850AA456-009C-AA22-26C3-76A8DD3F7C44   SYS**.DLL - CoolWebSearch/HomeSearch, 
850AB9B1-1258-DE09-759D-A5B88E566256   IE**32.DLL - CoolWebSearch/HomeSearch, 
850AC2CD-883E-D3E9-9CBA-6830CC0DA62F   MS**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
850B5133-528F-2323-6A3C-213C16040566   CR**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
850B69E4-90DB-4F45-8621-891BF35A5B53   bar.dll - AlibabaTB, 
850CA405-2949-4BAC-83D2-08A2F4C32ADE   *****.dll ( * = random char) - ConHook, 
850CEB9A-AF22-5C40-8C3A-0AB13F515CF3   CR**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85109FF9-1ADE-DF6B-61AF-ADDEDF9ACB09   WIN**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
8512441F-E8F7-35DA-C3F7-AAEAC5DA7FA2   SDK**32.DLL - CoolWebSearch/HomeSearch, 
85138801-518D-CEC2-27AE-83F4E12401F3   WIN**32.DLL - CoolWebSearch/HomeSearch, 
851521DF-25C2-10A7-BF83-6EF00930936B   MS**32.DLL - CoolWebSearch/HomeSearch, 
8516B14C-A215-9B6D-EB6E-7283E8A2619A   IE**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
8516B4FD-063F-6C66-C3A2-F5FC6522CF52   ATL**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
8516CA48-18FB-904E-027B-350B2649B563   APP**.DLL - CoolWebSearch/HomeSearch, 
85175A0A-764A-EE42-7343-5D80F1BEF3F2   SYS**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
851A5FD0-7709-B373-4793-7897DC7FEB8D   IE**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85201BB6-388D-DCC6-C89B-AA43E4FA80F7   D3**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85201D02-CB9B-DA81-6BE1-09CB85676F6E   IE**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
852064D5-D83D-C0DA-ED78-76551794EE8D   MFC**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85207839-3806-D845-DDE9-5ADD23506597   API**.DLL - CoolWebSearch/HomeSearch, 
8521EA94-1EC4-ED82-D9DA-81CA0FF7674B   NT**.DLL - CoolWebSearch/HomeSearch, 
85241B75-0306-ECC0-70BA-2EE14819AC5A   SYS**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
8524EB63-E94C-0E8C-81F9-0567631683AE   ADD**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
852B4036-CDE7-152D-D073-32287D1E5995   SDK**.DLL - CoolWebSearch/HomeSearch, 
852E515B-6A8C-F954-CC7F-CAC6CC50E458   WIN**32.DLL - CoolWebSearch/HomeSearch, 
852FA20A-9E12-6825-3E86-D9C0B1C1184B   ADD**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85350E27-DDF3-4D24-ABE1-57F9792608C9   NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
8535DE15-B339-6FE0-AC10-3E709432EF1D   WIN**.DLL - CoolWebSearch/HomeSearch, 
853750CD-C38A-D862-6C41-B28B0402ACA2   D3**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85389C19-9846-3EB7-FED8-ECFDDEB7598A   APP**.DLL - CoolWebSearch/HomeSearch, 
8538BB70-1FE8-677F-64CF-EE85DC958455   NT**32.DLL - CoolWebSearch/HomeSearch, 
853960FB-BE2D-A02D-0AF4-FE92BED9B76F   SYS**.DLL - CoolWebSearch/HomeSearch, 
85398450-1DF7-A898-FA64-D21BDAA43E7A   API**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
8539DC88-FBA4-712F-B1E9-539557E42C08   D3**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
853A1B1F-537E-D540-D6C6-ED90C207B848   WIN**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
853AEA0D-29B4-E70C-E805-D306EC149F9C   API**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
853AFE61-897E-FF77-C876-B79FF8EF16A6   SYS**.DLL - CoolWebSearch/HomeSearch, 
853BCDF9-9D99-3DF5-95B8-8A1427DA8E89   SDK**.DLL - CoolWebSearch/HomeSearch, 
853C516D-4012-5CF2-EDC3-25118ECE29F0   ATL**.DLL - CoolWebSearch/HomeSearch, 
