Home Malware Programs Browser Hijackers CoolWebSearch.notepad32

CoolWebSearch.notepad32

Posted: March 28, 2006

A variant of CoolWebSearch which is related to CoolWebSearch.Time. It reinstalls CoolWebSearch.Time every time when you open a text file or Windows Notepad.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 notepad32.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}Browsetothekey:HKEY_LOCAL_MACHINESOFTWAREClassesxtfileshellopencommandSetthe(Default)valueto:%SystemRoot%system32NOTEPAD.EXE%1.
Loading...