|
|
|
|
CoolWebSearch.MWSearch Spyware/Adware Definition
| Name: |
CoolWebSearch.MWSearch |
| Category: |
Spyware |
| Alias: |
A7Find, Azesearch, ADW_SEARCHBAR.D, ZToolbar |
| Advice: |
Remove |
| Risk: |
Elevated Risk
Elevated threats are usually threats that fall into the range of adware in which data about a user's habits are tracked and sent back to a server for analysis without your consent or knowledge. |
| Description:
|
MWSearch adds a search toolbar to Internet Explorer and hijacks the default search page.
MWSearch (morwillsearch.com) is associated with CoolWebSearch and may be seen in conjunction with the CWS about:blank hijack. The installer alters security settings by adding the domain morwillsearch.com to the the Internet Explorer Trusted sites zone. It is installed via ActiveX from infected web pages.
MWSearch is known to be associated with spammming and porn.
|
| Signatures:
|
process: search-upgrade-setup.exe: MD5 Hash: 007429856f3dfba5f5b...
process: m00.exe: MD5 Hash: 55bebba586ce8f0b4e9...
process: jzjzmfbp.exe: MD5 Hash: a2b4e416e563fab3082...
process: loadppc.exe: MD5 Hash: 00c78bb2557c26d6a43...
process: m00.exe: MD5 Hash: c5ea2c1862a57885cf0...
process: loadppc.exe: MD5 Hash: 2dc17b5124bb647da21...
process: load03.exe: MD5 Hash: 65ed1319a4e091c962a.. |
| Type: |
Spyware - Spyware's primary purpose is to collect demographic and usage information from your computer, usually for advertising purposes. Spyware usually that 'sneaks' onto a system or performs other activities hidden to the user. Spyware programs are usually bundled as a hidden component and downloaded from the Internet. These modules are almost always installed on the system secretively and try to run secretively as well. |
|
Top Spyware Visited Pages:
007.2Search
007.msnnames
00Sub7_20
Advanced Email Monitoring
AlwaysUpdateNews
ATLEvents.BHO
ATPartners
Aureate
Axexx CHM
Banker.TU
Bridge/WinFavorites
Brodcast DSSAGENT
C2.Lop
CommonSearch VCatch
Conducent
|
|