|
CoolWebSearch.StartPage Browser Hijacker Information
| Name: |
CoolWebSearch.StartPage |
| Category: |
Browser Hijacker |
| Advice: |
Remove |
| Risk: |
Elevated Risk
Elevated threats are usually threats that fall into the range of adware in which data about a user's habits are tracked and sent back to a server for analysis without your consent or knowledge. |
| Description:
|
CoolWebSearch StartPage hijacks Internet Explorers start page not allowing the user to change this URL.
CoolWebSearch StartPage is one of the many CoolWebSearch spyware threat variants.
Installed via a drive by download using a known windows exploit that adds itself automatically to your trusted sites list. This allows CoolWebSearch StartPage to install without your permission.
Once installed, CoolWebSearch StartPage will change the users trusted and safe sites to allow other spyware threats to be automatically installed via a drive-by-download without your permission.
|
| Signatures:
|
process: aelr.exe: MD5 Hash: 1480f4ea955dabf4198...
process: systime.exe: MD5 Hash: fec20daf7fe78cc905f...
process: systime.exe: MD5 Hash: efae8dff465482f2e41...
process: gx9fzj83m9.exe: MD5 Hash: b31c2b082c61e523caf...
process: download_plugin.exe: MD5 Hash: 572b3c45ed01d183837...
process: winmm64.exe: MD5 Hash: b37d178863d5296ee42...
process: winaok32.exe: MD5 Hash: ...
process: winttr.exe: MD5 Hash: f3dd0ffb3e41c5f74b5...
process: systime.exe: MD5 Hash: 1582ebb92c98c0fecf7...
process: systime.exe: MD5 Hash: 1ae062acfce097c9524...
process: process.exe: MD5 Hash: 22af390c92a87f768c5...
process: process.exe: MD5 Hash: b753f81432e0135f073.. |
| Type: |
Browser Hijacker - Spyware's primary purpose is to collect demographic and usage information from your computer, usually for advertising purposes. Spyware usually that 'sneaks' onto a system or performs other activities hidden to the user. Spyware programs are usually bundled as a hidden component and downloaded from the Internet. These modules are almost always installed on the system secretively and try to run secretively as well. |
Top Browser Hijacker Visited Pages:
SuperSpider - Alias: Network Security Guard, Melcosoft - 323 visits
Spyass.com - 65 visits
Tubby - Alias: MakeMeSearch, CoolWebSearch.Tubby, Spyware.Arau, Trojan.Win32.StartPage.ih, Trojan.StartPage-FJ - 54 visits
CoolWebSearch - Alias: CWS, Cool Web Serach, CoolWwwSearch - 50 visits
CrackSpider - Alias: Troj/Favadd-D - 49 visits
SecurityToolbar.DesktopScam - 45 visits
Paytime - 40 visits
Trojan.StartPage - Alias: SearchCentral - 37 visits
Search3 Hijacker - 30 visits
SBSoft - 30 visits
Random Browser Hijacker Pages:
IEHijacker.Q
Adw.Melkosoft.SuperSpider
Msvrl Winsock Hijack
CoolWebSearch.ntsearch
Superlogy
SearchCentral - Alias: SearchCentral.cc, SearchCentral.update.js
SBSoft
OmegaSearch - Alias: Omegasearch.com Prosearching.com. Search200.com. Mysearchnow.com. Searchexe.com
Adpowerzone.BHO
HTML Lier
|