853C9926-1FA5-7DC8-BEB4-FE22B5561705   IE**.DLL - CoolWebSearch/HomeSearch, 
85400964-C2DA-EC82-F9E5-A84E50F255C5   NT**32.DLL - CoolWebSearch/HomeSearch, 
8541F80E-F0BE-0944-B4F8-944D54E0E564   JAVA**32.dll (* = random char) - CoolWebSearch/HomeSearch, 
85432042-AF44-BB62-1A5F-2855B602D604   MS**.DLL - CoolWebSearch/HomeSearch, 
8544CEB8-7AA5-0ABD-E8D0-E151F009353B   MS**.DLL - CoolWebSearch/HomeSearch, 
85456B38-A204-3E8A-57F9-4ED794A5147B   SYS**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
854604F6-7639-916F-EFED-29E3BDC1A5E3   ADD**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
8547AA12-E654-124B-9F8F-8176485CD983   IP**.DLL - CoolWebSearch/HomeSearch, 
854869AB-EB7F-41C9-6CC1-64FC68565167   WIN**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
854F3880-4AA1-AF49-995D-6630908AFE8A   MS**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
8550B543-1A52-C711-5EA1-BE2D4A45337F   WIN**32.DLL - CoolWebSearch/HomeSearch, 
8551A6D4-FA39-105F-680E-05B3F49E4405   ATL**.DLL - CoolWebSearch/HomeSearch, 
8553EC21-E7DD-9602-7F1B-4E44B156B5BD   ATL**32.DLL - CoolWebSearch/HomeSearch, 
855875B5-93F3-429D-FF34-660B206D897C   *******.dll ( * = random char or digit) - Malware - detected by Kaspersky, 
85597C9D-3994-4B7F-8CE3-515E632297A1   [random file name] - Vundo.B, 
855C4319-681C-92DA-BA91-F3931A800568   IP**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
855D9ABD-36CC-FBCB-F69B-5F15C25AE571   NET**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
855DBF77-66A2-D764-2BF9-479FC929DBEC   NET**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
855DCD2B-E394-D9BA-98A2-D81738BBFD85   APP**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
855DD527-5979-EE8A-BFBF-9BAF7562315E   SYS**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
855DE18F-426D-E115-7813-BCAF5487649F   APP**.DLL - CoolWebSearch/HomeSearch, 
855EA263-CA96-2E5D-E8BB-FEAD04FFCAEA   MS**32.DLL - CoolWebSearch/HomeSearch, 
855F0D6B-F800-90B9-1516-3EA7D785210D   SDK**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
8569B350-A235-C3D0-C976-91F197E58D58   NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
8572B1C3-0B33-91DD-6948-89B6DFA745A2   CR**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
857427CD-5085-3485-2B29-D7C1854F5F96   SYS**.DLL - CoolWebSearch/HomeSearch, 
857BEA2E-73ED-4C41-86A4-F5284A4BA296   adsldmpc.dll - Trojan-Downloader.Win32.Delf variant - a member of the CoolWebSearch, 
858126B0-3708-4051-AE8E-B48521401CA2   ctsr*_*.dll, ctsr*.dll, keywordz*.dll (* = digit) - EZSearch, 
8581EB84-715F-31BD-CAE6-07AA6D18F856   ADD**.DLL - CoolWebSearch/HomeSearch, 
85A702BA-EA8F-4B83-AA07-07A5186ACD7E   ME*.dll, SS*.DLL, (* = random digit) - MediaLoads/Downloadware, 
85A77577-A8CA-41b7-AA1E-DDAD4C0B12B1   hlwin.dll - Hyperlinker/LinkMaker, 
85A8D85F-2DD8-DE08-A0B2-F759605E60DA   CR**32.DLL - CoolWebSearch/HomeSearch, 
85B31A6E-2E40-52CF-704D-A427D8484CF4   WIN**.DLL - CoolWebSearch/HomeSearch, 
85B5404C-FBCB-31A0-91B7-343F3E58BD33   D3**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85C0A705-3D29-9010-A6B0-D986BE208ED8   API**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85C0AA51-B027-9FCA-4906-480E4F9D6D3F   MS**.DLL - CoolWebSearch/HomeSearch, 
85C18F99-A819-E47E-9A0F-6E941AC13B95   IP**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85CBFDE0-B26B-4EE5-BD3C-4DE111DE763E   Winnet.dll - TrojanDownloader.Win32.Agent.av, 
