Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown
Reccomendation CLSID Details FileName
a PackageHtmlCab.CAB | May be related to CoolWebSearch Parasite
b 00000000-0000-0000-0000-000000000000CnbarIE.dll Cnbabe.dll - Commonname http://www.symantec.com/avcenter/venc/data/adware.commonname.htm | CnbarIE.dll Cnbabe.dll - Commonname http://www.symantec.com/avcenter/venc/data/adware.commonname.html adware CnbarIE.dll
a 00000000-0000-0000-0000-000020030000A091AEL.exe | Dialer - more here
a 00000000-0000-0000-0000-000330050660aboxinst_int20.exe | Reported as Win32/TrojanDownloader.VB.FI by NOD32.
a 00000000-0000-0000-0000-100000000003e83d919e87...2a33d1d2_35.exe | Added by the Trojan-Downloader.Win32.Small.bwy
a 00000000-0000-0000-0000-100005000004file b_35.exe | Added by the Trojan-Downloader.Win32.Small.bwy
g 00000000-0000-0000-0000-C4CA9A05F1E2ppgiecom*.dll PPGIEC~*.DLL (* = digit) - PPGou http://www.ppgou.com/ p2p client and download acceler | ppgiecom*.dll PPGIEC~*.DLL (* = digit) - PPGou http://www.ppgou.com/ p2p client and download accelerator ppgiecom*.dll
b 00000000-0000-0000-8835-3EFF76BF2657kw3eef76.dll - LZIO.com adware http://www.spywareguide.com/product_show.php?id=853 kw3eef76.dll
b 00000000-0000-0000-BFA1-D7EE6696B865icdd7ee6.dll icddefff.dll - LZIO.com adware http://www.spywareguide.com/product_show.php?id=853 icdd7ee6.dll
b 00000000-0000-41a3-98CF-00000000168Bwmcbaaca.dll wm41a398.dll - LZIO.com adware http://www.spywareguide.com/product_show.php?id=853 wmcbaaca.dll
b 00000000-0000-476B-A2E7-BB1B6D46B554Zango SiteFinder.dll - 180Solutions ZangoSearch http://securityresponse.symantec.com/avcenter/venc/d | Zango SiteFinder.dll - 180Solutions ZangoSearch http://securityresponse.symantec.com/avcenter/venc/data/adware.zangosearch.html adware variant - also see this_note http://www.benedelman.org/spyware/180-affiliates/ Zango SiteFinder.dll
b 00000000-0000-47c5-A90F-2CDE8F7638DBiedcb1f5.dll iel2cde8.dll ie758e49.dll ielcaabe.dll - LZIO.com adware http://www.spywareguide.com/pr | iedcb1f5.dll iel2cde8.dll ie758e49.dll ielcaabe.dll - LZIO.com adware http://www.spywareguide.com/product_show.php?id=853 iedcb1f5.dll
b 00000000-0000-5DFC-5652-1705043F6518"audiosrv32.dll - ""TX 4"" BrowserAd adware" | "audiosrv32.dll - ""TX 4"" BrowserAd adware" "audiosrv32.dll
b 00000000-0000-7EBF-57C6-0BAE047EA682"autodisc32.dll - ""TX 4"" BrowserAd adware" | "autodisc32.dll - ""TX 4"" BrowserAd adware" "autodisc32.dll
b 00000000-0001-0345-2280-0287F27A63EE"Browserad.dll - ""TX 4"" BrowserAd adware" | "Browserad.dll - ""TX 4"" BrowserAd adware" "Browserad.dll
b 00000000-0001-1DBE-075A-39EC04BD88AF"Avicap32.dll - ""TX 4"" BrowserAd adware" | "Avicap32.dll - ""TX 4"" BrowserAd adware" "Avicap32.dll
b 00000000-0001-F7A6-1F38-0204019E355E"Asferror32.dll - ""TX 4"" BrowserAd adware" | "Asferror32.dll - ""TX 4"" BrowserAd adware" "Asferror32.dll
b 00000000-0002-53D4-0622-35EA0235778E"Ati2dvaa32.dll - ""TX 4"" BrowserAd adware" | "Ati2dvaa32.dll - ""TX 4"" BrowserAd adware" "Ati2dvaa32.dll
g 00000000-0006-5041-4354-0020E48020AF12washie.dll - 12-Wash Popup-Killer http://www.12ghosts.com/ghosts/wash.htm 12washie.dll
g 00000000-0007-5041-4354-0020e48020af12Popup.dll - 12Ghosts Popup Killer http://12ghosts.com/ghosts/popup.htm 12Popup.dll
b 00000000-0008-D357-0798-004401965D4A"apphelp32.dll - ""TX 4"" BrowserAd adware" | "apphelp32.dll - ""TX 4"" BrowserAd adware" "apphelp32.dll
b 00000000-0009-1C42-7D61-6CFF050894A7"avisynthEx32.dll - ""TX 4"" BrowserAd adware" | "avisynthEx32.dll - ""TX 4"" BrowserAd adware" "avisynthEx32.dll
g 00000000-000A-5041-4354-0020E48020AF12toolbar.dll - 12Ghosts Toolbar http://www.12ghosts.com/ghosts/toolbar.htm 12toolbar.dll
b 00000000-0015-BD9C-263A-493001BA0C6C"asycfilt32.dll - ""TX 4"" BrowserAd adware" | "asycfilt32.dll - ""TX 4"" BrowserAd adware" "asycfilt32.dll
b 00000000-002B-EFE6-6B08-560C01922D3B"Apcups32.dll - ""TX 4"" BrowserAd adware" | "Apcups32.dll - ""TX 4"" BrowserAd adware" "Apcups32.dll
b 00000000-0033-C1AC-0E62-0C1F0537605D"aviwrap32.dll - ""TX 4"" BrowserAd adware" | "aviwrap32.dll - ""TX 4"" BrowserAd adware" "aviwrap32.dll
b 00000000-008C-1E65-6AA6-3A270279F027"Ati2dvag32.dll - ""TX 4"" BrowserAd adware" | "Ati2dvag32.dll - ""TX 4"" BrowserAd adware" "Ati2dvag32.dll
b 00000000-00FA-71ED-4ABA-348801BAA0A9"Athprxy32.dll - ""TX 4"" BrowserAd adware" | "Athprxy32.dll - ""TX 4"" BrowserAd adware" "Athprxy32.dll
b 00000000-08C8-8E68-587B-61F804EE6164"avisynth32.dll - ""TX 4"" BrowserAd adware" | "avisynth32.dll - ""TX 4"" BrowserAd adware" "avisynth32.dll
b 00000000-0C95-B1F8-547A-405204D6961A"avifile32.dll - ""TX 4"" BrowserAd adware" | "avifile32.dll - ""TX 4"" BrowserAd adware" "avifile32.dll
b 00000000-10D6-4e5f-8F7F-29B32C1C0FC4icddefff.dll - LZIO.com adware http://www.spywareguide.com/product_show.php?id=853 icddefff.dll
b 00000000-1530-70F0-6420-4C2701B37263"asfsipc32.dll - ""TX 4"" BrowserAd adware" | "asfsipc32.dll - ""TX 4"" BrowserAd adware" "asfsipc32.dll
b 00000000-15D9-4736-AB29-131578A45F2Bwsrchc3.dll - WordsOnWeb http://research.sunbelt-software.com/threatdisplay.aspx?threatid=42050 adwa | wsrchc3.dll - WordsOnWeb http://research.sunbelt-software.com/threatdisplay.aspx?threatid=42050 adware wsrchc3.dll
b 00000000-167B-41bc-95FF-86A07B14712Che3bbcff.dll - LZIO.com adware http://www.spywareguide.com/product_show.php?id=853 he3bbcff.dll
b 00000000-2565-4c5b-A455-A74C8A2247ABwmcbaaca.dll - LZIO.com adware http://www.spywareguide.com/product_show.php?id=853 wmcbaaca.dll
g 00000000-280E-445B-B051-A8B2DA7E798AHaokanBar.dll HAOKAN~1.DLL - Super Rabbit Magic Set http://www.superrsoft.com/eng/magicset.htm HaokanBar.dll
b 00000000-387E-9D50-0079-1744044CB22A"authz32.dll - ""TX 4"" BrowserAd adware" | "authz32.dll - ""TX 4"" BrowserAd adware" "authz32.dll
a 00000000-5555-0704-0B53-2C8830E9FAEC | http://research.sunbelt-software.com/threat_display.cfm?name=IELoader&threatid=39158&search=IELoader
b 00000000-59D4-4008-9058-080011001200dlmax.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html aka BetterInternet http:/ | dlmax.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html aka BetterInternet http://www.symantec.com/avcenter/venc/data/adware.betterinternet.html adware variant dlmax.dll
b 00000000-5eb9-11d5-9d45-009027c14662ehelper.dll VX2.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html adware variant ehelper.dll
g 00000000-623A-11D4-BCDB-005004131771Vgiehelper1-2-0-27.dll - Videogate VG Companion http://www.videogate.com/prod_overview.asp Vgiehelper1-2-0-27.dll
b 00000000-64C4-4a64-9767-895AB4921E41ielcaabe.dll - LZIO.com adware http://www.spywareguide.com/product_show.php?id=853 ielcaabe.dll
a 00000000-6666-0704-0B53-2C8830E9FAECaxload.cab | Site key.one2bill.de blocked by this host file.axload.cab
g 00000000-6C30-11D8-9363-000AE6309658PWIBHO.DLL - Pop-Up Stopper Anti-Spyware http://www.panicware.com/product_psantispyware.html toolbar | PWIBHO.DLL - Pop-Up Stopper Anti-Spyware http://www.panicware.com/product_psantispyware.html toolbar PWIBHO.DLL
