VoyForums
[ Show ]
Support VoyForums
[ Shrink ]
VoyForums Announcement: Programming and providing support for this service has been a labor of love since 1997. We are one of the few services online who values our users' privacy, and have never sold your information. We have even fought hard to defend your privacy in legal cases; however, we've done it with almost no financial support -- paying out of pocket to continue providing the service. Due to the issues imposed on us by advertisers, we also stopped hosting most ads on the forums many years ago. We hope you appreciate our efforts.

Show your support by donating any amount. (Note: We are still technically a for-profit company, so your contribution is not tax-deductible.) PayPal Acct: Feedback:

Donate to VoyForums (PayPal):

[ Login ] [ Contact Forum Admin ] [ Main index ] [ Post a new message ] [ Search | Check update time | Archives: 1, 2, [3], 4 ]

[ Next Thread | Previous Thread | Next Message | Previous Message ]

Date Posted: 09:07:53 05/02/04 Sun
Author: Repost
Subject: CoolWebSearch

We (my company) are getting hit with something over the past 2 days
that I'm not sure if it is virus or spyware, probably both.

While searching the internet (not downloading), each guy (3 different)
was on a different site, the McAfee On-Access Scan pops up with 7
different Trojans. At the same time IE goes to page
http://default-homepage-network.com/newspynotice.html.

Along with all of this 3 .exe's (one named silent.exe), a batch file
(O.bat) and a file (O) get put into system32.

There's more! HCW3.exe, hcw3.dll and hcw3 get put into c:\winnt\temp.
HCW3.exe can also be found running under processes in task manager.

CWShredder removes something also (I wish I noted what it found
because there doesn't seem to be a log).

It seems if I remove everything mentioned above then everthing is OK.

How do I stop this from happening in the first place?

Thanks in advance,

Bill

[ Next Thread | Previous Thread | Next Message | Previous Message ]
[ Contact Forum Admin ]

Forum timezone: GMT-8
VF Version: 3.00b, ConfDB:
Before posting please read our privacy policy.
VoyForums(tm) is a Free Service from Voyager Info-Systems.
Copyright © 1998-2019 Voyager Info-Systems. All Rights Reserved.