| OBJECT NAME | GUID | STATUS | FILENAME | DESCRIPTION |
|---|
| Class | {24825275-AF1A-97F1-0315-E5DD83ADF6F7} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {766D2566-60FD-10F1-92DB-18BB4F8AF267} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| MyUrlSrcHook Class | {D2A5245A-B682-4C26-A507-173A774B2E70} | X SH | CnsMinIdn.dll, CNSMIN~*.DLL | CnsMin aka 3721/Chinese_Keywords adware - also see here |
| cashbacknara.com | {7AC1D6D1-B83B-4D77-A916-839F90216BC7} | X BHO | cashbacknara.dll, CASHBA~1.DLL | Parasite of Korean origin hailing from cashbacknara.com - detected by Kaspersky antivirus as AdWare.Win32.Agent.ep and by nProtect as Trojan-Clicker/W32.Mizane.231424 |
| Class | {403509E3-D9CE-508B-8DD5-FF9CC2A69F1B} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {E12D7AA7-2633-EDFA-7866-03A2D7B547F2} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {B48EBB4A-407C-EF02-EAB7-76EBB8815E8A} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {6ED7881C-15E8-9C0E-4F52-AC2FEF0427E5} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {D8DEC485-CE65-A3D0-7970-3801569ABBF8} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {B627B79D-2C3D-A4F4-2B6F-3D042899F1D0} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {59630E6A-335B-43F1-BFCD-1535AD034848} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| clupapp Class | {1A4A9002-FCAA-4707-80D6-C40DE557F259} | X BHO | clup.dll | Parasite of Korean origin, detected by BOClean antitrojan as a variant of Trojan.Appset and by Kaspersky antivirus as Trojan.Win32.BHO.n |
| Track.Trace | {AE48B4E7-002B-4891-8E26-ED5E888FAE7D} | ? BHO | cwBCTrace.dll | Unidentified browser plugin - should you have any information about this application, such as its exact purpose and whether you did or did not install it wittingly, do email us - if you actually have a copy of the file, please attach it to your email for analysis. Thanks! |
| Class | {18C2E6A7-B61B-7E51-9213-DF9E38252CDB} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {D19A0D3C-60CE-3F19-0B7E-A0E239AC4600} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {64E388A0-0627-BC62-5B59-F50F0D6BEA95} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {FE92C931-70E7-99BE-A121-735C089D99FB} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {50FEEC41-9D80-EBCD-D854-38F9E341EAED} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {7AF6A15D-8F78-8F45-53ED-F21E00A8A6D4} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| CometCursor | {EDC4193F-34AD-4D07-AA87-E3FDB89E3E76} | X EB | csband.dll | Comet_Systems adware |
| XBTP04910 | {C36E543B-FD54-4506-A742-C1D98B172BD6} | O BHO | congoo.dll | Congoo_NetPass - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Remove unless you both trust it and expressly meant to install it. |
| Class | {E1732A5F-EB56-3C72-B2B2-173489E5DCB4} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {E89F1EEA-9DA4-9A8F-BA92-801C2CC368DE} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {5DFBC97C-DABD-760C-0037-AD9AADC9957B} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {1225411D-3B77-6602-C5E7-A8F3FDF486D1} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {78458AE9-7FC8-057C-5402-1F3D8EB7A984} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Editor plugin | {0106864A-D223-4caa-9FCC-3C9EE9564133} | X BHO | cupid1.dll, nuid1.dll | Variant of the Infostealer.Banker.D trojan |
| {7B49A2A5-B45F-46F3-AC60-2578477671EE} | L TB | Croc_bar.dll | Croc Crawler |
| Class | {2B55BE40-4F8F-BD18-8FF4-80100B89A7CA} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {B8F23740-4D73-93A7-F0B0-8EADF3AF789A} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| 777-search | {BA5D8DF9-1851-4660-B3AE-89E6E030AC34} | X TB | cooltoolbar.dll | 777-search Toolbar - redirects searches to 777-search.info |
| Class | {436F9624-199F-6822-5382-0C16D6F54881} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| (no name) | {********-****-****-****-************} | X BHO | CEWMDM32.dll | WebPrefix adware variant |
| Class | {12CB8E8A-64B6-09D6-202A-79D9064BF9DA} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| WAid Class | {A79E7C91-A35B-486F-9BA0-14802C79A7BA} | ? BHO | cdview.cpl | Unidentified parasite of Chinese origin - should you have any information about this application, such as for example the site where it was downloaded or installed, do email us - if you actually have a copy of the file, please attach it to your email for analysis. Thanks! |
| H | {AD5C390A-B02A-48fa-9A37-3BEC9724BBF0} | X BHO | cr3m.dll, c5q1.dll | Variant of the Infostealer.Banker.D trojan |
| PosHelp | {3E15928A-26B2-40b2-A4CA-408720C444BA} | O BHO | COLLEG~1.DLL, collegetoolbar.dll | CollegeToolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Some of the toolbars are fine to have, so every case is different. Your choice. |
| Clal.it Toolbar | {8F5BA2F6-266B-4D9B-93CF-610398685422} | O TB | clal.it.dll | Clal.it_Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Some of the toolbars are fine to have, so every case is different. Your choice. |
| cbplus | {DBCBAE56-13ED-4548-8093-D7FEE6482C2F} | X BHO | cashbackplus.dll, CASHBA~*.DLL | Parasite of Korean origin identified as Win32.Grayware.Cashbackplus |
| Class | {B82EE2B1-5E7F-A56B-E8D4-7FF9851738F1} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| XBTB03748 Class | {9381C0A1-92C0-4873-AD71-BB2513BECDC8} | O BHO | cifras.dll | Cifras.com.br_Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Installer detected by Kaspersky antivirus as AdWare.Win32.Mostofate.e and by Bitdefender as Adware.Toolbar.Softomate.E |
| Class | {6CF47EBD-F47F-F256-5877-09354850D9FC} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| csBlockerBHO | {4B122919-8871-43F7-ADB2-6C3FB66C2949} | L BHO | csBHO.dll | SoProtectMe |
| Class | {2FDECE36-9908-3C07-94EF-739590374096} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {1801F3E4-30B9-6127-58F8-3C65653A5167} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {121D27E3-CA7B-DDA8-652E-D7B481769CED} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Clan-Tsunamis Toolbar | {13913AC7-5DB7-41BD-BF1B-827CF7E18F94} | O TB | clan-tsunamis.dll, CLAN-T~1.DLL | Clan-Tsunamis.de Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Remove unless you both trust it and expressly meant to install it. |
| Class | {56A97A89-4576-A3B8-F75D-D30DC7F02ADE} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {E5AFDF80-07CE-2536-3668-6A46D26F50CD} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {3EAF1BB1-44EB-2411-B377-D1F48455F24D} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {518EB567-DF6D-E619-33DD-0FC405C8EE7D} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {E8D60F02-B624-2C7E-A7EF-0C465710C12F} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {71213EAB-AAF4-E61B-98B3-D9049B7ADFEE} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {7B316A9C-6980-991E-D5E2-EDEB4A735241} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Microsoft.DirectMusicSynth.1 | {F877A268-4BAF-409D-B659-52A41666C050} | X BHO | cmos.dll | Unidentified parasite - should you have any information about this application, do email us - if you actually have a copy of the file, please attach it to your email for analysis. Thanks! |
