IE default Page

From: wnorth (wnorth_at_verizon.net)
Date: 07/16/04

  • Next message: SF Lists: "Malware(?) inserting porn links into registration/profile data for unsuspecting users" 
    To: <incidents@securityfocus.com>
Date: Thu, 15 Jul 2004 17:45:56 -0700

    Interesting bug going around, coolwebsearch, has anyone been successful in
    removing this virus from a system? It looks like it recreates the DLL under
    c:\windows\system32 and renames it after a few reboots. It's pretty annoying
    and I haven't been able to fully contain it.

    Thoughts? Suggestions? I've used highjackthis, cwshredder and a few spyware
    detectors, but nothing is really fixing the problem.

    Thanks,

    -Wes

  • Next message: SF Lists: "Malware(?) inserting porn links into registration/profile data for unsuspecting users"

    Relevant Pages

    • Re: IE default Page
      ... It looks like it recreates the DLL under ... >c:\windows\system32 and renames it after a few reboots. ...
      (Incidents)
    • Re: Slow bootup
      ... For Startup items, go to Run, type "msconfig" and hit enter. ... The other option that comes to mind is if the virus, or some adware, left ... "Could not find *.dll" or something equally obvious. ... "Tony MS" wrote: ...
      (microsoft.public.windowsxp.general)
    • RE: Slow bootup
      ... For Startup items, go to Run, type "msconfig" and hit enter. ... The other option that comes to mind is if the virus, or some adware, left ... "Could not find *.dll" or something equally obvious. ... "Tony MS" wrote: ...
      (microsoft.public.windowsxp.general)
    • Re: [inbox] Re: [Full-Disclosure] Re: E-Mail viruses
      ... >> and the receiver merely renames it. ... and use that to unzip the rest of the virus won't read ... realtively easy to further restrict the odds of sustaining damage via ... but with today's content scanner options such ...
      (Full-Disclosure)
    • strange file
      ... Microsoft's "Run a DLL as an App". ... software which does not end up gobbling up memory through ... RUNDLL and RUNDLL32 do not normally appear in the Task ... virus scan on your PC. ...
      (microsoft.public.windowsxp.security_admin)
    • Quantcast