| OBJECT NAME | GUID | STATUS | FILENAME | DESCRIPTION |
|---|
| IEBrowserHelperObject IÆ’uÆ’WÆ’FÆ’NÆ’gÆ’ | {A1E82980-C07E-42B3-ACD3-4F175665EFF5} | L BHO | irccatch.dll | Irvine |
| Class | {EBB49CE8-D4FB-1C50-A113-897846C3735F} | X BHO | IE**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| HTML tools | {00673769-777F-4814-BE0F-74CBA1D823B8} | X BHO | Iehook.dll | Malware taking advantage of the ASN.1_exploit |
| (no name) | {E26CEADA-67B0-4543-BE8B-307F00265118} | X BHO | iesplg.dll | ProtectionBar, rogue "security software", related to the notorious SpyCrush foistware - a member of the Trojan-Downloader.Zlob.Media-Codec malware family |
| Class | {883B6F6B-1236-FC72-D1A0-9569E99595C6} | X BHO | IE**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| zoozle Toolbar | {DF8F3F64-81D4-40F1-AB36-298257AF53C8} | O TB | ini.dll | Zoozle_Toolbar |
| infodonkey Module | {EF0DA19E-5CCD-4B29-AFCE-3B37E91F8589} | X BHO | infodonkey.dll, INFODO~1.DLL | Parasite of Korean origin detected as Win32.Spyware.infodonkey |
| Class | {AAE8A792-B27B-BC21-D08D-27935E465A49} | X BHO | IE**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {86BC8CBE-9874-5123-8537-9B760F97DFE0} | X BHO | IE**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| VPNS System | {366B2151-E1C7-44a3-86A3-E5686C2A3D2F} | X BHO | iedrives.dll | MyGeek/Cpvfeed.com adware variant, detected by AntiVir antivirus as ADSPY/BHOApp - logs search engine queries to a %Windir%\search_res.txt file. Also see here
|
| Class | {818CAE86-5D04-FE61-4EFA-8EBC3012335E} | X BHO | IE**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {2592478D-5A23-CA94-7339-22D7A0CDB1C7} | X BHO | IP**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {B52C7F1E-1825-4571-7714-D5997FBB11A8} | X BHO | IP**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {83C2341D-DFC9-7AF9-0252-80E375C2DAC9} | X BHO | IE**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| SearchToolbar | {08BEC6AA-49FC-4379-3587-4B21E286C19E} | X BHO TB | IE2CLTR.DLL, *****.dll (* = random char/digit) | SBSoft/SearchToolbar hijacker - also see here |
| InstantBar | {0629BAD9-9411-488D-8984-5D0AAF13303F} | X TB | InstantBar.dll | InstantBar, detected by a-squared as Adware.Win32.InstantBar |
| Class | {0619A956-9257-5FC3-5AF0-B50872BD2662} | X BHO | IE**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {41A0091F-BE0B-897D-16F8-5BD81668DD3F} | X BHO | IE**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {40614011-0869-6EAA-DBD5-EC6D797E0570} | X BHO | IP**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| metaspinner media GmbH | {D3AA56A9-8137-4950-A6F9-D0190A82AF2A} | O BHO | IEButtonPPInterface.dll, IEBUTT~*.DLL | MetaSpinner GmbH Preispiraten price comparison engine |
| Class | {410E38DE-50D9-3C3B-D33C-339C21E95D1D} | X BHO | IE**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| IEHelper Class | {13EB2B38-39D2-4BB2-9523-510030858064} | X BHO | iehook.dll | Parasite of Korean origin detected as Win32.Spyware.Cardio |
| XBTP04665 | {7B9A8983-E51F-4568-9BC0-3A467E776A16} | O BHO | ie-v.dll | Tv-eg.com toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Remove unless you both trust it and expressly meant to install it. |
| Protection Bar | {96EBBE6A-2864-4345-B32B-26EE9BE524B5} | X TB | iesplugin.dll | ProtectionBar, rogue "security software", related to the notorious PS_Guard/SpywareQuake/WinAntivirus foistware and detected as a variant of the FakeAle aka Zlob or Puper trojan - see here
|