d 00000000-6CB0-410C-8C3D-8FA8D2011D0AiMeshBHO.dll - iMesh http://research.sunbelt-software.com/threatdisplay.aspx?name=iMesh&threatid=699 | iMeshBHO.dll - iMesh http://research.sunbelt-software.com/threatdisplay.aspx?name=iMesh&threatid=6994 MediaBar iMeshBHO.dll
a 00000000-8633-1405-0B53-2C8830E9FAEC | http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453074881
b 00000000-C1EC-0345-6EC2-4D0300000000ZServ.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html aka BetterInternet http:/ | ZServ.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html aka BetterInternet http://www.symantec.com/avcenter/venc/data/adware.betterinternet.html adware variant ZServ.dll
a 00000000-CDDC-0704-0B53-2C8830E9FAEC | http://research.sunbelt-software.com/threat_display.cfm?name=IELoader&threatid=39158&search=IELoader
b 00000000-D9E3-4BC6-A0BD-3D0CA4BE5271Fhfmm.dll - AdBreak http://www.pestpatrol.com/spywarecenter/pest.aspx?id=453072504 adware Fhfmm.dll
b 00000000-DD60-0064-6EC2-6E0100000000Pynix.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html aka BetterInternet http:/ | Pynix.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html aka BetterInternet http://www.symantec.com/avcenter/venc/data/adware.betterinternet.html adware variant Pynix.dll
a 00000000-DDBB-0704-0B53-2C8830E9FAEC | http://www.viruslist.com/en/viruses/encyclopedia?virusid=39586
b 00000000-F09C-02B4-6EC2-AD0300000000BTGrab.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html aka BetterInternet http: | BTGrab.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html aka BetterInternet http://www.symantec.com/avcenter/venc/data/adware.betterinternet.html adware variant BTGrab.dll
g 00000000-F183-11D1-BE1C-00000100C596Dlwieapp.dll - Download Wonder http://www.ariesoft.com/download_wonder_overview.htm Dlwieapp.dll
b 00000001-C003-4A2F-9142-7CB1D78DE6C1tct101.dll - DyFuCA.Internet Optimizer http://www3.ca.com/securityadvisor/pest/pest.aspx?id=4530762 | tct101.dll - DyFuCA.Internet Optimizer http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453076206 adware tct101.dll
g 00000003-1118-11da-8cd6-0800200c9888mscoree.dll - Tenson Download Accelerator Manager http://www.tensons.com/products/downloadaccelerato | mscoree.dll - Tenson Download Accelerator Manager http://www.tensons.com/products/downloadacceleratormanager/freeedition/ mscoree.dll
g 0000000A-0000-0010-8000-00AA00389B71 | http://www.microsoft.com/windows/windowsmedia/mp10/default.aspx
b 00000010-0000-0010-8000-000000000002AnnotateBHO.dll - Annotate.net NetRadar http://www3.ca.com/securityadvisor/pest/pest.aspx?id=61818 AnnotateBHO.dll
b 00000010-6F7D-442C-93E3-4A4827C2E4C8nem219.dll nem220.dll - DyFuCa/Internet_Optimizer http://sarc.com/avcenter/venc/data/pf/adware.netop | nem219.dll nem220.dll - DyFuCa/Internet_Optimizer http://sarc.com/avcenter/venc/data/pf/adware.netoptimizer.html adware variant nem219.dll
a 00000012-890E-4AAC-AFD9-000000000000HardcoreTeens.xxx | Adware browser hijacker - more here
b 00000015-A527-34E7-25C2-03A4E313B2E9"winsrvs_1.dll - ""Ramdud"" http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=AD | "winsrvs_1.dll - ""Ramdud"" http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=ADW_RAMM.101 adware" "winsrvs_1.dll
d 0000001D-BA9B-11D2-BDF1-0090272A6D78smbar.dll - Surfmonkey http://www.cexx.org/surfmonk.htm smbar.dll
b 00000026-8735-428D-B81F-DD098223B25Fspeer.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html adware variant also see | speer.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html adware variant also see here http://securityresponse.symantec.com/avcenter/venc/data/adware.mxtarget.html speer.dll
b 00000035-92F8-407F-98A5-7D8ADA59B6BBSpeer2.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html adware variant also see | Speer2.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html adware variant also see here http://securityresponse.symantec.com/avcenter/venc/data/adware.mxtarget.html Speer2.dll
b 00000049-8F91-4D9C-9573-F016E7626484ceres.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html aka BetterInternet http:/ | ceres.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html aka BetterInternet http://www.symantec.com/avcenter/venc/data/adware.betterinternet.html adware variant ceres.dll
b 0000005D-C175-4405-BAC5-1F3B2BAF67C6kz515.dll - Transponder variant http://webhelper4u.com/webhelpermainmenu.html kz515.dll
b 00000062-2E5F-4AF7-986E-5B64E0951A96imGiant.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html aka BetterInternet http | imGiant.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html aka BetterInternet http://www.symantec.com/avcenter/venc/data/adware.betterinternet.html adware variant imGiant.dll
b 00000097-7C67-4BA6-8B42-05128941688ASpeeryox.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html adware variant also s | Speeryox.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html adware variant also see here http://securityresponse.symantec.com/avcenter/venc/data/adware.mxtarget.html Speeryox.dll
b 000000DA-0786-4633-87C6-1AA7A4429EF1emesx.dll - FavoriteMan http://www.symantec.com/avcenter/venc/data/adware.favoriteman.html adware va | emesx.dll - FavoriteMan http://www.symantec.com/avcenter/venc/data/adware.favoriteman.html adware variant emesx.dll
b 000000F1-34E3-4633-87C6-1AA7A44296DAFOne.dll - FavoriteMan http://www.symantec.com/avcenter/venc/data/adware.favoriteman.html adware var | FOne.dll - FavoriteMan http://www.symantec.com/avcenter/venc/data/adware.favoriteman.html adware variant FOne.dll
g 00000178-CD4A-447a-BCF9-6FD0096B5527P3PClient.dll P3PCLI~*.DLL - AT&T Privacy Bird P3P Client http://www.privacybird.com/ | P3PClient.dll P3PCLI~*.DLL - AT&T Privacy Bird P3P Client http://www.privacybird.com/ P3PClient.dll
b 00000185-B716-11D3-92F3-00D0B709A7D8BHO.0.1.0.***.dll (* = digit) BHO010~*.DLL - SmartBrowser http://www.symantec.com/avcenter/venc/data | BHO.0.1.0.***.dll (* = digit) BHO010~*.DLL - SmartBrowser http://www.symantec.com/avcenter/venc/data/adware.smartbrowser.html adware BHO.0.1.0.***.dll
b 00000185-C745-43D2-44F1-01A1C789C738BHO.0.1.0.***.dll (* = digit) BHO010~*.DLL - SmartBrowser http://www.symantec.com/avcenter/venc/data | BHO.0.1.0.***.dll (* = digit) BHO010~*.DLL - SmartBrowser http://www.symantec.com/avcenter/venc/data/adware.smartbrowser.html adware BHO.0.1.0.***.dll
b 00000250-0320-4DD4-BE4F-7566D2314352VoiceIP.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html adware variant VoiceIP.dll
b 0000026A-8230-4DD4-BE4F-6889D1E74167Tps108.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html adware variant Tps108.dll
b 00000273-8230-4DD4-BE4F-6889D1E74167host.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html adware variant host.dll
g 00000285-B716-11D3-92F3-00D0B709A7D8iDcide.dll - iDcide Privacy Companion http://www.idcide.com/pages/per_intro.htm iDcide.dll
g 0000036B-C524-4050-81A0-243669A86B9Fcompanioncore.dll - Part of Windows Live companioncore.dll
b 000004CC-E4FF-4F2C-BC30-DBEF0B983BC9Ipinsigt.dll - IPInsight http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453072534 adware Ipinsigt.dll
