This component is part of CWS.Melkosoft
Component Name: pv0ewenoz7fthd.exe
Description of : This CoolWebSearch variant hijacks browser start and search page settings to point to win-eto.com or kitasearch.com. Aside from its hijacking capabilities, it also downloads pop-up ads from its server. This variant may endanger your online security as it downloads and executes arbitrary codes from its controlling servers.
Recommendation for :
It is strongly recommended that this be removed immediately from your system.
Browser Hijacker: No
Commercial Keylogger: No
Remote Administration Tool: No
Company Name: CoolWebSearch
Methods of Distribution: This is installed via ActiveX drive-by download.
Release Date: 2004