SPYWARE: CoolWebSearch-StartPage (2)
This signature detects the runtime behavior of CoolWebSearch.StartPage variant. CoolWebSearch.StartPage is one of the CoolWebSearch browser hijackers. It has many variants. This CoolWebSearch.StartPage variant alters the start page for Internet Explorer, setting it to point to http://balabolka.biz/start.html, which is a meta search engine.
Short Name
SPYWARE:BH:CWSSTARTPAGE-2
Severity
Minor
Recommended
False
Recommended Action
None
Category
SPYWARE
Keywords
(2) CoolWebSearch-StartPage
Release Date
10/27/2005
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3324
False Positive
Unknown