| Header | CLSID | Status | Name | Path/File | Description |
| Protocol | {9D148291-B9C8-11D0-A4CC-0000F80149F6} | L | its, ms-its | itss.dll | Items taken from whitelist of HijackThis |
| Protocol | {EA5F5649-A6C7-11D4-9E3C-0020AF0FFB56} | L | iwd | IwdProtocol.dll | Insight Development Corporation NetKnowledge Tools |
| Protocol | {C4D10830-379D-11d4-9B2D-00C04F1579A5} | L | junomsg | ~none listed~ | Juno |
| Protocol | {7DEE9D05-FA0A-4416-A6F3-6537D0EAB6A6} | X | koboo, mbox | mbprot.dll | DuDuAccelerator |
| Protocol | {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} | O | KuGoo, KuGoo3 | KUGOO3~1.OCX, KuGoo3DownXControl.ocx | KuGoo Music download software |
| Protocol | {56831180-F115-11D2-B6AA-00104B2B9943} | L | lbxfile | FileProt.dll | Libronix Digital Library System |
| Protocol | {24508F1B-9E94-40EE-9759-9AF5795ADF52} | L | lbxres | ResProt.dll | Libronix Digital Library System |
| Protocol | {5C135180-9973-46D9-ABF4-148267CBB8BF} | L | lid | msvidctl.dll | Item taken from whitelist of HijackThis |
| Protocol | {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} | L | linkscanner | avgpp.dll | AVG_8
|
| Protocol | {********-****-****-****-************} | ? | mav-8551 | idsAX.dll | Nike_Joga_TV |
| Protocol | {DB47FDC2-8C38-4413-9C78-D1A68BF24EED} | L | mavencache | protocolHandlers.dll | Maven Networks |
| Protocol | {05300401-BCBC-11D0-85E3-00C04FD85AB4} | L | mhtml | inetcomm.dll | Item taken from whitelist of HijackThis |
| Protocol | {0EB00690-8FA1-11D3-96C7-829E3EA50C29} | X | MimeFilter | mimefilte.dll | WOW chinese malware |
| Protocol | {314111C7-A502-11D2-BBCA-00C04F8EC294} | L | ms-help | hxds.dll | Microsoft® Help Data Services Module |
| Protocol | {0A9007C0-4076-11D3-8789-0000F8105754} | L | ms-itss | msitss.dll | Item taken from whitelist of HijackThis |
| Protocol | {74D92DF3-6D9D-11D1-8B38-006097DBED7A} | L | msencarta, msref | MSREF.DLL | Microsoft Encarta |
| Protocol | {B0D92A71-886B-453B-A649-1B91F93801E7} | L | msero | msero.dll | Microsoft Encarta |
| Protocol | {828030A1-22C1-4009-854F-8E305202313F} | L | msnim | msgrapp.dll (often incorrectly listed by HijackThis as missing) | MSN Messenger 7.5 |
| Protocol | {3D9F03FA-7A94-11D3-BE81-0050048385D1} | L | mso-offdap | OWC10.DLL | Item taken from whitelist of HijackThis; Microsoft Office XP Web Components |
| Protocol | {4D034FC3-013F-4B95-B544-44D49ABE3E76} | L | myrm | myRmProt*.*.*.*.dll (*.*.*.*. = version number) | McAfee VirusScan ASaP on-line scanner |
| Protocol | {DF700763-3EAD-4B64-9626-22BEEFF3EA47} | L | nbso | NBSOPProt.dll | NBS Specification Writer |
| Protocol | {3D206AE2-3039-413B-B748-3ACC562EC22A} | L | nim | nmcg32.dll | Novell_Messenger |
| Protocol | {32505114-5902-49B2-880A-1F7738E5A384} | L | OWC11.mso-offdap | OWC11.DLL | Item taken from whitelist of HijackThis; Microsoft Office XP Web Components |
| Protocol | {182D0C85-206F-4103-B4FA-DCC1FB0A0A44} | L | pcl | HSPCLPRO10.dll | Autodesk_Inventor |
