SPYWARE: Coolsearch

This signature detects the runtime behavior of hijacker cool search. Cool search is installed as an IE Browser Helper Object (BHO). It changes IE setting and loads ads from its controlling server.

Short Name
SPYWARE:BH:COOLSEARCH
Severity
Minor
Recommended
False
Recommended Action
None
Category
SPYWARE
Keywords
Coolsearch
Release Date
01/26/2006
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3324
False Positive
Unknown

Found a potential security threat?