Name: CoolWebSearch.SearchX Category: Spyware Alias: Troj/Krepper-G Advice: Remove Risk: Elevated Risk Elevated threats are usually threats that fall into the range of adware in which data about a user's habits are tracked and sent back to a server for analysis without your consent or knowledge. Description: CoolWebSearch.SearchX hijacks the Internet Explorer search page to search.thestex.com as well as installs a toolbar. Signatures: process: mt.exe: MD5 Hash: 2641089ef598d8dc8f2... process: winlogon.exe: MD5 Hash: ... process: winlogon.exe: MD5 Hash: 493f00569ad70ba19a0... process: winlogon.exe: MD5 Hash: 8971e544433fb0bc30a... process: winlogon.exe: MD5 Hash: 14e0598e4cf4c53739e... process: sys08.exe: MD5 Hash: 1412e8ba3c171d7d1aa... process: sys016.exe: MD5 Hash: ff037af8158328c3b8f... process: mssys.exe: MD5 Hash: 6e711c584aebdeca0d4... process: sys4920.exe: MD5 Hash: 4faa0815170021084f8... process: services.exe: MD5 Hash: feb1af01b9d971a6f5d... process: sys4149.exe: MD5 Hash: 020c589c664225945dd... process: sys4228.exe: MD5 Hash: c8a9e5e9293e1f19d68... process: sys4230.exe: MD5 Hash: 208ff1552a1927ec851... process: sys4133.exe: MD5 Hash: dbcfc3725e7dc70bef8.. Type: Spyware - Spyware's primary purpose is to collect demographic and usage information from your computer, usually for advertising purposes. Spyware usually that 'sneaks' onto a system or performs other activities hidden to the user. Spyware programs are usually bundled as a hidden component and downloaded from the Internet. These modules are almost always installed on the system secretively and try to run secretively as well.