Home » Unwanted Programs » thecoolpics.net

thecoolpics.net

16 November 2006

thecoolpics.net can modify various settings of MS Windows, Intenet Explorer and Messaging software. It propagates as a message with malicious link and download the code to install thecoolpics.net on users computer. Common Instant Message an infected user sends are as follows:

  • thecoolpics.net/mypics.jpg
  • thecoolpics.com/nsl-school.org
  • http://thecoolpics.net/hot.jpg
  • hot pics this week – http://thecoolpics.net/hot.jpg
  • 1 of my vacation pictures – http://thecoolpics.net/vacation2.jpg
  • Screenshot of new windows version _ Windows Vista – http://thecoolpics.net/vista.jpg so cool
  • Images shot in Iraq _ The war will never end _ http://thecoolpics.net/Iraqwar.jpg
  • oh my god , i’ve won a 20000 usd lottery – http://thecoolpics.net/mylottery.jpg
  • never click into the links like something in this image – http://thecoolpics.net/dontclick.jpg
  • the page cannot be displayed ” http://thecoolpics.net/error.jpg Something was wrong !!! Check it again and tell me later.
  • Miss World 2006: – http://thecoolpics.net/MissWorld.jpg
  • Do you realize who is in this image – http://thecoolpics.net/who.jpg . Just think for a moment and tell me soon

Risk Level: Medium

Affected System: Windows

No related posts.

13 Comments »

  • 1 }
    Dave Marley said:

    This is an infection caused by w32.Sohanad.

    How to remove thecoolpics:
    1. Please see Lavasoft Ad-Aware Scanning Procedure to remove the threat.

  • 2 }
    Mike Pilis said:

    To remove this annoying thecoolpics, what I did was boot my computer in “Safemode with Networking” Then I connect to internet and proceed to Trendmicro Housecall, the online scanner and scanned my system.

  • 3 }
    keo channa said:

    i can’t do that whenever,i reboot in safe mode,the application always said invalid character.

  • 4 }
    Leonard Calma said:

    Is there any other way of removing that thecoolpics.net worm/adware/virus? Thanks

  • 5 }
    Nad said:

    I have tried this steps many times. whoooh! pls help. the code above has no use

  • 6 }
    j. d. said:

    er… try using No Adware. it’s free!

  • 7 }
    eyesniper said:

    why should not ban this site (thecoolpics.net) for spreading threat,, this site is dangerous

  • 8 }
    Fawn B said:

    hmmm I am doing a lot of what you guys have done but I still can not get control of my IE homepage back

  • 9 }
    webmaster (author) said:

    FawnB, have you tried Sysclean?
    http://www.precisesecurity.com/blogs/2007/05/31/trendmicro-sysclean/

    If still cannot resolved the issue. I suggest you post HijackThis logs to bleepingcomputer.com or computing.net. They can help you analyze your system. You may have been hit by various infections, not just Sohanad. Good luck!

  • 10 }
    AViorel said:

    First download hijackthis to kill the process … may vary at the name of the process EX: lsass.exe in c:\windows\lsass.exe
    … the viruses modify the explorer.exe and renaiming`it in Explorer.EXE …

    Seccond download ad-aware se update virus db and fully scan the pc.

  • 11 }
    seun said:

    this site, thecoolpics.net should be banned… it is too infectous and dangerous…

  • 12 }
    nel said:

    well this is very annoying site it shoulld be ban asap…grrrrr

  • 13 }
    angel said:

    tjeng tay chaG? hjeu? mo^ te ji`

Leave your response!

Add your comment below or subscribe to these comments via RSS.
Be nice. Keep it clean. Stay on topic. No spam.

More in Unwanted Programs