Home Malware Programs Browser Hijackers CoolWebSearch.ehttp

CoolWebSearch.ehttp

Posted: March 28, 2006

A variant of CoolWebSearch that sends your searches to the site ehttp.cc.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 AddClass.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}BrowsetoHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionURLDefaultPrefixBrowsetothekey:HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRunDeletevalueAddClassReplacehttp://ehttp.cc/?withhttp://.
Loading...