| OBJECT NAME | GUID | STATUS | FILENAME | DESCRIPTION |
|---|
| Class | {B6F7B9BF-B1B8-79EF-4B1E-98A7404CBCBD} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| DKAXIEAddin Utility | {173FE404-6C61-489e-BCFF-E07C04D1C278} | L BHO | DKAXIEAddin.dll | Datakey CIP/CMS Authentication and Access Control software |
| DeskalertsBHO | {B3DD4EA8-C896-4b95-818F-4E1D04869D99} | X BHO | deskbar.dll | DeskAlerts, a Softomate toolbar and DeskBar adware variant - also see here - NOTE: the file may be installed in a "Program Files\DeskBar" or "DeskAlerts" folder, but it must NOT be confused with the legitimate DeskBar software, which does NOT install a BHO! |
| Class | {69CD759E-4291-29B5-83E5-2B55FF15D74F} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {C24C6487-0033-9155-D9EF-5BB597CB7F0B} | X BHO | D3**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {FF5CE8D6-15E7-9320-B39B-A35B6BCEE89D} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {7E05649C-6BEF-7CF5-E739-D86B9A7FA0C1} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| DevelopersDex Toolbar | {E3C7D182-655D-45EE-8896-A8F8C4DA7E94} | L TB | devdexbar.dll | DevelopersDex Toolbar |
| Class | {B0627629-77B4-0CD0-BF9C-EB4DAA30FECD} | X BHO | D3**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| (no name) | {FDED1C12-AD76-613C-344C-A3BD5C6415B2} | X BHO | D_4362.dll, w_3789.dll, t_2141.dll | Downloader and hijacker connecting to rogue sites (2--google.com, tipablog.com, kandidatov.net and others) - detected by AntiVir as TR/Dldr.BHO.AD.1 |
| Class | {C0911BD6-B119-066D-C4FB-AA00C37E088A} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {B8460335-3BB1-0C22-657E-91A1AF013E8D} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {A45618F3-F6BE-0909-6EB6-763DD408A2FD} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {D4C92822-FA65-EF32-8043-5A0FD5656802} | X BHO | D3**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {F8303BFB-E09E-BCDD-FA8F-E8D3C07DA44E} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| DeskalertsBHO | {9DD77D09-901B-4af0-8F89-812950DB6FF2} | X BHO | deskbar.dll | DeskAlerts, a Softomate toolbar and DeskBar adware variant - also see here - NOTE: the file may be installed in a "Program Files\DeskBar" or "DeskAlerts" folder, but it must NOT be confused with the legitimate DeskBar software, which does NOT install a BHO! |
| Class | {733A397E-738B-6BD5-2FCA-E07939935E4E} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {AC4257E2-6DD2-AEC4-FFD6-D5E44CC39DBE} | X BHO | D3**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {EFBCE7C1-C680-BBEE-454E-DFA42474F991} | X BHO | D3**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {C8004A51-B1C6-2B52-CE97-BA80D6D6C5DB} | X BHO | D3**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| SXG Advisor | {69390657-F46E-457B-A84F-D5551C10C68A} | X BHO | dpvtportnw.dll | Adware downloader causing false spyware warnings, a member of the Trojan-Downloader.Zlob.Media-Codec aka NewMediaCodec malware family |
| Class | {45FF8EB2-E13A-CE62-C171-8A09D575C060} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {7CFC8F73-D24E-E2D4-848E-B881043507DC} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {B9D30E0B-5FED-E464-AAFF-7DD0E2C91EDE} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {14267C3A-E5BD-19B4-6600-CE2B4D4BF833} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| dpevflbg | {859D10F7-0E0F-43A8-8DF7-EC0466A40301} | X TB | dpevflbg.dll | Parasite causing false spyware warnings and connecting to fake "security sites" - member of the FakeAlert aka SmitFraud malware family |
| Class | {338EF1C4-C18E-1C2E-7FBE-7204D61BE059} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| ΕΠΆΟμΌχΛ | {BA613E6C-BA9C-4BAE-86D8-34DAAE39AE15} | X BHO | dhcprv32.dll | Parasite of Chinese origin producing zhaorencai.net.cn ad popups |
| Class | {094289CB-8035-DF69-EC45-18EF4E3735B7} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {5E928233-1DF4-9645-2126-AF9BED9815F0} | X BHO | D3**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {15441FF2-7B4A-9558-4AB1-B594DAA19E8A} | X BHO | D3**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {0ABD81BD-F94C-3BFC-5699-13A2D49E5844} | X BHO | D3**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {2F727938-A647-3FF8-27C3-6F50A963DCB7} | X BHO | D3**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {2882F733-B7B6-5329-F254-6F99D6D7DC9C} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {F32261DC-D26D-2D9F-9CD0-AE7EAF09A5DA} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {EAA00A91-341B-A3E6-2AC8-6A5C22E9ADFC} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {DED9CF4B-166D-80F9-317A-BFF83166E09E} | X BHO | D3**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {02907F0E-02DD-F8C7-EA0C-0C0AA455DA6C} | X BHO | D3**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {D6A3B473-D7BB-A3AE-64E4-E0A97A92906E} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| TBSB09819 | {DC77F23E-1D48-4238-9776-B705F92073FB} | O BHO | desktopfuntoolbar.dll | DesktopFun_Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Installer detected by Kaspersky antivirus as AdWare.Win32.Mostofate.ar and by DrWeb as Adware.Cashdelux |
| Class | {86D610E0-3709-5CD8-116B-9DB04FBB11F8} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {3A2045BF-D096-E7E4-A6C5-5AEB9397B93A} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| XBTB07313 | {D7C0E54C-1817-4251-9A66-135C5EF920F7} | O BHO | dare_toolbar.dll | Dare.com Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Your choice. |
| GNX Bingo | {9FE6B3D5-2B36-4823-8967-09EE9E863632} | X BHO | drnpfdxtwo.dll | Adware downloader causing false spyware warnings and connecting to rogue "security sites", a member of the Trojan-Downloader.Zlob.Media-Codec aka NewMediaCodec malware family |
| Class | {321EF49A-B5C4-4F95-6D4C-25BB941C72BF} | X BHO | D3**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| D-i-v-X AV Codec Pack Toolbar Helper | {E001FD9F-D3C0-4a37-8250-0AF61F601AC7} | L BHO | D-i-v-X_AV_Codec_Pack_Toolbar.dll | D-i-v-X AV Codec Pack Toolbar |
| Class | {76809D44-6064-3F47-3EE9-37308394C91E} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| desktop | {A6790AA5-C6C7-4BCF-A46D-0FDAC4EA90EB} | X TB | desktop.dll | AZESearch adware variant, also see here |
| zen Class | {E0B73516-7CB8-4341-8339-1718D75AF3AC} | X BHO | dwin.dll | Parasite detected by Ahnlab antivirus as Win-Downloader/BHO.SideLinker.159744.B |
| Class | {964992EF-9822-1424-5FB7-BC86A8949B79} | X BHO | D3**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {2B5BCF3D-05AA-96DD-C5B6-41C4197FEFEA} | X BHO | D3**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {69E11644-F09B-69E1-F1D4-F3EB7AB7AD2B} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {A3D28485-72FC-E462-4A5F-18C7402122C0} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {AEAC41FA-E8BD-B13D-EE1F-5C3661E7CF47} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {78BD49CD-D8F5-E44D-32E0-263AAC5E1E5A} | X BHO | D3**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