85CC1685-0441-3212-9DC9-3C658F9C15E6   WIN**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85D4417B-F626-4ac0-AEF6-74548FB36907   comdlg32.dll - SearchingAll, 
85D77090-7B9F-CBA9-8362-9CBB353C35EA   IE**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85D798A6-2F83-A50C-5B26-F3BCDD880ABD   CR**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85D986BB-4D6A-6317-9CAF-CBB30CF19DD6   ATL**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85D99FC8-A44F-68F7-C3BB-8D4B49A8D1B0   SDK**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85D9CD8E-5A0B-5971-2E36-284D9E2E0BF4   ADD**32.DLL - CoolWebSearch/HomeSearch, 
85DA9C16-5F25-97FF-EB78-0AC2CD2883E8   SYS**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85DBF71E-8CAF-095A-27E3-3BCD81BEDA0B   SDK**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85DDA992-E5AE-8EC1-91E7-C461EB7E41EC   MFC**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85DDD882-701E-401B-8A7D-D51227048214   iewatcher.dll, Iewatch.dll, svcmoni.dll - IeWatch/PersonInspect, 
85E23FB5-EEAD-4A19-920D-217514180680   [random filename] - ConHook, 
85E33A54-6481-9784-AEB9-CF853AF309D9   IE**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85E40681-E5AD-D757-D7B5-2282C9709255   API**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85E56198-1317-4AA3-031F-529D9C16FA79   MFC**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85E97E15-A9A0-3175-BA8F-1C2CBA6CB76D   SYS**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85ECAFCC-BDD9-5B03-97A8-FA65CBE8809A   1234.ini - Unidentified parasite - should you have any information about this application,   [xs4] - if you actually have a copy of the file,  please attach it to your email for analysis.  Thanks!
85F175D1-7DD4-EDE0-8831-656AB0899A5E   APP**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85F1F7B8-CC17-E2DA-8EFF-F97C0ABCF6F9   NET**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85F30D49-60FD-6D87-DB29-3C75DD93BD56   API**32.DLL - CoolWebSearch/HomeSearch, 
85F3E634-BC0A-8323-0375-D5743546E873   ATL**.DLL - CoolWebSearch/HomeSearch, 
85F4A366-EF18-EE63-8BCA-9409682EF1F6   ATL**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
85FA3F49-C5B5-B4EC-53AF-CC3365181BC9   IP**32.DLL  (* = random char) - CoolWebSearch/HomeSearch, 
85FEBA8F-EDD1-EF02-1DBC-3A55E2858EB9   WIN**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
856D6A8E-A24C-498A-A55A-2B25C606A6B4   netster.dll  SMARTBROWSER 
850C7964-9320-4055-BE11-7D7B562A6417 HELPER.DLL, HELPER1.DLL - TROJ/BANKER-FAT, HTTP://WWW.SOPHOS.COM/SECURITY/ANALYSES/TROJBANKERFAT.HTML TROJAN
85ECAFCB-BDD9-5B03-97A8-FA65CBE8809A QQIEHELPER01.DLL - TENCENTADDRESSBAR, HTTP://KR.AHNLAB.COM/SECUINFOVIRUSVIEWENGNEW3.AHN?SEQ_NO=5627 ADWARE - BUNDLED WITH THE TENCENT_QQ, HTTP://WWW.TENCENT.COM/INDEX_E.SHTML INSTANT MESSAGING CLIENT
85C2C2A1-3F20-4EAD-ADC3-BD3217391543 RUNDLL16.DLL - BROWSERAID, HTTP://WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.BROWSERAID.HTML ADWARE VARIANT
85C76FBD-6218-4379-95C1-B4F37BF6180A SEARCHBAR.DLL - POPMONSTER ADWARE VARIANT, HTTP://WWW.PESTPATROL.COM/PESTINFO/P/POPMONSTER.ASP
85E517D1-1B6B-4662-AF6E-4B9738091DCC FSEARCHBAR.DLL - FASTSEARCH, HTTP://WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=453094244 ADWARE
8522F9B3-38C5-4AA4-AE40-7401F1BBC898 HTTP://WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=453074893 
