Home » Unwanted Programs » thecoolpics.net

thecoolpics.net

16 November 2006

thecoolpics.net can modify various settings of MS Windows, Intenet Explorer and Messaging software. It propagates as a message with malicious link and download the code to install thecoolpics.net on users computer. Common Instant Message an infected user sends are as follows:

  • thecoolpics.net/mypics.jpg
  • thecoolpics.com/nsl-school.org
  • http://thecoolpics.net/hot.jpg
  • hot pics this week – http://thecoolpics.net/hot.jpg
  • 1 of my vacation pictures – http://thecoolpics.net/vacation2.jpg
  • Screenshot of new windows version _ Windows Vista – http://thecoolpics.net/vista.jpg so cool
  • Images shot in Iraq _ The war will never end _ http://thecoolpics.net/Iraqwar.jpg
  • oh my god , i’ve won a 20000 usd lottery – http://thecoolpics.net/mylottery.jpg
  • never click into the links like something in this image – http://thecoolpics.net/dontclick.jpg
  • the page cannot be displayed ” http://thecoolpics.net/error.jpg Something was wrong !!! Check it again and tell me later.
  • Miss World 2006: – http://thecoolpics.net/MissWorld.jpg
  • Do you realize who is in this image – http://thecoolpics.net/who.jpg . Just think for a moment and tell me soon

Risk Level: Medium

Affected System: Windows

No related posts.

13 Comments »

  • 1 }
    Dave Marley said:

    This is an infection caused by w32.Sohanad.

    How to remove thecoolpics:
    1. Please see Lavasoft Ad-Aware Scanning Procedure to remove the threat.

    25 November 2006 at 6:53 am
  • 2 }
    Mike Pilis said:

    To remove this annoying thecoolpics, what I did was boot my computer in “Safemode with Networking” Then I connect to internet and proceed to Trendmicro Housecall, the online scanner and scanned my system.

    29 November 2006 at 2:06 am
  • 3 }
    keo channa said:

    i can’t do that whenever,i reboot in safe mode,the application always said invalid character.

    8 January 2007 at 2:10 am
  • 4 }
    Leonard Calma said:

    Is there any other way of removing that thecoolpics.net worm/adware/virus? Thanks

    16 February 2007 at 3:22 am
  • 5 }
    Nad said:

    I have tried this steps many times. whoooh! pls help. the code above has no use

    16 February 2007 at 5:01 am
  • 6 }
    j. d. said:

    er… try using No Adware. it’s free!

    24 May 2007 at 12:53 pm
  • 7 }
    eyesniper said:

    why should not ban this site (thecoolpics.net) for spreading threat,, this site is dangerous

    9 June 2007 at 3:43 am
  • 8 }
    Fawn B said:

    hmmm I am doing a lot of what you guys have done but I still can not get control of my IE homepage back

    20 June 2007 at 4:34 pm
  • 9 }
    webmaster (author) said:

    FawnB, have you tried Sysclean?
    http://www.precisesecurity.com/blogs/2007/05/31/trendmicro-sysclean/

    If still cannot resolved the issue. I suggest you post HijackThis logs to bleepingcomputer.com or computing.net. They can help you analyze your system. You may have been hit by various infections, not just Sohanad. Good luck!

    21 June 2007 at 10:13 am
  • 10 }
    AViorel said:

    First download hijackthis to kill the process … may vary at the name of the process EX: lsass.exe in c:\windows\lsass.exe
    … the viruses modify the explorer.exe and renaiming`it in Explorer.EXE …

    Seccond download ad-aware se update virus db and fully scan the pc.

    19 July 2007 at 5:28 am
  • 11 }
    seun said:

    this site, thecoolpics.net should be banned… it is too infectous and dangerous…

    9 October 2007 at 8:05 am
  • 12 }
    nel said:

    well this is very annoying site it shoulld be ban asap…grrrrr

    15 October 2007 at 5:31 pm
  • 13 }
    angel said:

    tjeng tay chaG? hjeu? mo^ te ji`

    16 July 2009 at 1:34 am

Leave your response!

Add your comment below or subscribe to these comments via RSS.
Be nice. Keep it clean. Stay on topic. No spam.

More in Unwanted Programs