CastleCops® Network
--------------------
About CastleCops
Become Premium
Our Sponsors
--------------------
CastleCops
CastleCops Blog
CastleCops Deutsch
CastleCops Hashes
CastleCops Mirrors
CastleCops Wiki
PIRT Squad
--------------------
Malware Removal & Prevention
How did I get infected?
Unknown file uploads
UDRP
--------------------
R3 URL SearchHook
O2/O3 BHOs/Toolbars
O4 Startups
O9 Internet Explorer Buttons
O10 LSPs
O16 ActiveX
O18 Protocol Hijackers
O20 AppInit_DLLs
O21 ShellServiceObjectDelayLoad
O22 Shared Task Scheduler
O23 XP/NT Services
--------------------
Need help
? Click
here
to register for free!
Absolutely zero advertisements on this site
!
$9736.22 of $21422.68
Help CastleCops serve the community on new servers,
Donate Here
to reach our goal.
O18 Extra protocols and protocol hijackers
Field
Value
Header
Protocol (hijack)
CLSID
53B95211-7D77-11D2-9F81-00104B107C96
Name
start, about
Path/File
MSXWORD.DLL, SYSTEM***.dll (*** random digits)
Status
X
Description
CoolWebSearch parasite
variant
Viewed 594 times since Jul 8 2005, 2200 Hours UTC-4.
STATUS KEY
:
"
L
" - Legitimate
"
O
" - Open to Debate
"
X
" - Malware/Bad
"
?
" - Unknown
Navigate
: [
O18 Extra protocols and protocol hijackers
] - Feeds to come shortly...
2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved.
Acceptable Use Policy
. Use signifies your agreement.
177ppm 0.072s (0.002s)
Making cybercriminals unhappy since 2002
*