b 00000580-C637-11D5-831C-00105AD6ACF0Msview.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html adware variant Msview.dll
b 000006B1-19B5-414A-849F-2A3C64AE6939bi.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html adware variant bi.dll
b 00000762-3965-4A1A-98CE-3D4BF457D4C8sidesearch.dll sidesearch****.dll ( * = digit) - Lycos SideSearch http://www.symantec.com/avcenter/v | sidesearch.dll sidesearch****.dll ( * = digit) - Lycos SideSearch http://www.symantec.com/avcenter/venc/data/adware.sidesearch.html adware variant sidesearch.dll
g 00000AAA-A363-466E-BEF5-9BB68697AA7F"WebThunderBHO_0**.dll (* = digit) - Xunlei.com ""Thunder"" download manager" | "WebThunderBHO_0**.dll (* = digit) - Xunlei.com ""Thunder"" download manager" "WebThunderBHO_0**.dll
? 00000E45-6B72-46D2-9A2C-06C78C93C4FA"tmbho.dll - ""The Mutual Rewards"" Browser plugin" | "tmbho.dll - ""The Mutual Rewards"" Browser plugin" "tmbho.dll
b 00000EF1-0786-4633-87C6-1AA7A44296DAATPartners.dll ATPART~*.dll n3tpa1p.dll Calsdr.dll Gr0*.dll (* = digit) td1.dll random file names - | ATPartners.dll ATPART~*.dll n3tpa1p.dll Calsdr.dll Gr0*.dll (* = digit) td1.dll random file names - FavoriteMan http://www.symantec.com/avcenter/venc/data/adware.favoriteman.html adware variant ATPartners.dll
b 00000EF1-34E3-4633-87C6-1AA7A44296DAF1.dll mpz300.dll ZZ.dll ***.dll (random chars) - FavoriteMan http://www.symantec.com/avcenter/venc/ | F1.dll mpz300.dll ZZ.dll ***.dll (random chars) - FavoriteMan http://www.symantec.com/avcenter/venc/data/adware.favoriteman.html adware variant F1.dll
b 00000FF6-0043-40AE-A591-3FB8AB4B8316siteErr.dll - Acez.SiteError http://research.sunbelt-software.com/threatdisplay.aspx?name=Acez.SiteE | siteErr.dll - Acez.SiteError http://research.sunbelt-software.com/threatdisplay.aspx?name=Acez.SiteError&threatid=43078 adware siteErr.dll
b 00001E9D-B879-35AF-C94E-AA3B109CDF81CR**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | CR**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component CR**32.DLL
b 000020DD-C72E-4113-AF77-DD56626C6C42twaintec.dll - TwainTech adware http://www.pchell.com/support/twaintec.shtml twaintec.dll
b 0000607D-D204-42C7-8E46-216055BF9918mxTarget.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html adware variant also s | mxTarget.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html adware variant also see here http://securityresponse.symantec.com/avcenter/venc/data/adware.mxtarget.html mxTarget.dll
b 00006236-A927-4979-9F45-AB915FB9AADESITEHE~1.DLL - ChangeSoft SiteHelper hijacker SITEHE~1.DLL
d 0000CC75-ACF3-4cac-A0A9-DD3868E06852Dapbho.dll - DAP http://www.speedbit.com/DefaultT.asp? Dapbho.dll
b 00010A21-B924-4CD6-893C-EEA1071AE8B3PCDBS.DLL - AdsStore adware http://www.pestpatrol.com/PestInfo/a/adsstore.asp PCDBS.DLL
O 000123B4-9B42-4900-B3F7-F4B073EFC214 orbitcth.dll | Orbit downloader orbitcth.dll
b 00014B58-338A-45F2-81E2-6A86F27399B7cfg.dll BoBoHelper.dll BOBOHE~1.DLL - Parasite of Chinese origin producing hicn1.com popups - detect | cfg.dll BoBoHelper.dll BOBOHE~1.DLL - Parasite of Chinese origin producing hicn1.com popups - detected by DrWeb http://www.drweb.com/ antivirus as Adware.Adjump cfg.dll
b 000277A3-7D84-406a-9799-D12A81594693srchfst.dll - SearchFast http://vil.nai.com/vil/content/v_133641.htm adware srchfst.dll
b 00027925-0017-4faf-9539-90E4AC0B9EC5ttext.dll eltt.dll sh32.dll - IePlugin/ImiServ http://www3.ca.com/securityadvisor/pest/pest.aspx?id= | ttext.dll eltt.dll sh32.dll - IePlugin/ImiServ http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453072530 adware variant ttext.dll
g 00033313-E2DF-11D3-A281-00E09801CFF2"XPWSHH.dll - Part of a Xerox http://www.xerox.com/ proprietary shared knowledge system now called " | "XPWSHH.dll - Part of a Xerox http://www.xerox.com/ proprietary shared knowledge system now called ""Eureka II"" which allows its users to author validate and access solutions to common problems. The browser plugin serves to communicate problems causes and solutions via the so-called eService interface." "XPWSHH.dll
b 00041A26-7033-432C-94C7-6371DE343822msnet.dll scbar.dll winex.dll se.dll - NetworkEssentials.SCBar http://www3.ca.com/securityadvisor/pe | msnet.dll scbar.dll winex.dll se.dll - NetworkEssentials.SCBar http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453075487 adware msnet.dll
b 000473CD-A3ED-4969-A063-2BBA07945441Oemji.dll - Oemji.Toolbar http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=200 | Oemji.dll - Oemji.Toolbar http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2006-100617-0636-99&tabid=2 adware - also see here http://research.sunbelt-software.com/threatdisplay.aspx?&threatid=40752 Oemji.dll
g 0005A87D-D626-4B3A-84F9-1D9571695F57"thunderbho.dll ThunderBHO_v07.dll THUNDE~*.DLL - Xunlei.com ""Thunder"" download manager" | "thunderbho.dll ThunderBHO_v07.dll THUNDE~*.DLL - Xunlei.com ""Thunder"" download manager" "thunderbho.dll
g 00071603-6F90-11d3-B4BF-00902757504Cisbarbho.dll - InfoSpace Desktop Portal http://www.infospace.com/home/about/infra_uk.htm isbarbho.dll
b 0007522A-2297-43C1-8EB1-C90B0FF20DA5enhtb.dll - ShopNav http://www.sarc.com/avcenter/venc/data/pf/spyware.shopnav.html adware variant enhtb.dll
b 000E6ED5-E3FC-4c93-99E9-D38D2A9F9B09he3bbcff.dll he3e3fc4.dll - LZIO.com adware http://www.spywareguide.com/product_show.php?id=853 he3bbcff.dll
b 000E7270-CC7A-0786-8E7A-DA09B51938A6n3tpa1.dll netpals.dll - NetPal http://www.symantec.com/avcenter/venc/data/adware.netpal.html adware | n3tpa1.dll netpals.dll - NetPal http://www.symantec.com/avcenter/venc/data/adware.netpal.html adware n3tpa1.dll
b 000FBDB5-8043-4F24-ABCC-22654DA54A22Flash.dll Config.dll - Unidentified parasite of Chinese origin - should you have any information abo | Flash.dll Config.dll - Unidentified parasite of Chinese origin - should you have any information about this application [xs4] - if you actually have a copy of the file please attach it to your email for analysis. Thanks! Flash.dll
g 000FCCCE-C733-11D3-A704-009027A7903DSTOCKS~1.DLL - StockStar.com http://www.x63.com/2/www.stockstar.com/ toolbar STOCKS~1.DLL
b 00104261-366C-F5DC-AF52-372D821F4505ADD**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | ADD**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component ADD**.DLL
b 00110011-4B0B-44D5-9718-90C88817369BNavExt.dll sys_ext.dll - CoolWebSearch http://cwshredder.net/cwshredder/cwschronicles.html parasite | NavExt.dll sys_ext.dll - CoolWebSearch http://cwshredder.net/cwshredder/cwschronicles.html parasite variant NavExt.dll
g 001165C1-A640-11D7-9FD9-0080481ADA61inquiry.dll - MetaProducts Inquiry http://www.metaproducts.com/mp/mpProducts_Detail.asp?id=31 inquiry.dll
g 00134F72-5284-44F7-95A8-52A619F70751 | http://www.trendmicro.com/en/products/desktop/osce/evaluate/overview.htm
b 00172AD1-F4BD-48C0-AEB5-A4CFE4638393v199.dll - QuickLinks/LinkMaker http://vil.mcafeesecurity.com/vil/content/v_134892.htm adware varian | v199.dll - QuickLinks/LinkMaker http://vil.mcafeesecurity.com/vil/content/v_134892.htm adware variant - also detected as Adware.Suggestor http://info.ahnlab.com/securityinfo/virus_view_eng_new2.jsp?SEQ_NO=4388 v199.dll