| Class | {7148321E-D1B0-F759-E463-0E16B398180E} | X BHO | IP**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {957A6506-FA99-95EC-8012-78785C25AEF1} | X BHO | IP**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {BAA30FC7-144C-D511-86B0-B4821F6A694B} | X BHO | IP**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {CB4A9881-D6FA-66F1-3213-6202E35DBEFA} | X BHO | IE**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {00597C23-DF8F-1D28-47F2-6A500B910E65} | X BHO | IE**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {A01140FC-118E-38DC-4ABE-48DD27F0FF8F} | X BHO | IE**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {C5DA3684-35E8-7CE9-EBB4-A6BFC374318D} | X BHO | IP**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {2D9A5F30-BB39-3C3B-1DB0-A4572E5E7077} | X BHO | IP**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {2A68B9E5-DA74-C683-A730-6D002AC63E70} | X BHO | IP**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {C012ED91-D21E-BC95-430B-8D4A44A3BDA5} | X BHO | IP**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| IEMaximizerBHO Class | {F7AE12AF-CC64-487E-A9A3-3CF85AE39027} | L BHO | IEMaximizer.dll | IEMaximizer |
| Class | {F4986C37-F512-A8C9-B1D2-CC1543370843} | X BHO | IE**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| TBSB09490 | {654F1FA9-747F-4D75-B1A7-298E0D818225} | O BHO | intern.dll, ieinstaller.dll | BH-Systems/Mohaa-Power Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Installer detected by Kaspersky antivirus as AdWare.Win32.Mostofate.bt and by Bitdefender as Spyware.311 |
| Class | {37D770DC-7684-506E-506F-B70AAFEB6F95} | X BHO | IE**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {3C3723A6-D47B-BE0B-91E9-FF47BDB28B2C} | X BHO | IP**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {21F0E33A-868D-6697-EA18-A8B04F3929D2} | X BHO | IP**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {5677AB6A-2934-E737-F233-AF849B02D48F} | X BHO | IP**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| XBTB00148 | {3EF52DDC-561E-4590-88A3-4CD27B858F22} | O BHO | infoseektb.dll | InfoSeek_Toolbar - a Softomate Toolbar, detected by Kaspersky antivirus as AdWare.Win32.Mostofate.aq |
| I.R.I.S. Desktop Search | {577EBCA9-8ED3-45FC-A514-55B3817D4BCF} | L TB | IRISDesktopSearchIntegration910.dll, IRISDesktopSearchIntegration***.dll, IRISDE~*.DLL | IRIS Desktop Search - part of ReadIris_Pro OCR software |
| Class | {7C0C00E8-0709-EBA4-2117-83E64B619A98} | X BHO | IE**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {9CB532A7-1F17-064F-73BF-005B4820402B} | X BHO | IE**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {9E28FF0D-A16E-D825-AF83-46EADDF15D72} | X BHO | IE**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {D3AEC2F9-242B-38A4-41C3-46BE5B49B85C} | X BHO | IP**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| (no name) | {FCADDC14-BD46-408A-9842-CDBE1C6D37EB} | X BHO | iexplorer.dll | Banker aka password stealer trojan of Brazilian origin |
| Class | {F210D7B8-B849-6710-7C1A-0AD1F74FA76B} | X BHO | IE**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {1BA7983D-B381-414E-A78F-CA87D7B89E3C} | X BHO | IP**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {8F228210-2541-0E0A-BDA9-8E58949C0AA0} | X BHO | IE**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {0E70AA43-C12E-E203-F463-20C10DCB80B4} | X BHO | IE**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {9E07FD2A-0649-5B77-C455-757F3090A1BE} | X BHO | IE**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {646E2E0B-4014-CADD-B572-242AA038B2F1} | X BHO | IE**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {2825AEB2-BECC-119B-D482-F8F24CE5B9FA} | X BHO | IE**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
