| Header | CLSID | Status | Name | Path/File | Description |
| Protocol | {53B95211-7D77-11D2-9F80-00104B107C96} | X | about | msxmlpp.dll | Adware.FindemNow |
| Protocol | {3050F406-98B5-11CF-BB82-00AA00BDCE0B} | L | about, javascript, mailto, res, vbscript | mshtml.dll | Items taken from whitelist of HijackThis |
| Protocol | {2A0C35F4-82A3-4C80-919D-7879FEE79DF6} | L | ActLink | actlink.dll | ACT! Link for Peachtree |
| Protocol | {7DC356B2-7366-4F19-BF7A-4875F6AABEA0} | X | advert | nodeipproc.dll | AdClicker.Oddbot |
| Protocol | {3050F406-98B5-11CF-BB82-00AA00BDCE0B} | L | aim, shell | mshtml.dll | Qwik-Fix Pro |
| Filter | {D962EF38-5FB0-4761-8638-C86F085E25E6} | X | application/hta | chp.dll, MWSHELP.DLL | CoolWebSearch parasite variant |
| Filter | {DFF82902-0B96-3B98-6F62-D655E146A23A} | L | application/msword, application/vnd.ms-excel,
application/vnd.ms-powerpoint,
application/x-microsoft-rpmsg-message | mime_filter.dll | Rights Management Add-on for Internet Explorer |
| Filter hijack | {F969FE8E-1937-45AD-AF42-8A4D11CBDC2A} | L | application/octet-stream | mime_filter.dll | Rights Management Add-on for Internet Explorer |
| Filter hijack | {6585E5B4-4D2A-4A1D-A219-4102C64BA999} | X | application/octet-stream | chp.dll, MWSHELP.DLL | CoolWebSearch parasite variant |
| Filter | {1E66F26B-79EE-11D2-8710-00C04F79ED0D} | L | application/vnd-backup-octet-stream | mscoree.dll | Rights Management Add-on for Internet Explorer |
| Filter | {CD4527E8-4FC7-48DB-9806-10537B501237} | L | application/vnd-viewer | (no file) | Rights Management Add-on for Internet Explorer |
| Filter | {6E1DDCE8-76BC-4390-9488-806E8FB1AD77} | L | application/x-bt2 | bt2plugin.dll | BT2Net |
| Filter | {A173B69A-1F9B-4823-9FDA-412F641E65D6} | L | application/x-internet-signup | tiscalifilter.dll | Tiscali |
| Filter, Filter hijack | {32F66A26-7614-11D4-BD11-00104BD3F987} | L | application/xhtml+xml, text/xml, | MathMLMimer.dll | MathPlayer |
| Protocol | {8D32BA61-D15B-11D4-894B-000000000000} | L | asp, hsp, x-asp, x-hsp, x-zip, zip | EzTools\hsppp.dll | EzTools |
| Protocol | {07C0D34D-11D7-43F7-832B-C6BB41726F5F} | X | ayb | [random named].dll | C2Media/lop.com |
Engine Version 2.0 by CastleCops