b 0019C3E2-DD48-4A6D-AB2D-8D32436313D9oo4.dll bsx5.dll - BookedSpace http://www.symantec.com/avcenter/venc/data/adware.bookedspace.html ad | oo4.dll bsx5.dll - BookedSpace http://www.symantec.com/avcenter/venc/data/adware.bookedspace.html adware variant oo4.dll
b 0019C3E2-DD48-4A6D-ABCD-8D32436323D9bxxs5.dll cfgmgr51.dll cfgmgr52.dll msbk32.dll cfg32p.dll - BookedSpace http://www3.ca.com/securitya | bxxs5.dll cfgmgr51.dll cfgmgr52.dll msbk32.dll cfg32p.dll - BookedSpace http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453076996 adware variant bxxs5.dll
g 001B3456-4ADE-44D0-8C23-D69D32658D84AtHocTBr.DLL - AtHoc http://www.athoc.com/site/solutions/contentPub.asp AtHocTBr.DLL
b 001C0628-4726-F204-3F0F-77067AD8EEC5API**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | API**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component API**.DLL
b 001C5F47-E8D6-E618-54EC-43089D824B4BWIN**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | WIN**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component WIN**.DLL
b 001DAE60-95C0-11d3-924E-009027950886Spotonbh.dll - WebSearch http://www.spywareguide.com/product_show.php?id=505 Spotonbh.dll
b 001E92E3-8050-9CD1-84A6-0910CDBA5E2BCR**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch a | CR**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component CR**.DLL
b 001F2470-5DF5-11d3-B991-00A0C9BB0874AtHocTBr.DLL - AtHoc Toolbar http://www.athoc.com/site/products/portalToolbar.asp AtHocTBr.DLL
d 001F2570-5DF5-11d3-B991-00A0C9BB0874Ebayband.dll - Ebay Toolbar http://pages.ebay.com/ebay_toolbar/ Ebayband.dll
b 001F6CC3-7E5E-DDEA-0B5C-0DA6CBD9094FIP**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles | IP**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component IP**.DLL
b 001F84D9-3242-C74E-D300-64A76315DE22NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component NT**32.DLL
g 0025739A-5875-4e33-8056-C03BABE37F9CPS.dll - AT&T Worldnet Service toolbar http://www.att.net/security/sc_toolbar.html | PS.dll - AT&T Worldnet Service toolbar http://www.att.net/security/sc_toolbar.html PS.dll
b 0026AD90-C86F-4269-97F3-DAB4897C6D06incfindbho.dll INCFIN~*.DLL - eUniverse IncrediFind http://www.symantec.com/avcenter/venc/data/adwar | incfindbho.dll INCFIN~*.DLL - eUniverse IncrediFind http://www.symantec.com/avcenter/venc/data/adware.incredifind.html adware variant incfindbho.dll
b 00283B79-8EAF-A0F2-004A-EFD319AA175DMFC**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | MFC**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component MFC**32.DLL
b 002AF282-E42D-4B51-9F70-F1570C02FAADTarget.dll - TargetAD http://vil.nai.com/vil/content/v_137612.htm adware Target.dll
b 002EB272-2590-4693-B166-FBD5D9B6FEA6multimpp.dll - MultiMPP.com adware http://www.multimpp.com/ multimpp.dll
g 002F5D22-AB48-4d51-A45A-9C2F22BE98B9click4.dll - Click4.com toolbar http://www.click4.com/toolbar.aspx click4.dll
b 003156AA-B2AD-54C8-CF6D-1C992B937149API**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | API**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component API**.DLL
b 003169BC-AB68-482F-AEA6-B51A47BDDB83ATIDEMGREDEM.dll - Parasite of Chinese origin hailing from yeacool.net detected by Kaspersky http:// | ATIDEMGREDEM.dll - Parasite of Chinese origin hailing from yeacool.net detected by Kaspersky http://www.kaspersky.com/ antivirus as Trojan-Clicker.Win32.Agent.h - also see here http://research.sunbelt-software.com/threatdisplay.aspx?threatid=55091 ATIDEMGREDEM.dll
b 00317A0E-1167-6D33-BFED-F012365FE844WIN**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | WIN**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component WIN**.DLL
b 00320615-B6C2-40A6-8F99-F1C52D674FADlocalNRD.dll - Transponder http://www.webhelper4u.com/tnewswritigs/index.html adware variant localNRD.dll
b 0032CCFA-D80B-DABE-C53B-7E94CD4E0B9DJAVA**.DLL win**.dll (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/c | JAVA**.DLL win**.dll (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component JAVA**.DLL win**.dll
b 0032D506-4FE0-DF8E-EB48-201C0AF54F67SDK**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | SDK**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component SDK**32.DLL
b 0033669F-AADD-AA59-AA7D-AA4B78888000wavvie2.dll - Variant of the Goldun http://www.frsirt.com/english/virus/2006/06355 password stealer | wavvie2.dll - Variant of the Goldun http://www.frsirt.com/english/virus/2006/06355 password stealer trojan wavvie2.dll
b 0033802A-E431-05A1-C82A-1F1A0E244040NET**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | NET**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component NET**32.DLL
b 0033AAE9-55C7-41F3-F763-32B1DA16BE5CMFC**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearc | MFC**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component MFC**32.DLL
b 003479D7-3BFD-52B0-F893-2938F51395A0CR**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | CR**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component CR**32.DLL
b 003482D3-A1D3-5890-2FB0-DBB032CAE989ADD**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | ADD**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component ADD**.DLL
b 0036F389-FEF8-43AC-9220-16430E0012EDiEBINST.dll - NaupointToolbar http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME= | iEBINST.dll - NaupointToolbar http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=ADW_NAUPONT.A adware variant iEBINST.dll
b 004334EB-68A9-4A29-9C12-1B225260C14Bwnsd.dll msoes.dll - Rogue.CZ.b http://info.ahnlab.com/securityinfo/virus_view_eng_new2.jsp?SEQ_NO=4 | wnsd.dll msoes.dll - Rogue.CZ.b http://info.ahnlab.com/securityinfo/virus_view_eng_new2.jsp?SEQ_NO=4529 adware wnsd.dll
b 00499BEF-283D-292E-F1C6-60D8F572A8A1D3**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | D3**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component D3**32.DLL
b 0049B89D-F24D-0FF7-FF16-A5D9BEA94A53ADD**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearc | ADD**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component ADD**32.DLL
g 004A5840-FF59-11d2-B50D-0090271D3FD4? - Yahoo Companion! http://companion.yahoo.com/
g 004B23E0-1E63-4ED6-BCAC-922BA26CF096PBBHO.dll - WinCognito popup blocker http://www.wincognito.com/ PBBHO.dll
b 004CAE59-A6ED-EFA4-22CF-1C6730C6A2D5JAVA**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | JAVA**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component JAVA**.DLL
b 004E2FBC-E423-85D7-ADF3-8C72B483F00ACR**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | CR**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component CR**32.DLL
b 004F7901-07FD-C0C0-D131-5B7DF9DD3DEBMFC**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | MFC**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component MFC**.DLL
b 004FBD22-BF74-D521-7B75-458EFE8A5F31JAVA**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | JAVA**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component JAVA**.DLL
