Home Malware Programs Browser Hijackers CoolWebSearch.winproc32

CoolWebSearch.winproc32

Posted: March 28, 2006

A variant of CoolWebSearch that changes your SearchUrl, Search Bar, Search Page, Home Page, Search Assistant, Default Page and Customized Search to the site 4-counter.com.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 WINPROC32.EXE

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}Browsetothekey:HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRunDeletethevalueWindowsInternetProtocol
Loading...