This component is part of CWS.Melkosoft
Component Name: Z6O0KO9IR4PWLRE.EXE
Description of : This CoolWebSearch variant hijacks browser start and search page settings to point to win-eto.com or kitasearch.com. Aside from its hijacking capabilities, it also downloads pop-up ads from its server. This variant may endanger your online security as it downloads and executes arbitrary codes from its controlling servers.
Recommendation for :
It is strongly recommended that this be removed immediately from your system.
Trusted: No
Trojan: No
Chronic: Yes
Adware: No
Carrier: No
Browser Hijacker: No
Dialer: No
Commercial Keylogger: No
Remote Administration Tool: No
Suspected: No
Company Name: CoolWebSearch
Platforms Affected:
Methods of Distribution: This is installed via ActiveX drive-by download.
Variants/Versions:
Release Date: 2004