8522F9B3-38C5-4AA4-AE40-7401F1BBC851 FREE_MP3SEARCH.EXE ADWARE, BROWSER HIJACKER - MORE HERE 
85D1F3B2-2A21-11D7-97B9-0010DC2A6243 SIGNUPTEMPLAT...-DEVEL.CAB RELATED TO VIRTOOL.WIN32.COLLECTOR 
8522F9B3-38C5-4AA4-AE40-7401F1BBC899 HTTP://WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=453076507 
8516B778-1FA1-4132-B120-D34CE2C05BB9  Known Malware Component. http://www.google.com/search?hl=en&q=8516B778-1FA1-4132-B120-D34CE2C05BB9&btnG=Google+Search
8522F9B3-0000-0000-0000-000000000000  Known Malware Component. http://www.google.com/search?hl=en&q=8522F9B3-0000-0000-0000-000000000000&btnG=Google+Search
853b581b-09bb-4ae6-9663-231f1c98fb40  Known Malware Component. http://www.google.com/search?hl=en&q=853b581b-09bb-4ae6-9663-231f1c98fb40&btnG=Google+Search
855FB119-4791-423B-BC32-BA7E9F037BB1  Known Malware Component. http://www.google.com/search?hl=en&q=855FB119-4791-423B-BC32-BA7E9F037BB1&btnG=Google+Search
85bbd920-42a0-1069-a2e4-08002b30309d  Known Malware Component. http://www.google.com/search?hl=en&q=85bbd920-42a0-1069-a2e4-08002b30309d&btnG=Google+Search
85ce298d-a0a8-4f87-93f4-95b8993b60a0  Known Malware Component. http://www.google.com/search?hl=en&q=85ce298d-a0a8-4f87-93f4-95b8993b60a0&btnG=Google+Search
852AA4EA-68B0-487B-98E7-4F03898CB502   DVDINFOPRO_TOOLBAR.DLL - DVDINFOPRO, HTTP://WWW.DVDINFOPRO.COM/ SEARCH TOOLBAR (NOTE    THIS ADVERT SUPPORTED TOOLBAR IS ONLY BUNDLED WITH THE FREE VERSION OF THE PROGRAM)
85C5B796-EDA5-4353-B26E-A5D181AD9CD0   TBEMAI.DLL, TBEMA0.DLL, TBEMA1.DLL - EMAIL_NOTIFIER_TOOLBAR, HTTP://EMAILNOTIFIER.OURTOOLBAR.COM/ - A CONDUIT/EFFECTIVEBRAND, HTTP://WWW.CONDUIT.COM/BENEFITS/DEFAULT.ASPX "FREE COMMUNITY" TOOLBAR. SOME CONDUIT TOOLBARS ARE REPUTED TO HAVE A CERTAIN ADWARE/TRACKWARE FUNCTIONALITY.
85E0B171-04FA-11D1-B7DA-00A0C90348D7   SEARCHTOOL.DLL - UPMEDIA, HTTP://WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=453103967 ADWARE COMPONENT - NOTE   THIS IS IN FACT NOT A TOOLBAR PROPER BUT A INTERNET EXPLORER TOOLBAND REGISTERED IN HKCU OR HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\EXPLORER BARS
850A1CAC-33D7-4DDD-8571-31C9491B4497   [RANDOM FILENAME] - CONHOOK, HTTP://RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP://WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP://WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
85382E07-2F7E-4910-89AD-16F2E97FC152   [RANDOM FILENAME] - CONHOOK, HTTP://RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP://WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP://WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
85589B5D-D53D-4237-A677-46B82EA275F3   XMLHELPER.DLL, XMLHELPER2.DLL - PARASITE DETECTED BY KASPERSKY, HTTP://WWW.KASPERSKY.COM/ ANTIVIRUS AS NOT-A-VIRUS:ADWARE.WIN32.AGENT.DB
856E36A9-A123-418A-A2CC-A05B3BF11AB9   [RANDOM FILENAME] - CONHOOK, HTTP://RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP://WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP://WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
85880F59-485A-474D-9955-915EC345316C   CRICINFO.DLL - CRICINFO_TOOLBAR, HTTP://WWW.CRICINFO.COM/TOOLBAR/ - A SOFTOMATE, HTTP://WWW.F-SECURE.COM/SW-DESC/SOFTOMATE_TOOLBAR.SHTML TOOLBAR VARIANT - SOFTOMATE CUSTOMIZES TOOLBARS TO CUSTOMERS NEEDS. THE DLL FILES FOR THEIR TOOLBARS CONTAIN SOME SPYWARE/ADWARE FUNCTIONALITY, ALTHOUGH NOT ALL OF THE TOOLBARS USE THIS. SOME OF THE TOOLBARS ARE FINE TO HAVE, SO EVERY CASE IS DIFFERENT. YOUR CHOICE. 