g 0050A87F-CF26-41AE-9C0A-C32307C941CBrnieplug.dll - ReturnReceipt http://www.returnreceipt.com/returnreceipt/plugin.asp?sw=adv ActiveTrac | rnieplug.dll - ReturnReceipt http://www.returnreceipt.com/returnreceipt/plugin.asp?sw=adv ActiveTracker plugin rnieplug.dll
g 00533B73-E574-46E9-B06A-FDF4592E67CBApsHelper06.dll ApsHelper08.dll - ALPass password manager http://www.altools.net/Default.aspx?tabid= | ApsHelper06.dll ApsHelper08.dll - ALPass password manager http://www.altools.net/Default.aspx?tabid=62 ApsHelper06.dll
b 00534B55-3155-CA4F-B41D-0E922121D03Cbrowsemu.dll - Variant of the Goldun http://www.frsirt.com/english/virus/2006/06355 password stealer | browsemu.dll - Variant of the Goldun http://www.frsirt.com/english/virus/2006/06355 password stealer trojan detected by Kaspersky http://www.kaspersky.com/ antivirus as Trojan-Spy.Win32.Goldun.om browsemu.dll
b 0054E846-22A9-B070-9BB5-4EA63B80B61CAPI**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | API**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component API**32.DLL
g 0055C089-8582-441B-A0BF-17B458C2A3A8IDMIECC.dll - Internet Download Manager http://www.internetdownloadmanager.com/index.html IDMIECC.dll
b 0055C38C-E2C4-C5C7-5658-572D24B2C091MFC**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearc | MFC**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component MFC**32.DLL
b 00566D5A-B6F9-27AB-FD3D-31394CDD5109MFC**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearc | MFC**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component MFC**32.DLL
b 005714CD-0630-8CC6-E2CB-ADCEC38BF51ANT**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | NT**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component NT**32.DLL
b 0059410E-8DEE-0D98-C3BC-33C7339C21E9APP**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | APP**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component APP**.DLL
b 00595A1A-F3C3-0278-F9C8-F54F803375B2SYS**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | SYS**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component SYS**.DLL
b 00597C23-DF8F-1D28-47F2-6A500B910E65IE**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | IE**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component IE**32.DLL
b 005BABB0-E95B-9CB5-BA39-5FD11B1F199CMFC**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | MFC**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component MFC**.DLL
b 006037F9-A004-367C-C7FB-9C0C131CA3DFSDK**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | SDK**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component SDK**.DLL
b 0061A6A3-22A7-89C0-EBA9-4070623258CAATL**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | ATL**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component ATL**32.DLL
b 0061BD63-058F-80E6-6F6F-93801F6BBD3DMFC**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | MFC**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component MFC**.DLL
b 00628392-AE63-F006-1DD1-149D80FA0A89NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component NT**32.DLL
b 0062ABA8-6257-DA69-E685-7B9F2846DF6BAPI**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | API**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component API**32.DLL
b 0063090B-13DF-4A70-B546-1B118D5A15E6API**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | API**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component API**32.DLL
b 0063CFED-833F-566C-9F68-3F006AA0B861ADD**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearc | ADD**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component ADD**32.DLL
b 0063EB9B-4D3F-3D35-AEB9-740124D75902IP**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles | IP**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component IP**.DLL
b 00646EA9-2F9C-89E4-B2D7-0C0D9FC98508APP**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | APP**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component APP**32.DLL
b 00648363-6F72-649D-E734-F486A6986C74MFC**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | MFC**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component MFC**.DLL
b 00648569-1164-8F09-369E-5F1D4CF3EB7AMFC**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | MFC**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component MFC**.DLL
g 00649EC2-E572-11D3-8F5F-00C0DFEF760Fcopiloto.dll - iNetClient http://www.inetclient.com/ copiloto.dll
b 00673769-777F-4814-BE0F-74CBA1D823B8Iehook.dll - Malware taking advantage of the ASN.1_exploit http://www.us-cert.gov/cas/techalerts/TA0 | Iehook.dll - Malware taking advantage of the ASN.1_exploit http://www.us-cert.gov/cas/techalerts/TA04-041A.html Iehook.dll
b 0067566B-843F-941D-23E9-DE22B6315D82IP**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | IP**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component IP**32.DLL
b 006822A7-054C-D4E1-5DD5-312044BEE60EATL**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | ATL**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component ATL**.DLL
b 006D0367-56A7-6546-49D8-7B6D4D791008IP**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | IP**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component IP**32.DLL
b 006E8685-3705-B1F5-5DF6-0369B85B3CFEAPP**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | APP**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component APP**.DLL
b 007085F0-1707-524E-D27C-EE61D3E63E88JAVA**32.dll - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesear | JAVA**32.dll - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component JAVA**32.dll
b 00712260-4066-862C-4194-4CE678821EC8NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component NT**32.DLL
b 0072D796-0D8F-DC8B-A3DC-49F26EC3D261CR**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch a | CR**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component CR**.DLL
b 007430E2-88D1-986B-566D-510B4B345BB4SDK**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearc | SDK**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component SDK**32.DLL
b 0078391E-5E2C-E562-5F00-073BD75EB9F1MS**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles | MS**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component MS**.DLL
b 007938B8-8D10-1224-1A13-F33AEB4B4A80D3**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | D3**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component D3**32.DLL
b 0079FF9A-FD61-2E10-F545-1738C991EC0BNT**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch a | NT**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component NT**.DLL
b 007A6846-97DC-92B1-9E5A-E8BBFBC955C7MFC**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | MFC**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component MFC**.DLL
b 007B5594-42B2-B1C8-B616-65426F4907FFAPI**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | API**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component API**32.DLL
b 007B911E-5570-A396-6F4A-A0CC235143DCD3**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch a | D3**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component D3**.DLL
b 007CE2B4-4BF8-3DD4-30AB-1A5DBE3DF7C5NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component NT**32.DLL
