Guard Against CoolWebSearch Spyware

[Geekgirl]

CoolWebSearch is a name given to a wide range of different browser hijackers. Though the code is very different between variants, they are all used to redirect users to coolwebsearch.com and other sites affiliated with its operators.

The most common symptoms you see are:

HomePage hijacks [to CoolWebSearch sites or it's affiliates]
Internet Explorer Search engine hijacks
Unwanted menu-extensions and favorites added
Missing Tabs in Internet Explorer Options

CoolWebSearch spyware uses the MS Java VM vulnerability [earlier than builds 3810] and installs itself while visiting some rogue websites.


PROTECT THE SYSTEM

To guard against CoolWebSearch and it's variants:


Option 1: If you have MS Java VM [builds earlier than 3810] installed, visit WindowsUpdate page and download the MS Java VM Update [build 3810]


To find the build of MS Java installed in your system, type "jview" [or wjview] in the Command Prompt window to note down the version number. Anything earlier than 3810 means your system is "Vulnerable"

Determine the MS Java Version:
http://www.microsoft.com/security/secur ... 03-011.asp

Option 2. Uninstall MS Java Virtual Machine completely and install Sun's Version of Java

Removal: How can I uninstall the Microsoft Java Virtual Machine from Windows XP?





(Info found here)