85A3F3A9-CCD8-40E0-95BE-18D218855BCD   GETIONARYPL.DLL, GETION~1.DLL - GETIONARY, HTTP://WWW.GETIT.PL/EN.PHP/GETIONARY TOOLBAR - A SOFTOMATE, HTTP://WWW.F-SECURE.COM/SW-DESC/SOFTOMATE_TOOLBAR.SHTML TOOLBAR VARIANT -  SOFTOMATE CUSTOMIZES TOOLBARS TO CUSTOMERS NEEDS. THE DLL FILES FOR THEIR TOOLBARS CONTAIN SOME SPYWARE/ADWARE FUNCTIONALITY, ALTHOUGH NOT ALL OF THE TOOLBARS USE THIS. 
85C5B796-EDA5-4353-B26E-A5D181AD9CD0   TBEMAI.DLL, TBEMA0.DLL, TBEMA1.DLL - EMAIL_NOTIFIER_TOOLBAR, HTTP://EMAILNOTIFIER.OURTOOLBAR.COM/ - A CONDUIT/EFFECTIVEBRAND, HTTP://WWW.CONDUIT.COM/BENEFITS/DEFAULT.ASPX "FREE COMMUNITY" TOOLBAR. SOME CONDUIT TOOLBARS ARE REPUTED TO HAVE A CERTAIN ADWARE/TRACKWARE FUNCTIONALITY.
85CC6BFF-5A5C-4A76-8FC8-DB0787DF1597   OTS.DLL - PARASITE OF KOREAN ORIGIN DETECTED AS SBSTOOLBAR, HTTP://LABS.NO-AD.CO.KR/NET/SPYWAREINFO.ASPX?NAME=WIN32.SPYWARE.SBSTOOLBAR SPYWARE
85DED05D-2EC2-4E04-9406-AB25F577F706   [RANDOM FILENAME] - CONHOOK, HTTP://RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP://WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP://WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
85FAEA13-9C62-4917-8571-B35C563A1943   BUYUNION.DLL - PARASITE OF CHINESE ORIGIN,  IDENTIFIED AS BUYUNION, HTTP://KR.AHNLAB.COM/SECUINFOVIRUSVIEWENGNEW3.AHN?SEQ_NO=7870 ADWARE
850A1CAC-33D7-4DDD-8571-31C9491B4497   [RANDOM FILENAME] - CONHOOK, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP  //WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
850AA456-009C-AA22-26C3-76A8DD3F7C44   SYS**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
850AB9B1-1258-DE09-759D-A5B88E566256   IE**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
850AC2CD-883E-D3E9-9CBA-6830CC0DA62F   MS**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
850B5133-528F-2323-6A3C-213C16040566   CR**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
850B69E4-90DB-4F45-8621-891BF35A5B53   BAR.DLL - ALIBABATB, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.ALIBABATB.HTML ADWARE
850C7964-9320-4055-BE11-7D7B562A6417   HELPER.DLL, HELPER1.DLL, MSTRANS.DLL - TROJ/BANKER-FAT, HTTP  //WWW.SOPHOS.COM/SECURITY/ANALYSES/TROJBANKERFAT.HTML TROJAN
850CA405-2949-4BAC-83D2-08A2F4C32ADE   *****.DLL ( * = RANDOM CHAR) - CONHOOK, HTTP  //WWW.SOPHOS.COM/VIRUSINFO/ANALYSES/TROJCONHOOKN.HTML TROJAN VARIANT - RELATED TO VIRTUMONDE/VUNDO, HTTP  //WWW.BLEEPINGCOMPUTER.COM/FORUMS/HOW-TO-REMOVE-THE-TROJANVUNDOB-SEARCH42COM-MSEVENTS-TX18610-0.HTML#ENTRY110599 ADWARE
850CEB9A-AF22-5C40-8C3A-0AB13F515CF3   CR**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85109FF9-1ADE-DF6B-61AF-ADDEDF9ACB09   WIN**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
8512441F-E8F7-35DA-C3F7-AAEAC5DA7FA2   SDK**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85138801-518D-CEC2-27AE-83F4E12401F3   WIN**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
851521DF-25C2-10A7-BF83-6EF00930936B   MS**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
8516B14C-A215-9B6D-EB6E-7283E8A2619A   IE**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
8516B4FD-063F-6C66-C3A2-F5FC6522CF52   ATL**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
8516CA48-18FB-904E-027B-350B2649B563   APP**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85175A0A-764A-EE42-7343-5D80F1BEF3F2   SYS**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
851A5FD0-7709-B373-4793-7897DC7FEB8D   IE**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85201BB6-388D-DCC6-C89B-AA43E4FA80F7   D3**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85201D02-CB9B-DA81-6BE1-09CB85676F6E   IE**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
852064D5-D83D-C0DA-ED78-76551794EE8D   MFC**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85207839-3806-D845-DDE9-5ADD23506597   API**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
