Security Incidents mailing list archives

IE default Page

From: "wnorth" <wnorth () verizon net>
Date: Thu, 15 Jul 2004 17:45:56 -0700

Interesting bug going around, coolwebsearch, has anyone been successful in
removing this virus from a system? It looks like it recreates the DLL under
c:\windows\system32 and renames it after a few reboots. It's pretty annoying
and I haven't been able to fully contain it. 

Thoughts? Suggestions? I've used highjackthis, cwshredder and a few spyware
detectors, but nothing is really fixing the problem.

Thanks,

-Wes

Current thread:

IE default Page wnorth (Jul 16)
- Re: IE default Page Jeff Garrett (Jul 16)
- Re: IE default Page Steven Bairstow (Jul 16)
  - Re: IE default Page Justin . Ross (Jul 16)
- RE: IE default Page wnorth (Jul 16)
- <Possible follow-ups>
- RE: IE default Page Hagen, Eric (Jul 16)
- RE: IE default Page Ed Wittmann (Jul 16)
- RE: IE default Page Micro Kluge (Jul 16)