| OBJECT NAME | GUID | STATUS | FILENAME | DESCRIPTION |
|---|
| IEHlprObj Class | {0507B447-714E-4DF6-A7A8-E0018A4770F3} | X BHO | CleanSearch.dll | Parasite of Korean origin hailing from cleansearch.co.kr and detected as Win-Adware/CleanSearch |
| Class | {7D056484-F44B-D8C3-C956-D9CD032D1BEB} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| H | {89155686-8863-471a-A58D-85C6258A1A82} | X BHO | c34m.dll | Variant of the Infostealer.Banker.D trojan |
| Class | {E4C88E14-FD45-090A-3D96-32FA4B4D451F} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {347C0CBB-197D-63E4-6532-6D86E44AA109} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| comppApp Class | {CD0EDE99-3E2F-4255-9B3A-F0EE2F612D1F} | X BHO | compp.dll | Unidentified parasite - should you have any information about this application, such as for example the site where it was downloaded or installed, do email us - if you actually have a copy of the file, please attach it to your email for analysis. Thanks! |
| 3721CMail | {6231D512-E4A4-4DF2-BE62-5B8F0EE348EF} | X BHO | cesweb.dll | CnsMin aka 3721/Chinese_Keywords adware - also see here |
| Class | {E32FE0A9-D219-13C5-5729-4F6B05AFF6BB} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Calorie Count Plus Toolbar | {A057A204-BACC-4D26-DFC4-6BAE8BAD3DC9} | L BHO TB | ccptb.dll | Calorie Count Plus Toolbar |
| Windows Internet Security | {81DBAB16-CA34-c433-BE80-11E6692428A8} | X BHO | csrcs.dll | Unidentified parasite - should you have any information about this application, do email us - if you actually have a copy of the file, please attach it to your email for analysis. Thanks! |
| Class | {BCE2B7C0-9DBE-55C3-A66E-8E16BC85C0AA} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| JWord | {B83FC273-3522-4CC6-92EC-75CC86678DA4} | X BHO | CnsMin.dll | JWord_Plugin adware - a CnsMin variant |
| Class | {6BFD4FF9-22B6-A8BC-8348-E8EF313969E1} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {474BC714-CE9E-6D6E-EFD4-FC75E4F9B77C} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {B906F15F-9BF7-2CE7-69FC-75DA40213C22} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| &CadXplorer | {C4FE133B-F247-492A-A3C1-4DFD11F15E27} | L TB | CadXplorer.dll | CadXplorer Windows Shell Extensions for AutoCAD Files |
| Class | {1225411D-3B77-6602-C5E7-A8F3FDF486D1} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {BDCD0659-2DA6-B100-7F0C-B7872B5699E3} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {027DBA51-2D9D-1454-41EC-9E0AA1214757} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {E2D6952A-E22C-DE46-6825-512EB3213ABB} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {372F8931-D513-1387-33C0-8D1E94346E23} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {C2A66D02-8DC5-33B5-8A68-BE519AB75A16} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {78ED99D6-480F-0935-5F1C-5A21F3FD05DC} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| (no name) | {743A5BB3-F8E4-BDEE-0BEF-04CBF5ED1A80} | X BHO | chkgenapi.dll, ProcHlp.dll, DbShApi.dll, CmdMon.dll, SrvApi.dll, actshmsg.dll, UiSmart.dll, SysCfgCom.dll, ApiDbWeb.dll, dscsmartsys.dll, gensyscfg.dll, MntComGen.dll, SmartSetUi.dll, appsmart.dll, MntMsgChk.dll, dscen.dll, similar semi-random filenames | Unidentified parasite reportedly causing false spyware warnings and connecting to rogue "security sites" - should you have any information about this application, such as for example the site where it was downloaded or installed, do email us - if you actually have a copy of the file, please attach it to your email for analysis. Thanks! |
| {C82B55F0-60E0-478C-BC55-E4E22F11301D} | X BHO | Chgrgs.dll | i-Lookup adware variant |
| Class | {ED952A8C-BD5A-1C3B-5366-9B589A9550E2} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {1D5618DF-B85F-7500-BCC6-79594BECE675} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {5411B825-BA72-4661-A5E5-E8EEA01146F9} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| (no name) | {C1559A07-E49C-4E5A-A893-1215F817EBAC} | X BHO | comctl64.dll | Downloader, detected by AntiVir antivirus as TR/Nabload.VH |
| Class | {E0DE2117-5E2C-7634-BD6F-543F0E6B3419} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {25058AE5-5371-3EC0-9CB9-B7B2AE83A00A} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {2E34D0ED-0B55-5C98-05DD-51F59AB52E3A} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {F61E8B04-2EF0-7873-877A-5D1E89822A7E} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {7D97C460-3EA1-3C33-6F8A-16A4C1720941} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| CustomXML Toolbar Helper | {133688B3-7842-4D9D-BF7C-940E1097F900} | O BHO | CustomXMLbho.dll | CustomXML - also see here |
| CrossEngine toolbar | {34F459B8-1D37-4FF2-9EFA-192D8E3ABA6F} | O TB | crossengine.dll | CrossEngine.com, now Intelways.com toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. |
| Class | {042C1773-AD59-904E-D632-46D5661C3803} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {344D4C64-06C2-9CF0-AADE-512377101816} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| (no name) | {56DC779C-A526-485D-94B9-9BF08A0E168F} | L BHO | Catcher1.dll | FileBooster |
| Class | {38FCDEB5-579C-ECE9-56B3-4D255E652EF4} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {CD9B6EC2-881D-8302-911A-0E16A5F4B13F} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {D62594E2-75A1-6B2B-4FAE-446C6B595631} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {4197FF54-5C18-A7E5-9CC3-32130092E2A4} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {CAC39562-681C-7D10-7ABB-18FA773A3E60} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {0CEABA4F-239A-DB08-54D1-7D9AA32652D6} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| {96BBDFE1-2951-4F81-811E-31DF6436A329} | X TB | custtlb.dll | SCN TOOLBAR PROBLEMS |
| Class | {50822B42-E6CD-FD48-BE11-3DD7D10E6A5C} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {121D27E3-CA7B-DDA8-652E-D7B481769CED} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {9D9EE5A8-1F27-BCB9-3DE1-A22A6A2EFFA2} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {CDBA83E5-F577-24E3-70AC-2B7B0EE05949} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {50E42254-BD24-F46E-07C2-4E35AC4EB25A} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {4EB6319E-49FF-C8C6-FBBF-07BAC7CCFC75} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {8F6BBF73-238E-F740-3C8E-35F4A99E10D8} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {B9C94100-F1C4-C7D9-3EEA-A3958B1DEEA0} | X BHO | CR**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {4D828B07-4C0D-DDAA-7B4A-BB1227A96490} | X BHO | CR**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