| Protocol | {D540F040-F3D9-11D0-95BE-00C04FD93CA5} | L | pcn | V1MK.DLL | Encompass browser (Yahoo) |
| Protocol | {A479F961-CC9E-11D0-A220-000000000000} | L | pm | PmProtocol.dll | Autodesk_Buzzsaw |
| Protocol | {4746C79A-2042-4332-8650-48966E44ABA8} | L | pure-go | puresp.dll | Smarth Home Networking |
| Protocol | {662E7FAE-5C17-491C-AD9D-98C1F66CC6A0} | L | qbpos | QBPOSProtocol.dll | QuickBook_Point_Of_Sale |
| Protocol | {FC598A64-626C-4447-85B8-53150405FD57} | L | qbwc | %SYSDIR%\mscoree.dll | QuickBooks_WebConnector |
| Protocol | {9DE24BAC-FC3C-42C4-9FC4-76B3FAFDBD90} | L | qrev | RNetPin.dll | Quest SQL |
| Protocol | {342E73B1-027E-11D5-90A2-00105A98B327} | L | rbna | rbnaprot.dll | Reuters_Kobra_5 |
| Protocol | {CD8D1CAA-FE4A-45DF-A06C-028AAF1821DE} | X | relatedlinks | BTLINK.DLL | RelatedLinks/Huntbar |
| Protocol | {5AB65DD4-01FB-44D5-9537-3767AB80F790} | X | relatedlinks | msielink.dll | RelatedLinks/Huntbar |
| Protocol | {23C585BB-48FF-4865-8934-185F0A7EB84C} | L | rmh | mime_filter.dll | Rights Management Add-on for Internet Explorer |
| Protocol | {8125919B-9BE9-4213-A1D6-75188A22D21E} | L | SafeAuthenticate | MVNFILT3.DLL | Macrovision SafeAuthenticate |
| Protocol | {D1F8BD1E-7967-11D2-B43A-006094B9EADB} | L | saphtmlp, sapr3 | saphtmlp.dll | SAP |
| Protocol | {79E0F14C-9C52-4218-89A7-7C4B0563D121} | L | sds | ExplorerExtensions.dll | Sharpdesk |
| Protocol | {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} | L | siteadvisor | SiteAdv.dll | SiteAdvisor |
| Protocol | {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} | L | skype4com | Skype4COM.dll | Skype4COM |
| Protocol | {FA3F5003-93D4-11D2-8E48-00A0C98BD8C3} | L | smscrd | sms_mcrd.dll | Microsoft Systems Management Server
"easter egg" |
| Protocol | {3050F406-98B5-11CF-BB82-00AA00BDCE0B} | X | start | LORUX[^a.dll | CoolWebSearch parasite variant |
| Protocol (hijack) | {53B95211-7D77-11D2-9F81-00104B107C96} | X | start, about | MSXWORD.DLL, SYSTEM***.dll (*** random digits) | CoolWebSearch parasite variant |
| Protocol | {FFAD3420-6D61-44F6-BA25-293F17152D79} | L | stibo | ProtocolHandler.dll | RS Electronic |
| Protocol | {76E67A63-06E9-11D2-A840-006008059382} | L | sysimage | mshtml.dll | Item taken from whitelist of HijackThis |
| Protocol | {C6D89159-3467-4C2F-9918-3362DA57BCD2} | L | t-mobile | TMOBIL~1.DLL, | T-Mobile Hotspots |
| Protocol | {4D25FB7A-8902-4291-960E-9ADA051CFBBF} | O | tbr | %Program Files%\Crawler\ctbr.dll | Adware-CTBar |
| Filter | {DFAA31C8-A356-4313-9D95-5EDAB46C5070} | X | text/html | lmf32v.dll, qlink32.dll | Adware Hyperlinker |
| Filter | {950238FB-C706-4791-8674-4D429F85897E} | X | text/html | mfiltis.dll | Adware ISearch |
| Filter | {4F7681E5-6CAF-478D-9CB8-4CA593BEE7FB} | X | text/html | xplugin.dll | Adware TMKSoft |
| Filter | {E64E4E60-EF13-4C79-A159-119762E18181} | X | text/html | lmf32.dll | Adware Hyperlinker |
