CastleCops® Network
--------------------
About CastleCops
Become Premium
Our Sponsors
--------------------
CastleCops
CastleCops Blog
CastleCops Deutsch
CastleCops Hashes
CastleCops Mirrors
CastleCops Wiki
PIRT Squad
--------------------
Malware Removal & Prevention
How did I get infected?
Unknown file uploads
UDRP
--------------------
R3 URL SearchHook
O2/O3 BHOs/Toolbars
O4 Startups
O9 Internet Explorer Buttons
O10 LSPs
O16 ActiveX
O18 Protocol Hijackers
O20 AppInit_DLLs
O21 ShellServiceObjectDelayLoad
O22 Shared Task Scheduler
O23 XP/NT Services
--------------------
Need help
? Click
here
to register for free!
Absolutely zero advertisements on this site
!
$9736.22 of $21422.68
Help CastleCops serve the community on new servers,
Donate Here
to reach our goal.
O18 Extra protocols and protocol hijackers
Field
Value
Header
Filter hijack
CLSID
6585E5B4-4D2A-4A1D-A219-4102C64BA999
Name
application/octet-stream
Path/File
chp.dll, MWSHELP.DLL
Status
X
Description
CoolWebSearch parasite
variant
Viewed 2649 times since Jul 8 2005, 2200 Hours UTC-4.
STATUS KEY
:
"
L
" - Legitimate
"
O
" - Open to Debate
"
X
" - Malware/Bad
"
?
" - Unknown
Navigate
: [
O18 Extra protocols and protocol hijackers
] - Feeds to come shortly...
2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved.
Acceptable Use Policy
. Use signifies your agreement.
138ppm 0.321s (0.002s)
Making cybercriminals unhappy since 2002
*
