SPYWARE: CoolWebSearch AboutBlank Variant
This signature detects the runtime behavior of the CWS.About:Blank spyware, a variant belonging to the CoolWebSearch (CWS) spyware group of browser-hijacking applications. This variant takes control of a user's Web browser settings and changes the homepage, search page, and other default pages to access Web sites controlled by the variant developer. For all changed URLs, the browser address bar displays About:Blank.
References
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3