b 007D7874-818F-5A8C-2C0C-25C2A5907083ADD**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | ADD**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component ADD**.DLL
b 007DB292-112E-4F90-41EA-F1D4D83ADE09SDK**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | SDK**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component SDK**.DLL
b 007E5563-0D3B-D2C1-5E35-E9EFC3682342MS**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | MS**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component MS**32.DLL
b 007E8EDE-934B-8E63-6BD6-54D267C76795CR**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | CR**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component CR**32.DLL
b 007F3E5D-5957-E86E-8681-82EE2B1C5E7FADD**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearc | ADD**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component ADD**32.DLL
b 007FBB10-29F9-1035-4BC6-EADBD6D78464SYS**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearc | SYS**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component SYS**32.DLL
b 00817647-6EE6-B4F8-6A5C-A8F16395AB8FMS**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | MS**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component MS**32.DLL
b 008235DF-6200-E376-279F-7B87938F2373WIN**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | WIN**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component WIN**32.DLL
b 00855F0F-758B-EB9E-3AB8-C69E2F68F200JAVA**32.dll (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschroni | JAVA**32.dll (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component JAVA**32.dll
b 008602DA-BF96-4343-F9AA-6322853BD842SYS**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | SYS**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component SYS**.DLL
b 008732CD-9A7E-961E-B1DD-6CA480CC53E8NT**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles | NT**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component NT**.DLL
b 008764D5-773A-A0CE-0E07-D1A50B2AEB9CCR**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | CR**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component CR**32.DLL
b 0088A176-1C11-E962-D58B-1F18D0E207D4ATL**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | ATL**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component ATL**32.DLL
b 00895341-563C-4117-837D-BCAC36A5DD26IE**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | IE**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component IE**32.DLL
b 008977B5-B606-4A82-74FD-902541715430NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component NT**32.DLL
b 0089926D-DE04-05DF-23E5-7BAF764D77DBWIN**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | WIN**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component WIN**.DLL
b 0089AB79-34E9-0ABF-5AF2-3D27B3E4CBA4ADD**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | ADD**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component ADD**.DLL
b 0089E432-038D-2B85-3BE2-F538EA8CB9CAJAVA**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | JAVA**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component JAVA**.DLL
b 008A3C3B-9249-57B4-CBC9-55AB9E690943ADD**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearc | ADD**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component ADD**32.DLL
b 008A49EF-1F4A-59F9-2873-E623FDFB2AECJAVA**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | JAVA**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component JAVA**.DLL
b 008A5E43-7E04-6264-19E3-CABC19B791F6MS**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles | MS**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component MS**.DLL
b 008DB894-99ED-445D-8547-0E7C9808898D4b_1012_mslagent.dll - Adware.Slagent http://securityresponse.symantec.com/avcenter/venc/data/trojan | 4b_1012_mslagent.dll - Adware.Slagent http://securityresponse.symantec.com/avcenter/venc/data/trojan.simcss.b.html 4b_1012_mslagent.dll
b 009057E0-E644-7B31-F576-A66A75B760A4ADD**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | ADD**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component ADD**32.DLL
b 00910FC8-0897-B399-2EF2-26EFF8788326SDK**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | SDK**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component SDK**32.DLL
b 009127DE-BC8B-9CFD-F6A5-8DE090C457F8CR**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | CR**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component CR**32.DLL
b 0092CB9E-A898-102E-13F0-85FC8AF2AD31SYS**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | SYS**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component SYS**.DLL
b 00942B4E-EC2D-7EFF-8608-94F77063C123NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component NT**32.DLL
b 0094E9D6-E148-BC7D-424A-678CAF6D4907NT**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch a | NT**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component NT**.DLL
d 0096CC0A-623C-4829-AD9C-19AF0DC9D8FEDapiebar.dll - DAP http://www.speedbit.com/DefaultT.asp? Dapiebar.dll
b 009C95E8-B287-5BB1-A8C1-CCCE652E7FA6D3**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles | D3**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component D3**.DLL
b 00A0A40C-F432-4C59-BA11-B25D142C7AB72IN***~*.DLL ms****.dll (* = random char) - ClientMan http://www3.ca.com/securityadvisor/pest/pest.a | 2IN***~*.DLL ms****.dll (* = random char) - ClientMan http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453074909 adware variant 2IN***~*.DLL ms****.dll
b 00A24B03-DD53-09FF-B089-5061C12D30FDATL**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | ATL**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component ATL**.DLL
b 00A4658F-104F-49F5-B123-8172789AF3C3urihelper1.dll - Unidentified parasite - should you have any information about this application [x | urihelper1.dll - Unidentified parasite - should you have any information about this application [xs4] - if you actually have a copy of the file please attach it to your email for analysis. Thanks! urihelper1.dll
d 00A6FAF1-072E-44cf-8957-5838F569A31DMWSSRCAS.DLL - MyWebSearch/MySearch http://vil.mcafeesecurity.com/vil/content/v_134251.htm - now own | MWSSRCAS.DLL - MyWebSearch/MySearch http://vil.mcafeesecurity.com/vil/content/v_134251.htm - now owned by Ask Jeeves Inc - see note http://www.benedelman.org/spyware/installations/askjeeves-banner/ MWSSRCAS.DLL
b 00A7FBB1-F3E5-BA11-ADCA-7115E5F5414BCR**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch a | CR**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component CR**.DLL
b 00A8711A-6850-059A-543F-7899E1455BA9API**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | API**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component API**32.DLL
b 00A88ECE-D542-06D0-B1E9-091150D86D41MS**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | MS**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component MS**32.DLL
