|
|
CoolWebSearch Cookie Information
| Name: |
CoolWebSearch |
| Category: |
Cookie |
| Advice: |
Remove |
| Risk: |
Low Risk
Low risk threats pose a very low risk or no immediate danger to your computer or your privacy, however these types of applications may profile user online habits, but only according to specific privacy policies stated in the applications End-User License. These types of threats generally borderline on being a threat to being a standard application that has a complex license agreement that you knowingly installed. |
| Description:
|
CoolWebSearch is a name given to a wide range of different browser hijackers. Though the code is very different between variants, they are all used to redirect users to coolwebsearch.com and other sites affiliated with its operators.
CoolWebSearch is part of a strain of trojans that have recently been identified that all have one thing in common: they install through the ByteVerify exploit in the MS Java VM and change the IE homepage, search page, search bar, etc.
CoolWebSearch Symptoms:
- Hijacks to various search engines. Different variants of CoolWebSearch will redirect you to different sites.
- When a URL is mistyped in the browser, CoolWebSearch will redirect the page to affiliate websites as well as CoolWebSearch.com.
- Installs bookmarks to adult websites in the favorites menu.
- Installs toolbars into the browser.
- Slows down PC.
- Can cause reboots.
- Targets anti-spyware websites, usually vendors of spyware removal tools. Once infected with CoolWebSearch, you may be unable to visit these websites to download their products.
- Will open porn popups if it thinks the website being viewed is pornographic in nature.
- Can cause significant slowdowns when attempting to type into a browser.
- Will add CoolWebSearch.com to the trusted sites list.
CoolWebSearch has a number of variants:
CWS.Aboutblank
IE pages changed to about-blank.ws and 213.159.118.226 (1-se.com), hijack returning on system restart. This variant does everything in its powers to redirect you to a domain owned by 1-se.com. IE is hijacked to it, the hosts file is replaced to redirect about 100 porn and CWS domains to 1-se.com, and a randomly named stylesheet is dropped that redirects to 1-se.com when certain keywords appear in webpages.
CWS.Smartfinder
IE hijacked to nkvd.us and smart-finder.biz, redirections to nkvd.us and smart-finder.biz when typing incomplete URLs into address bar.
CWS.Datanotary
There only were several threads of users experiencing enormous slowdowns in IE when typin messages into text boxes. Delays of over a minute before the typed text appeared were reported. Also some redirections to www.datanotary.com were reported. The hijack installed a stylesheet that used a flaw in Internet Explorer and allowed a .css stylesheet file to execute Javascript code. The code in the file was encrypted, and spawned a popup off-screen that did the redirecting. However, this file was called on almost every action taken in IE, slowing it down - this was the most obvious when typing text.
CWS.Gonnasearch
IE hijacked to gonnasearch.com.
CWS.Xrectar
A browser helper object that changes your Home Page and open pop-up windows based on the currently visited url.
CWS.Xplugin
also known as TROJ_ESEPOR.A, TROJ_ESEPOR.B or TROJ_ESEPOR.C, operations seems to vary from opening pop-up windows, to changing search results from popular search engines.
|
| Type: |
Cookie - Cookies are small files that are created by your web browser when you visit sites on the Internet. They can be used to track your visits to certain web sites and can provide companies with information about frequency of visits and other profile information. The user is usually not aware that their surfing habits are being tracked. |
Top Cookie Visited Pages:
bbs.darkcollection - 1719 visits
Sexmaxx.com - 1101 visits
Dragonballxxx - 725 visits
XXXMovies - 638 visits
WWW.teenax.com - 627 visits
Zoofil - 493 visits
XXXPower.net - 444 visits
TurkPorn - 383 visits
The HunsYellowPages - 338 visits
PornoRiver.com - 329 visits
Random Cookie Pages:
Ads.pulsetv.com/al
OnWebMedia
IE Loader
Dialoff TELCOWEB
Cok.Accoona
ICDirect.com
CamGirlsLive
Stat.Onestat
SpywareCleaner
Friend ToolBar
|
|
