Re: Strange Link Placement

From: Mike Burgess (winhelp2002_at_spamthis.com)
Date: 12/11/03


Date: Wed, 10 Dec 2003 23:16:22 -0500

Hamid,
runsearch.com = CWS.Mupdate (coolwebsearch trojan)

How to remove Coolwebsearch and affiliates
http://mvps.org/winhelp2002/unwanted.htm#Coolwebsearch

Note: this type hijack indicates an unpatched machine, that is lacking
in "Defense". Please visit Windows Update to avoid these exploits.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 12-08-03]
Please post replies to this Newsgroup, email address is invalid

--
"Hamid" <hsaify@comcast.net> wrote in message
news:1136e01c3bf51$59bef990$a601280a@phx.gbl...
> Hello all,
>
> We are in a weird situation and I am wondering if someone
> could assist.  On our website, at nights, we get taken
> over by some strange link guru, program, whatever.  What
> happens is that certain words all of a sudden becomes
> links and shift our visitors to a search page, from
> runsearch.com.  So a keyword like "employment" is
> highlighted quite often on our site, which is bad b/c we
> are a career services agency.  I noticed last night when
> it happened that Kazaa was open, but on occassions before
> then, Kazaa was not running.  I've seen it on multiple
> computers as well.  Does anyone know anything about this?
> Experienced this?  Solved this problem?
>
> Let me know
> Thanks
> Hamid
>
> You can email me if you wish or post here


Relevant Pages

  • Re: I feel like someone has taken over my computer!!!
    ... find-itnow.com = CWS.Alfasearch.2 (coolwebsearch trojan) ... this type hijack indicates an unpatched machine, ... Please visit Windows Update to avoid these exploits. ... > been to is Ebay. ...
    (microsoft.public.security.virus)
  • Re: homepage is reset to unwanted site, possible virus
    ... magicsearch.ws = CWS.Smartsearch.4 (coolwebsearch trojan) ... this type hijack indicates an unpatched machine, ... Please visit Windows Update to avoid these exploits. ... Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Browswer will not open at all.
    ... Winshow.dll = Coolwebsearch trojan ... this type hijack indicates an unpatched machine, ... Please visit Windows Update to avoid these exploits. ... > the latest IE 6 setup but trying to update, ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Start page and potential virus.
    ... search-space.com is a rather old Coolwebsearch trojan. ... this type hijack indicates an unpatched machine, ... Please visit Windows Update to avoid these exploits. ... > I've encountered a problem with my start-page option. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Webpage error - http:///?
    ... "to an error page and http:/// " = coolwebsearch trojan ... this type hijack indicates an unpatched machine, ... Please visit Windows Update to avoid these exploits. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)