CWS.secure

Overview

CWS.secure also known as secure.html, Trojan.Ecure.B, Troj/StartPa-BT and TROJ_HARNIG.Q changes the Internet Explorer Home Page, Local Page and Default_Page_URL to %WinDir%\secure.html.

Note: %WinDir% is a variable (?). By default, this is C:\Windows (Windows 95/98/Me/XP) or C:\WINNT (Windows NT/2000). So in most cases the file is located at C:\WINDOWS\secure.html or C:\WINNT\secure.html.

Classification

Changes browser settings

Variants

CoolWebSearch  CoolWebSearch.alfasearch  CoolWebSearch.control  CoolWebSearch.cpan  CoolWebSearch.criticalupdater  CoolWebSearch.ctrlpan  CoolWebSearch.dnse  CoolWebSearch.dnserr  CoolWebSearch.dpe  CoolWebSearch.ehttp  CoolWebSearch.excel10  CoolWebSearch.explorer32  CoolWebSearch.googlems  CoolWebSearch.iefeatsl  CoolWebSearch.iefeatslupdate  CoolWebSearch.image  CoolWebSearch.keymgrldr  CoolWebSearch.ld  CoolWebSearch.madfinder  CoolWebSearch.mgs_32  CoolWebSearch.msaps  CoolWebSearch.msconfd  CoolWebSearch.msmk  CoolWebSearch.mssearch  CoolWebSearch.msstar  CoolWebSearch.msstar2  CoolWebSearch.mstaskm  CoolWebSearch.msupdate  CoolWebSearch.msupdater  CoolWebSearch.mtwirl32  CoolWebSearch.my.css  CoolWebSearch.notepad32  CoolWebSearch.ntsearch  CoolWebSearch.olehelp  CoolWebSearch.popup_bl  CoolWebSearch.quicken  CoolWebSearch.qttasks  CoolWebSearch.secure  CoolWebSearch.soundmx  CoolWebSearch.sys  CoolWebSearch.time  CoolWebSearch.toolband  CoolWebSearch.winproc32  CoolWebSearch.winsuck  CoolWebSearch.winres  CoolWebSearch.winug  CoolWebSearch.xplugin  CoolWebSearch.xpsystem  CoolWebSearch.xrectar 

Files

secure.html

If you have any of the files related to CWS.secure on your system, please send them for additional analysis. Generally, I have only analysed a few versions for each software component listed at this web site. With your help I will be able to look at both old and more recent versions of the CWS.secure software. Thank you very much for your time!

Log references

Log 201 Log 321 Log 426 Log 541 Log 608 Log 670 Log 674 Log 780

Privacy policy

No privacy policy available.

Detection

Bazooka Adware and Spyware Scanner detects CWS.secure. Bazooka is freeware and detects spyware, adware, foistware, trojan horses, viruses, worms and other potentially unwanted applications. Read more »

Manual removal

Please follow the instructions below if you would like to remove CWS.secure manually. Please notice that you must follow the instructions very carefully and delete everything that is mentioned. In most cases the removal will fail if one single item is not deleted. If CWS.secure remains on your system after stepping through the removal instructions, please double-check by stepping through them again.

1. Start your computer in safe mode.
2. Start the registry editor. This is done by clicking Start then Run. (The Run dialog will appear.) Type regedit and click OK. (The registry editor will open.)
3. Browse to the registry key: 'HKEY_CURRENT_USER \ Software \ Microsoft \ Internet Explorer \ Main'
4. In the right pane, change 'Default_Page_URL', if it exist, to a URL that you would like to have as your home page.
5. In the right pane, change 'Local Page', if it exists, to %SystemDir%\blank.htm
   Note: %SystemDir% is a variable (?). By default, this is C:\Windows\System (Windows 95/98/Me), C:\WINNT\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
6. In the right pane, change 'Start Page', if it exists, to a URL that you would like to have as your home page.
7. Browse to the registry key: 'HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Internet Explorer \ Main'
8. In the right pane, change 'Default_Page_URL', if it exist, to a URL that you would like to have as your home page.
9. In the right pane, change 'Local Page', if it exist, to %SystemDir%\blank.htm
   Note: %SystemDir% is a variable (?). By default, this is C:\Windows\System (Windows 95/98/Me), C:\WINNT\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
10. In the right pane, change 'Start Page', if it exist, to a URL that you would like to have as your home page.
11. Start Windows Explorer and delete:
    %WinDir%\secure.html
    Note: %WinDir% is a variable (?). By default, this is C:\Windows (Windows 95/98/Me/XP) or C:\WINNT (Windows NT/2000).

Problems uninstalling? Click here.

I'm looking for your help!

Thank you for using my site, I hope you find it useful. I'm looking for help from all users, please read more.

Contact information for CWS.secure's vendor

In order to provide correct, accurate and updated information about CWS.secure I encourage the vendor to contact me if any part of this write-up needs a revision.