8521EA94-1EC4-ED82-D9DA-81CA0FF7674B   NT**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85241B75-0306-ECC0-70BA-2EE14819AC5A   SYS**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
8524EB63-E94C-0E8C-81F9-0567631683AE   ADD**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
852B4036-CDE7-152D-D073-32287D1E5995   SDK**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
852E515B-6A8C-F954-CC7F-CAC6CC50E458   WIN**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
852FA20A-9E12-6825-3E86-D9C0B1C1184B   ADD**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85350E27-DDF3-4D24-ABE1-57F9792608C9   NT**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
8535DE15-B339-6FE0-AC10-3E709432EF1D   WIN**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
853750CD-C38A-D862-6C41-B28B0402ACA2   D3**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85382E07-2F7E-4910-89AD-16F2E97FC152   [RANDOM FILENAME] - CONHOOK, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP  //WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
85389C19-9846-3EB7-FED8-ECFDDEB7598A   APP**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
8538BB70-1FE8-677F-64CF-EE85DC958455   NT**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
853960FB-BE2D-A02D-0AF4-FE92BED9B76F   SYS**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85398450-1DF7-A898-FA64-D21BDAA43E7A   API**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
8539DC88-FBA4-712F-B1E9-539557E42C08   D3**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
853A1B1F-537E-D540-D6C6-ED90C207B848   WIN**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
853AEA0D-29B4-E70C-E805-D306EC149F9C   API**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
853AFE61-897E-FF77-C876-B79FF8EF16A6   SYS**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
853BCDF9-9D99-3DF5-95B8-8A1427DA8E89   SDK**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
853C516D-4012-5CF2-EDC3-25118ECE29F0   ATL**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
853C9926-1FA5-7DC8-BEB4-FE22B5561705   IE**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85400964-C2DA-EC82-F9E5-A84E50F255C5   NT**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
8541F80E-F0BE-0944-B4F8-944D54E0E564   JAVA**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85432042-AF44-BB62-1A5F-2855B602D604   MS**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
8544CEB8-7AA5-0ABD-E8D0-E151F009353B   MS**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85456B38-A204-3E8A-57F9-4ED794A5147B   SYS**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
854604F6-7639-916F-EFED-29E3BDC1A5E3   ADD**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
8547AA12-E654-124B-9F8F-8176485CD983   IP**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
854869AB-EB7F-41C9-6CC1-64FC68565167   WIN**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
854F3880-4AA1-AF49-995D-6630908AFE8A   MS**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
8550B543-1A52-C711-5EA1-BE2D4A45337F   WIN**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
8551A6D4-FA39-105F-680E-05B3F49E4405   ATL**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
8553EC21-E7DD-9602-7F1B-4E44B156B5BD   ATL**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
855875B5-93F3-429D-FF34-660B206D897C   *******.DLL ( * = RANDOM CHAR OR DIGIT) - MALWARE - DETECTED BY KASPERSKY, HTTP  //WWW.KASPERSKY.COM/ ANTIVIRUS AS TROJAN-DOWNLOADER.WIN32.SMALL.DDX
85589B5D-D53D-4237-A677-46B82EA275F3   WEBASSIST.DLL, XMLHELPER.DLL, XMLHELPER2.DLL, XMLHELPER4.DLL, XHELPER.DLL - PARASITE DETECTED BY KASPERSKY, HTTP  //WWW.KASPERSKY.COM/ ANTIVIRUS AS NOT-A-VIRUS  ADWARE.WIN32.AGENT.DB
85597C9D-3994-4B7F-8CE3-515E632297A1   [RANDOM FILE NAME] - VUNDO.B, HTTP  //WWW.BLEEPINGCOMPUTER.COM/FORUMS/HOW-TO-REMOVE-THE-TROJANVUNDOB-SEARCH42COM-MSEVENTS-TX18610-0.HTML#ENTRY110599 ADWARE VARIANT
