Skip to main content

Cool

Classification

Category:

Malware

Aliases:

  • Cool
  • Trojan.Cool
  • Trojan.AOL.Cool
  • Mine
  • Trojan/Mine

Summary

Trojan.AOL.Cool is a trojan that affects AOL client software and steals information from AOL users. Also according to reports it can spread itself to other AOL users (we can't confirm that so far).

Removal

Technical Details

The trojan usually arrives in email message with a subject 'Hey You' and MINE.EXE file attached. When that attachment is run, the trojan installs itself 3 times (all its files have hidden attributes):

c:\msdos98.exe \Windows\uninstallms.exe \Windows\System\mine.exe

The trojan modifies 'RUN=' tag in WIN.INI file to run one of its copies each time Windows starts. The trojan adds a lot of spaces to its execution string in WIN.INI to hide its name from being viewed in a text viewer/editor when text lines are not wrapped. Also the trojan sets readonly attribute to WIN.INI file.

[Alexey Podrezov, F-Secure Corp.; January 2001]

Protect your devices from malware with F‑Secure Total

Protecting your devices from malicious software is essential for maintaining online security. F‑Secure Total makes this easy, helping you to secure your devices in a brilliantly simple way.

  • Award‑winning antivirus and malware protection

  • Online browsing, banking, and shopping protection

  • 24/7 online identity and data breach monitoring

  • Unlimited VPN service to safe­guard your privacy

  • Password manager with private data protection

Choose how many devices you want to protect to get started.

  • Free customer support

  • Cancel anytime

  • The trial does not obligate you to buy the product

After 30 days your subscription will renew automatically for one year at €69.99.

More Support

Community

Ask questions in our Community.

User guides

Check the user guide for instructions.

Contact Support

Chat with with or call an agent.

Submit a Sample

Submit a file or URL for analysis.