b 00A94FA3-6D7B-4318-1171-4B2F003FC38CNT**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | NT**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component NT**32.DLL
b 00A967B9-116E-2D7C-E935-A210A88C986FIE**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | IE**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component IE**32.DLL
b 00ABB85E-07E6-B7B9-BA96-1CA233683B48MFC**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | MFC**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component MFC**.DLL
b 00ABE373-5988-C64A-2ECC-433A0B6D18C5IE**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | IE**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component IE**32.DLL
b 00AC8F9D-A0CB-27D9-59F8-9DBFA4F78894NT**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | NT**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component NT**32.DLL
b 00AC93F1-0095-2044-4A78-7147C0B300AFATL**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | ATL**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component ATL**32.DLL
b 00AD3519-3F00-5087-FF3D-ADBC964ABCAEADD**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | ADD**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component ADD**.DLL
b 00AF53EB-A6A4-2A98-EA99-7B4BBFA3E903MFC**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | MFC**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component MFC**32.DLL
d 00B1D504-60FD-44ae-B142-996FF6C5B7CF"CU-1.dll - ChristiansUnite_Toolbar http://toolbar.christiansunite.com/ - detected by some antivirus | "CU-1.dll - ChristiansUnite_Toolbar http://toolbar.christiansunite.com/ - detected by some antivirus software as ""Adware.Softomate""" "CU-1.dll
b 00B4D9DA-4CA0-9F67-B881-787806788C35ADD**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | ADD**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component ADD**32.DLL
b 00B4DB26-DFBE-9E21-5BD8-E7EF97E67BADMFC**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | MFC**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component MFC**32.DLL
b 00B50900-FA51-47A0-9184-B4C15FE0F25A[unknown] - Anyplay.Toolbar http://info.ahnlab.com/securityinfo/virus_view_eng_new2.jsp?SEQ_NO=5622 | [unknown] - Anyplay.Toolbar http://info.ahnlab.com/securityinfo/virus_view_eng_new2.jsp?SEQ_NO=5622 adware
b 00B5649E-C2D8-1DC8-AEC0-BEFBB4FF9DA4CR**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles | CR**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component CR**.DLL
g 00B71CFB-6864-4346-A978-C0A14556272Cmsgrchkr.cab31267.cab - MSN Zone Checkers game? msgrchkr.cab
b 00B78A2F-66BE-9875-FBF9-E1F486C65401CR**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | CR**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component CR**32.DLL
b 00B7DCF4-9B37-BE2B-F3F7-6C8DFB0597F0MFC**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearc | MFC**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component MFC**32.DLL
b 00B90684-CDCB-5F04-FCA4-7F1DEE956606JAVA**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | JAVA**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component JAVA**.DLL
d 00BD2861-C654-4694-A44A-98642D73247DMTSSRCAS.DLL - MyWebSearch/MySearch http://vil.mcafeesecurity.com/vil/content/v_134251.htm - now own | MTSSRCAS.DLL - MyWebSearch/MySearch http://vil.mcafeesecurity.com/vil/content/v_134251.htm - now owned by Ask Jeeves Inc - see note http://www.benedelman.org/spyware/installations/askjeeves-banner/ MTSSRCAS.DLL
b 00C0618C-1BC9-8D1E-D318-81B8263C4778SYS**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearc | SYS**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component SYS**32.DLL
g 00C6482D-C502-44C8-8409-FCE54AD9C208SnagItBHO.dll - SnagIt http://www.techsmith.com/products/snagit/default.asp SnagItBHO.dll
b 00C9C6A4-1889-46BC-B73A-F4DDCC042735[random file name] - Vundo.B http://www.bleepingcomputer.com/forums/How-to-remove-the-TrojanVundoB-S | [random file name] - Vundo.B http://www.bleepingcomputer.com/forums/How-to-remove-the-TrojanVundoB-Search42com-MSevents-tx18610-0.html#entry110599 adware variant
b 00C9D850-244D-10E1-B3C1-10805E499D95"lspoolnt.dll - OpenWares ""ContextuAd"" aka MediaBack adware" | "lspoolnt.dll - OpenWares ""ContextuAd"" aka MediaBack adware" "lspoolnt.dll
b 00C9D850-244D-10E1-B3C1-20805E499D95"WINSPL32.DLL - OpenWares ""ContextuAd"" aka MediaBack adware" | "WINSPL32.DLL - OpenWares ""ContextuAd"" aka MediaBack adware" WINSPL32.DLL
b 00C9D850-244D-10E1-B3C9-10805E499D95"lclsplnt.dll - OpenWares ""ContextuAd"" aka MediaBack adware" | "lclsplnt.dll - OpenWares ""ContextuAd"" aka MediaBack adware" "lclsplnt.dll
b 00C9D850-244D-11E1-B3C9-10805E499D95"lclspl.dll - OpenWares ""ContextuAd"" aka MediaBack adware" | "lclspl.dll - OpenWares ""ContextuAd"" aka MediaBack adware" "lclspl.dll
b 00CEAF8F-BF59-429b-A1D9-91C88CCFE94Babx_search.dll ABX_SE~*.DLL rmndll32.dll - Adware.ABXToolbar http://www.symantec.com/avcenter/venc/d | abx_search.dll ABX_SE~*.DLL rmndll32.dll - Adware.ABXToolbar http://www.symantec.com/avcenter/venc/data/adware.abxtoolbar.html abx_search.dll
b 00D07086-69D6-6192-75BE-263181D1C881SDK**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | SDK**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component SDK**32.DLL
b 00D13CE9-1879-41bd-B8A3-EA3CB1BD01BChelper.dll - Troj/Banker-DTE http://www.sophos.com/security/analyses/trojbankerdte.html trojan helper.dll
b 00D6A7E7-4A97-456f-848A-3B75BF7554D7PerfectNavBHO.dll PERFEC~*.DLL - eUniverse/IncrediFind http://www3.ca.com/securityadvisor/pest/pest. | PerfectNavBHO.dll PERFEC~*.DLL - eUniverse/IncrediFind http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453078517 parasite PerfectNavBHO.dll
b 00DBDAC8-4691-4797-8E6A-7C6AB89BC441*****.dll ( * = random char) - ConHook-N http://www.sophos.com/virusinfo/analyses/trojconhookn.html | *****.dll ( * = random char) - ConHook-N http://www.sophos.com/virusinfo/analyses/trojconhookn.html trojan component - responsible for installing a variant of Vundo http://www.bleepingcomputer.com/forums/How-to-remove-the-TrojanVundoB-Search42com-MSevents-tx18610-0.html#entry110599 adware *****.dll
b 00DD5500-8540-964C-2DA8-C829F9E58A84NT**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch a | NT**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component NT**.DLL
b 00DD6309-C35E-7ACF-CE4F-6C92538A0A8DCR**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles | CR**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component CR**.DLL
b 00DFBD56-5EA0-27AF-72CF-75BB300B83DFCR**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | CR**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component CR**32.DLL
b 00E97FF9-C2D5-30AF-2580-1DF6C99280CBIP**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch a | IP**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component IP**.DLL
b 00F16DC8-1B2A-42F4-B18B-E21DA9D2D7FD01A00.DLL - FastFind.org SubSearch http://www.pestpatrol.com/PestInfo/s/subsearch.asp 01A00.DLL
b 00F1D395-4744-40f0-A611-980F61AE2C59dsr.dll - Adware.DrSearch a IEPlugin http://securityresponse.symantec.com/avcenter/venc/data/adware. | dsr.dll - Adware.DrSearch a IEPlugin http://securityresponse.symantec.com/avcenter/venc/data/adware.ieplugin.html variant dsr.dll
