Home Malware Programs Browser Hijackers CoolWebSearch.time

CoolWebSearch.time

Posted: March 28, 2006

A dangerous variant of CoolWebSearch.
It shuts down most of the popular anti-malware products and also changes your Search URL, Search Bar, Search Page, Home Page, Default Page URL,
Search Assistant to the site smartsearch.ws or magicsearch.ws.

CoolWebSearch.time closes web browser windows viewing information from anti-malware domains, like www.kephyr.com

CoolWebSearch.time shuts down the following anti-malware products: Bazooka, Ad aware, CWShredder, Hijackthis, Spyware blaster and Spybot.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 autorun.exe
    2 exploreer.exe
    3 iexplorer.exe
    4 inetinf.exe
    5 sistem.exe
    6 systeem.exe
    7 time.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}Browsetothekey:HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunIntherightpanelookforavaluenamedcoolwebprogramandrememberthefile(*)itpointsto.Deletethecoolwebprogramvalue.
Loading...