[Coco] CoolWebSearch

[Neil Morrison]

----- Original Message ----- 
From: "Gene Heskett" <gene.heskett at verizon.net>

> Also, there are stories being circulated since tuesday that a
> favorite windows web search tool called CoolWebSearch is in fact a
> key logger, sending everything you do to a site with an .ru address.
> When Jim passed that announcement on to me, he had made the comment
> that he'd had to remove it from virtually every machine in the
> building, and from quite a large percentage of the machines coming in
> for service at his part time computer repair shop.  Then the other
> partner in that chimed in and said he'd had to clean it off of every
> machine with a net connection, and some that didn't have anything but
> dialup at the coal company he also is the head accountant of.  So its
> pretty wide spread.
>
> Again, the name of the utility is CoolWebSearch.  If any of you have
> it on your personal machines, either re-image the drive & apply all
> patches from M$ up to late today before hooking up the net cable, or
> get the newest virii killer and have it removed.

http://www.spywareguide.com/product_show.php?id=599

"Official Description:   One of the most infamous highjackers known to date.
Comes in a variety of versions, all using different techniques.

Handle with extreme care!

CoolWebSearch is a name given to a wide range of different browser
hijackers. Though the code is very different between variants, they are all
used to redirect users to coolwebsearch.com and other sites affiliated with
its operators".

... <MORE> ...