Friday, December 12, 2008

CoolSavings Adware

How To Remove CoolSavings?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
CoolSavings is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits


CoolSavings Symptoms:

Files:
[%PROFILE_TEMP%]\CoolCache\Piggy.CGD
[%WINDOWS%]\downloaded program files\cpnmgr.dll
[%WINDOWS%]\TEMP\CoolCache\Piggy.CGD
[%PROFILE_TEMP%]\CoolCache\Piggy.CGD
[%WINDOWS%]\downloaded program files\cpnmgr.dll
[%WINDOWS%]\TEMP\CoolCache\Piggy.CGD

Folders:
[%PROFILE_TEMP%]\coolcache

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{549f957e-2f89-11d6-8cfe-00c04f52b225}
HKEY_CLASSES_ROOT\cpnmgr.cmv5
HKEY_CLASSES_ROOT\cpnmgr.cmv5.3
HKEY_CLASSES_ROOT\interface\{549f957d-2f89-11d6-8cfe-00c04f52b225}
HKEY_CLASSES_ROOT\interface\{549f957f-2f89-11d6-8cfe-00c04f52b225}
HKEY_CLASSES_ROOT\typelib\{549f9571-2f89-11d6-8cfe-00c04f52b225}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{549F957E-2F89-11D6-8CFE-00C04F52B225}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:\windows\downloaded program files\cpnmgr.dll
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{549f957e-2f89-11d6-8cfe-00c04f52b225}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\cpnmgr.dll

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/winnt/downloaded program files/cpnmgr.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/cpnmgr.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/cpnmgr.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Neutron Trojan Cleaner
ClientMan.MSMC Trojan Removal instruction
Remove InstitutionFB Trojan
Remove Mystic Trojan

No comments: