search hijacks that favor its customers -- few of which are located offshore.
Right - the money starts & ends mostly in N.America: the offshore component is the malware-for-hire layer. With good legislation users &/or regulatory (FTC) could go after the businesses that hire CWS.
