coolwebsearch threat

Discussion in 'Security Signatures' started by Guest, Apr 12, 2005.

  1. Guest

    Guest Guest

    buddy of mine obviously caught a version of coolwebsearch
    that's not recognized by the tool. Looks like the blank
    start page 'about:blank' is kind of replaced with the
    coolwebsearch mess

    periodic pop-ups and no way to change start page in IE,
    always ending up on some strange search page for all the
    stuff you may not really need

    tried other means/tools/utils but looks like this version
    is really sticky

    any chance to get this covered ?
     
    Guest, Apr 12, 2005
    #1
    1. Advertisements

  2. Best advice: submit a Tools, suspected spyware report from the infected
    machine.

    Also--look up about:buster/

    --
    FAQ for Microsoft Antispyware:
    http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

    <> wrote in message
    news:083c01c53f2a$591d0ea0$...
    > buddy of mine obviously caught a version of coolwebsearch
    > that's not recognized by the tool. Looks like the blank
    > start page 'about:blank' is kind of replaced with the
    > coolwebsearch mess
    >
    > periodic pop-ups and no way to change start page in IE,
    > always ending up on some strange search page for all the
    > stuff you may not really need
    >
    > tried other means/tools/utils but looks like this version
    > is really sticky
    >
    > any chance to get this covered ?
     
    Bill Sanderson, Apr 12, 2005
    #2
    1. Advertisements

  3. Also try the browser restore function in advanced tools and let me know how
    if that is working.

    --
    -steve

    Steve Dodson [MSFT]
    MCSE, CISSP
    PSS Security

    --

    This posting is provided "AS IS" with no warranties, and confers no rights.
    Use of included script samples are subject to the terms specified at
    http://www.microsoft.com/info/cpyright.htm

    Note: For the benefit of the community-at-large, all responses to this
    message are best directed to the newsgroup/thread from which they
    originated.
    "Bill Sanderson" <> wrote in message
    news:...
    > Best advice: submit a Tools, suspected spyware report from the infected
    > machine.
    >
    > Also--look up about:buster/
    >
    > --
    > FAQ for Microsoft Antispyware:
    > http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm
    >
    > <> wrote in message
    > news:083c01c53f2a$591d0ea0$...
    >> buddy of mine obviously caught a version of coolwebsearch
    >> that's not recognized by the tool. Looks like the blank
    >> start page 'about:blank' is kind of replaced with the
    >> coolwebsearch mess
    >>
    >> periodic pop-ups and no way to change start page in IE,
    >> always ending up on some strange search page for all the
    >> stuff you may not really need
    >>
    >> tried other means/tools/utils but looks like this version
    >> is really sticky
    >>
    >> any chance to get this covered ?

    >
    >
     
    Steve Dodson [MSFT], Apr 14, 2005
    #3
    1. Advertisements

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Marc Jacobi

    XXXToolbar Threat not really removed

    Marc Jacobi, Feb 12, 2005, in forum: Security Signatures
    Replies:
    4
    Views:
    995
    Bill Sanderson
    Feb 18, 2005
  2. Jack R

    real threat or false positive?

    Jack R, Mar 12, 2005, in forum: Security Signatures
    Replies:
    5
    Views:
    852
    Jack R
    Mar 12, 2005
  3. Bob

    CoolWebSearch

    Bob, Apr 17, 2005, in forum: Security Signatures
    Replies:
    15
    Views:
    1,712
    Gazza
    Apr 22, 2005
  4. TigerMax

    CoolWebSearch.CameUp

    TigerMax, May 18, 2005, in forum: Security Signatures
    Replies:
    3
    Views:
    2,190
    JohnF.
    May 19, 2005
  5. Guest
    Replies:
    4
    Views:
    408
    Guest
    Nov 8, 2005
Loading...

Share This Page