Home Malware Programs Browser Hijackers CoolWebSearch.madfinder

CoolWebSearch.madfinder

Posted: March 28, 2006

A variant of CoolWebSearch that changes your homepage to the site madfinder.com.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 svc.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}Browsetothekey:HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRunDeletethevaluecalledsvc
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}FCADDC14-BD46-408A-9842-CDBE1C6D37EB
Loading...