|
CoolWebSearch.MWSearch Spyware Information
| Name: |
CoolWebSearch.MWSearch |
| Category: |
Spyware |
| Advice: |
Remove |
| Risk: |
Elevated Risk
Elevated threats are usually threats that fall into the range of adware in which data about a user's habits are tracked and sent back to a server for analysis without your consent or knowledge. |
| Description:
|
MWSearch adds a search toolbar to Internet Explorer and hijacks the default search page.
MWSearch (morwillsearch.com) is associated with CoolWebSearch and may be seen in conjunction with the CWS about:blank hijack. The installer alters security settings by adding the domain morwillsearch.com to the the Internet Explorer Trusted sites zone. It is installed via ActiveX from infected web pages.
MWSearch is known to be associated with spammming and porn.
|
| Signatures:
|
process: search-upgrade-setup.exe: MD5 Hash: 007429856f3dfba5f5b...
process: m00.exe: MD5 Hash: 55bebba586ce8f0b4e9...
process: jzjzmfbp.exe: MD5 Hash: a2b4e416e563fab3082...
process: loadppc.exe: MD5 Hash: 00c78bb2557c26d6a43...
process: m00.exe: MD5 Hash: c5ea2c1862a57885cf0...
process: loadppc.exe: MD5 Hash: 2dc17b5124bb647da21...
process: load03.exe: MD5 Hash: 65ed1319a4e091c962a.. |
| Type: |
Spyware - Spyware's primary purpose is to collect demographic and usage information from your computer, usually for advertising purposes. Spyware usually that 'sneaks' onto a system or performs other activities hidden to the user. Spyware programs are usually bundled as a hidden component and downloaded from the Internet. These modules are almost always installed on the system secretively and try to run secretively as well. |
Top Spyware Visited Pages:
IEPlugin - Alias: IMIServer IEPlugin, Webplugin, BHO3Lib, ExplWWW, IExpl, MimarSinan, Win Server, winobject, TrojanDow - 81 visits
webHancer - Alias: Customer Companion, Webhancer Customer Companion, SpeedRank - 52 visits
Spyware.SearchAssistant - Alias: Troj/StartPa-EI - 48 visits
007.msnnames - Alias: access.ocx, jokes.ocx, StopLiteCtrl, StopLite, 007installer - 43 visits
PowerReg Scheduler - 43 visits
Aureate - Alias: Aureate Spy, Radiate - 39 visits
VX2.LocalNRD - Alias: LocalNRD - 37 visits
CWS.Cassandra - 35 visits
C2.Lop - Alias: C2 Media, Lop, LopAdvert, MP3Search, MpAdvert, TrojanClicker.Win32.Rotarran - 34 visits
Stealth Web Page Recorder v. 1.1 - 31 visits
Random Spyware Pages:
Unclassified.Spyware.Bundles
CommonSearch VCatch
Transponder.Pynix
Look2Me - Alias: Spyware.Look2Me, ZestyFind
Stealth Web Page Recorder v. 1.1
Unclassified.Spyware.39
CoolWebSearch.SearchX - Alias: Troj/Krepper-G
Spyware.Winspoe
Unclassified.Spyware.61
Spytech shadow
|
