Home Malware Programs Browser Hijackers CoolWebSearch.alfasearch

CoolWebSearch.alfasearch

Posted: March 28, 2006

A variant of CoolWebSearch that sets your Home Page, Search Page, Search Bar, Search Url, Default Page and Search Assistant to a site alfa-search.com.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 rundll32.vbe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}Browsetothekey:HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunDeletethevalueWindowsSecurityAssistantHKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRunHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunServices
Loading...