Emsisoft Malware-Info

Name: Adware.Win32.CoolOnlineOffers.ScreenSaver

Risklevel: Low Risk

Company: Cool Online Offers - http://coolonlineoffers.com/

Description:

CoolOnlineOffers.ScreenSaver is an adware that can deliver advertisements on you computer depending on your surfing behaviour. It is ad-supported program for windows desktop.

Removal instructions for Adware CoolOnlineOffers ScreenSaver:

To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware CoolOnlineOffers ScreenSaver.

Run a full scan on all drives and move all detected items to the quarantine.

More details about this danger:

Characteristics:

  • It can deliver advertisements on you computer depending on your surfing behaviour.
  • It is ad-supported program for windows desktop.

Installation: Installed through EXE

Process: Flowers.scr

Screenshots:

CoolOnlineOffers.ScreenSaverCoolOnlineOffers.ScreenSaverCoolOnlineOffers.ScreenSaverCoolOnlineOffers.ScreenSaver

Used folders:

  • C:\WINDOWS\system32\Fish dir
  • C:\WINDOWS\system32\Flowers dir
  • C:\WINDOWS\system32\Galaxie dir
  • C:\WINDOWS\system32\Highway dir
  • C:\WINDOWS\system32\Tunnel dir
  • C:\WINDOWS\system32\Dive dir

Used files:

  • C:\WINDOWS\system32\Tunnel.scr
    [197,120 bytes] Screen Saver
  • C:\WINDOWS\system32\Highway dir\Experimental-02.swf
    [304056 Bytes] Shockwave Flash Object
  • C:\WINDOWS\system32\Highway dir\expire.scf
    [1404 Bytes] Windows Explorer Command
  • C:\WINDOWS\system32\Highway dir\saver.dat
    [1240 Bytes] DAT File
  • C:\WINDOWS\system32\Highway dir\saver1.dll
    [34304 Bytes] Application Extension
  • C:\WINDOWS\system32\Highway dir\saver2.dll
    [18192 Bytes] Application Extension
  • C:\WINDOWS\system32\Tunnel dir\expire.scf
    [1404 Bytes] Windows Explorer Command
  • C:\WINDOWS\system32\Galaxie dir\saver2.dll
    [18192 Bytes] Application Extension
  • C:\WINDOWS\system32\Tunnel dir\saver2.dll
    [18192 Bytes] Application Extension
  • C:\WINDOWS\system32\Tunnel dir\Experimental-01.swf
    [219370 Bytes] Shockwave Flash Object
  • C:\WINDOWS\system32\Highway.scr
    [197,120 bytes] Screen Saver
  • C:\WINDOWS\system32\Fish.scr
    [197,120 bytes] Screen Saver
  • C:\WINDOWS\system32\Dive.scr
    [197,120 bytes] Screen Saver
  • C:\WINDOWS\system32\ Flowers.scr
    [197,120 bytes] Screen Saver
  • C:\WINDOWS\system32\Galaxie.scr
    [197,120 bytes] Screen Saver
  • C:\WINDOWS\coo_d.exe
    [16,384 bytes] Application
  • C:\WINDOWS\system32\Dive dir\expire.scf
    [1404 Bytes] Windows Explorer Command
  • C:\WINDOWS\system32\Tunnel dir\saver1.dll
    [34304 Bytes] Application Extension
  • C:\WINDOWS\system32\Dive dir\saver2.dll
    [18192 Bytes] Application Extension
  • C:\WINDOWS\system32\Dive dir\Fish-02.swf
    [195532 Bytes] Shockwave Flash Object
  • C:\WINDOWS\system32\Tunnel dir\saver.dat
    [1240 Bytes] DAT File
  • C:\WINDOWS\system32\Dive dir\saver1.dll
    [34304 Bytes] Application Extension
  • C:\WINDOWS\system32\Galaxie dir\saver1.dll
    [34304 Bytes] Application Extension
  • C:\WINDOWS\system32\Fish dir\expire.scf
    [1404 Bytes] Windows Explorer Command
  • C:\WINDOWS\system32\Fish dir\Fish-01.swf
    [1509831 Bytes] Shockwave Flash Object
  • C:\WINDOWS\system32\Fish dir\saver.dat
    [1240 Bytes] DAT File
  • C:\WINDOWS\system32\Fish dir\saver1.dll
    [34304 Bytes] Application Extension
  • C:\WINDOWS\system32\Fish dir\saver2.dll
    [18192 Bytes] Application Extension
  • C:\WINDOWS\system32\Galaxie dir\saver.dat
    [1240 Bytes] DAT File
  • C:\WINDOWS\system32\Flowers dir\Flowers-01.swf
    [169455 Bytes] Shockwave Flash Object
  • C:\WINDOWS\system32\Flowers dir\saver.dat
    [1240 Bytes] DAT File
  • C:\WINDOWS\system32\Flowers dir\saver1.dll
    [34304 Bytes] Application Extension
  • C:\WINDOWS\system32\Flowers dir\saver2.dll
    [18192 Bytes] Application Extension
  • C:\WINDOWS\system32\Galaxie dir\expire.scf
    [1404 Bytes] Windows Explorer Command
  • C:\WINDOWS\system32\Galaxie dir\Galaxie-01.swf
    [81602 Bytes] Shockwave Flash Object
  • C:\WINDOWS\system32\Flowers dir\expire.scf
    [1404 Bytes] Windows Explorer Command
  • C:\WINDOWS\system32\Dive dir\saver.dat
    [1240 Bytes] DAT File

Additional information might be found here:

Search at Google for Adware CoolOnlineOffers ScreenSaver Search at Google for Adware CoolOnlineOffers ScreenSaver
Search at Bing for Adware CoolOnlineOffers ScreenSaver Search at Bing for Adware CoolOnlineOffers ScreenSaver
Search at Yahoo for Adware CoolOnlineOffers ScreenSaver Search at Yahoo for Adware CoolOnlineOffers ScreenSaver

How can I protect myself from Adware CoolOnlineOffers ScreenSaver?

Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers. This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.

Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!

Only $40 for the security of your computer.

Buy Emsisoft Anti-Malware online:

Buy Emsisoft Anti-Malware now

Trust only on the best protection software!

Spring Offer!

Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.

Only a few days left! Order here

Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - Q1-Q3 2011
More independent reviews of anti-malware software