Name: CoolWebSearch.MsxMidi Category: Browser Hijacker Alias: CWS variant, CWS.xpsystem Advice: Remove Risk: Elevated Risk Elevated threats are usually threats that fall into the range of adware in which data about a user's habits are tracked and sent back to a server for analysis without your consent or knowledge. Description: CoolWebSearch MsxMidi is a CoolWebSearch variant that is loaded on startup. CoolWebSearch MsxMidi adds a startup value in the registry called xpsystem that runs teh process MsxMidi.exe in the system/services directory. Signatures: process: msxmidi.exe: MD5 Hash: 393f1421b31ac4d38d6... process: unpacked-msxmidi.exe: MD5 Hash: 6dd73fd5d333b072bc0... process: msxmidi.exe: MD5 Hash: f9c6f0ea1a82e2699df... process: msxmidi.exe: MD5 Hash: 8ad5b0ed6763801971e... process: msxmidi.exe: MD5 Hash: 78d395d4f514b75b61a... process: msxmidi.exe: MD5 Hash: 0ab599f237966ff9bfa... process: msxmidi.exe: MD5 Hash: fda214c7a5d4e9b5061... process: msxmidi.exe: MD5 Hash: f949fe98ad4406d0834... process: msxmidi.exe: MD5 Hash: d1f502732a5ba846912... process: msxmidi.exe: MD5 Hash: 2eeae1be1ff1a2b34d6... process: msxmidi.exe: MD5 Hash: 6e03bcc0e49c8ecfaf8... process: msxmidi.exe: MD5 Hash: ... process: msxmidi.exe: MD5 Hash: af6c15cc388d00ef588... process: msxmidi.exe: MD5 Hash: a3a980fc49fff3eebf7... process: msxmidi.exe: MD5 Hash: 1348c284a69146d5bb2... process: msxmidi.exe: MD5 Hash: 2bbe31591d3f178efcf... process: msxmidi.exe: MD5 Hash: 9d0323f136653c446d5... process: msxmidi.exe: MD5 Hash: 8a35cb98342563b87f7... process: msxmidi.exe: MD5 Hash: 13118070bc4f9ae840f... process: msxmidi.exe: MD5 Hash: 712dde17105dae04010.. Type: Browser Hijacker - Spyware's primary purpose is to collect demographic and usage information from your computer, usually for advertising purposes. Spyware usually that 'sneaks' onto a system or performs other activities hidden to the user. Spyware programs are usually bundled as a hidden component and downloaded from the Internet. These modules are almost always installed on the system secretively and try to run secretively as well.