g 01010E00-5E80-11D8-9E86-0007E96C65AEtgctlsi.cab | Related to Symentec servicestgctlsi.cab
g 01012101-5E80-11D8-9E86-0007E96C65AEtgctlsr.cab | Related to Symantec servicestgctlsr.cab
b 0108204E-FE17-D532-5C20-738F637A3E9ACR**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch a | CR**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component CR**.DLL
b 01083C96-E7FB-D9DC-2583-A48F318E60CBAPI**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | API**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component API**.DLL
b 010A99FA-9882-49E3-F544-44129592A646JAVA**32.dll (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschroni | JAVA**32.dll (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component JAVA**32.dll
b 010B05F2-C50C-BB3E-31BF-741C59280D6AAPP**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearc | APP**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component APP**32.DLL
b 010B572C-CB81-A522-7D99-03A6C97ABFC9NET**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | NET**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component NET**.DLL
b 010D78A0-874F-402C-4F39-53AE7E6339F6APP**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | APP**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component APP**.DLL
b 010DA42A-AAFD-32FA-086D-9E28227B85E3ATL**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | ATL**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component ATL**.DLL
b 010E282E-3E5C-A926-6BE5-81BB33B821D0IE**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | IE**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component IE**32.DLL
g 01111C00-3E00-11D2-8470-0060089874ED | http://www.supportsoft.com/technology/overview/technology_overview.shtml
g 01111E00-3E00-11D2-8470-0060089874ED | http://www.supportsoft.com/technology/overview/technology_overview.shtml
g 01111F00-3E00-11D2-8470-0060089874ED | http://www.adelphia.net
g 01112B00-3E00-11D2-8470-0060089874ED | http://www.supportsoft.com/technology/overview/technology_overview.shtml
g 01113300-3E00-11D2-8470-0060089874ED | http://www.supportsoft.com/technology/overview/technology_overview.shtml
b 01150869-6EAA-DBD5-EC6D-97E0570E4D55IP**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles | IP**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component IP**.DLL
b 01150E67-46D2-BA88-66F7-79E174FC8984WIN**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearc | WIN**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component WIN**32.DLL
b 0115E9AD-16FD-CFEF-318A-81686D1E9319IE**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles | IE**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component IE**.DLL
b 011710E1-B483-710E-97E0-2570CF3083B8SDK**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | SDK**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component SDK**.DLL
b 0117932E-E4D1-5936-D29B-CD7314854EC4ADD**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | ADD**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component ADD**.DLL
b 0119DCC7-6473-EE93-7CFF-758D62BAADD3API**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | API**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component API**.DLL
b 0119E5C4-DA59-E373-930C-3705AF52F2ADAPP**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | APP**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component APP**.DLL
b 0119F278-475B-E5B8-00B6-C88D1EE40346ADD**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | ADD**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component ADD**.DLL
b 011CA171-EE6B-EF0C-A0D7-D291FDD4ECAAADD**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | ADD**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component ADD**.DLL
b 011D0D79-1BD4-5167-DD32-029CC16A44CDD3**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch a | D3**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component D3**.DLL
b 012042C2-DB59-3DF9-D9D9-95378D534316IE**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch a | IE**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component IE**.DLL
b 01208BE0-6B08-211D-FFA7-7138A00EA0ABMS**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | MS**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component MS**32.DLL
b 01229368-B1D1-C737-AA3A-00B8183FE7FFWIN**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | WIN**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component WIN**32.DLL
g 0122955E-1FB0-11D2-A238-006097FAEE8Bcc...everContent.cab | cc...everContent.cab
b 0122C0D8-8680-D482-B1B7-A6C961A3A2E3WIN**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | WIN**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component WIN**32.DLL
g 0124123D-61B4-456F-AF86-78C53A0790C5AvkWebIE.dll - G DATA Internet Security http://www.gdata.de/trade/productview/568/28/ AvkWebIE.dll
b 0124A396-AB83-9F02-38EC-4CC0C20602CCMS**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | MS**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component MS**32.DLL
b 0125D352-F431-AB07-E2B0-4258BCF7AC07MFC**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearc | MFC**32.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component MFC**32.DLL
b 01262040-D3AC-38D0-7D84-DEEA15E88322API**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | API**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component API**.DLL
b 01263BA8-DD90-3C6A-47E7-0FEAF30DB663WIN**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | WIN**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component WIN**32.DLL
b 01267878-C25A-F167-44F8-5E55A22761B1JAVA**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | JAVA**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component JAVA**.DLL
b 0127A706-DB26-71F4-B83F-44D6B2B57CE7JAVA**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | JAVA**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component JAVA**.DLL
b 0128CB6A-3BE0-896F-A8BF-286ECE71F3F1WIN**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | WIN**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component WIN**.DLL
b 01295AD0-0541-D9B9-7631-E16A07785229ADD**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronic | ADD**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component ADD**32.DLL
b 012E3C96-088E-958B-C19D-772FA69FFB2AD3**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicl | D3**32.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component D3**32.DLL
b 01389601-9F06-D5E4-ADC9-9EFFB1E70A87ATL**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch | ATL**.DLL - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component ATL**.DLL
b 01394D83-DF3D-3A0E-A258-1A733995AD98WIN**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicle | WIN**.DLL (* = random char) - CoolWebSearch/HomeSearch http://cwshredder.net/cwshredder/cwschronicles.html#homesearch adware component WIN**.DLL

DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. I will not be held responsible if changes you make cause a system failure.