thecoolpics.net can modify various settings of MS Windows, Intenet Explorer and Messaging software. It propagates as a message with malicious link and download the code to install thecoolpics.net on users computer. Common Instant Message an infected user sends are as follows:
- thecoolpics.net/mypics.jpg
- thecoolpics.com/nsl-school.org
- http://thecoolpics.net/hot.jpg
- hot pics this week - http://thecoolpics.net/hot.jpg
- 1 of my vacation pictures - http://thecoolpics.net/vacation2.jpg
- Screenshot of new windows version _ Windows Vista - http://thecoolpics.net/vista.jpg so cool
- Images shot in Iraq _ The war will never end _ http://thecoolpics.net/Iraqwar.jpg
- oh my god , i’ve won a 20000 usd lottery - http://thecoolpics.net/mylottery.jpg
- never click into the links like something in this image - http://thecoolpics.net/dontclick.jpg
- the page cannot be displayed ” http://thecoolpics.net/error.jpg Something was wrong !!! Check it again and tell me later.
- Miss World 2006: - http://thecoolpics.net/MissWorld.jpg
- Do you realize who is in this image - http://thecoolpics.net/who.jpg . Just think for a moment and tell me soon
Risk Level: Medium
Affected System: Windows
13 Responses for "thecoolpics.net"
This is an infection caused by w32.Sohanad.
How to remove thecoolpics:
1. Please see Lavasoft Ad-Aware Scanning Procedure to remove the threat.
To remove this annoying thecoolpics, what I did was boot my computer in “Safemode with Networking” Then I connect to internet and proceed to Trendmicro Housecall, the online scanner and scanned my system.
i can’t do that whenever,i reboot in safe mode,the application always said invalid character.
Is there any other way of removing that thecoolpics.net worm/adware/virus? Thanks
I have tried this steps many times. whoooh! pls help. the code above has no use
er… try using No Adware. it’s free!
why should not ban this site (thecoolpics.net) for spreading threat,, this site is dangerous
hmmm I am doing a lot of what you guys have done but I still can not get control of my IE homepage back
FawnB, have you tried Sysclean?
http://www.precisesecurity.com/blogs/2007/05/31/trendmicro-sysclean/
If still cannot resolved the issue. I suggest you post HijackThis logs to bleepingcomputer.com or computing.net. They can help you analyze your system. You may have been hit by various infections, not just Sohanad. Good luck!
First download hijackthis to kill the process … may vary at the name of the process EX: lsass.exe in c:\windows\lsass.exe
… the viruses modify the explorer.exe and renaiming`it in Explorer.EXE …
Seccond download ad-aware se update virus db and fully scan the pc.
this site, thecoolpics.net should be banned… it is too infectous and dangerous…
well this is very annoying site it shoulld be ban asap…grrrrr
tjeng tay chaG? hjeu? mo^ te ji`
Any Response?
Can't Find a Solution?
Start a Discussion Here!