855C4319-681C-92DA-BA91-F3931A800568   IP**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
855D9ABD-36CC-FBCB-F69B-5F15C25AE571   NET**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
855DBF77-66A2-D764-2BF9-479FC929DBEC   NET**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
855DCD2B-E394-D9BA-98A2-D81738BBFD85   APP**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
855DD527-5979-EE8A-BFBF-9BAF7562315E   SYS**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
855DE18F-426D-E115-7813-BCAF5487649F   APP**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
855EA263-CA96-2E5D-E8BB-FEAD04FFCAEA   MS**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
855F0D6B-F800-90B9-1516-3EA7D785210D   SDK**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
8569B350-A235-C3D0-C976-91F197E58D58   NT**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
856E36A9-A123-418A-A2CC-A05B3BF11AB9   [RANDOM FILENAME] - CONHOOK, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP  //WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
85717FBE-3216-4725-A0F9-D7F59B9130D5   [RANDOM FILENAME] - CONHOOK, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP  //WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
8572B1C3-0B33-91DD-6948-89B6DFA745A2   CR**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
857427CD-5085-3485-2B29-D7C1854F5F96   SYS**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
857A461D-8D96-4996-A4A0-AEA0A2535B86   [RANDOM FILENAME] - CONHOOK, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP  //WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
857BEA2E-73ED-4C41-86A4-F5284A4BA296   ADSLDMPC.DLL - TROJAN-DOWNLOADER.WIN32.DELF VARIANT - A MEMBER OF THE COOLWEBSEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML PARASITE FAMILY
858126B0-3708-4051-AE8E-B48521401CA2   CTSR*_*.DLL, CTSR*.DLL, KEYWORDZ*.DLL (* = DIGIT) - EZSEARCH, HTTP  //WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=453079098 ADWARE VARIANT
8581EB84-715F-31BD-CAE6-07AA6D18F856   ADD**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85A67000-BB43-4468-9EF5-EB1E37DA0211   [RANDOM FILENAME] - CONHOOK, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP  //WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
85A702BA-EA8F-4B83-AA07-07A5186ACD7E   ME*.DLL, SS*.DLL, (* = RANDOM DIGIT) - MEDIALOADS/DOWNLOADWARE, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.MEDIALOAD.HTML ADWARE
85A77577-A8CA-41B7-AA1E-DDAD4C0B12B1   HLWIN.DLL - HYPERLINKER/LINKMAKER, HTTP  //SECURITYRESPONSE.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.LINKMAKER.HTML ADWARE VARIANT
85A8D85F-2DD8-DE08-A0B2-F759605E60DA   CR**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85B31A6E-2E40-52CF-704D-A427D8484CF4   WIN**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85B5404C-FBCB-31A0-91B7-343F3E58BD33   D3**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85C0A705-3D29-9010-A6B0-D986BE208ED8   API**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85C0AA51-B027-9FCA-4906-480E4F9D6D3F   MS**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85C18F99-A819-E47E-9A0F-6E941AC13B95   IP**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85CBFDE0-B26B-4EE5-BD3C-4DE111DE763E   WINNET.DLL - TROJANDOWNLOADER.WIN32.AGENT.AV, HTTP  //WWW.SPYWAREDB.COM/REMOVE-TROJANDOWNLOADER-WIN32-AGENT-AV/
85CC1685-0441-3212-9DC9-3C658F9C15E6   WIN**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85CC6BFF-5A5C-4A76-8FC8-DB0787DF1597   OTS.DLL - PARASITE OF KOREAN ORIGIN DETECTED AS SBSTOOLBAR, HTTP  //LABS.NO-AD.CO.KR/NET/SPYWAREINFO.ASPX?NAME=WIN32.SPYWARE.SBSTOOLBAR SPYWARE
85D4417B-F626-4AC0-AEF6-74548FB36907   COMDLG32.DLL - SEARCHINGALL, HTTP  //WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=453097487 ADWARE VARIANT (THE FILE IS LOCATED IN THE SYSTEM32\DRIVERS FOLDER,  AND MUST NOT BE CONFUSED WITH THE LEGITIMATE MICROSOFT FILE OF THE SAME NAME!)
85D77090-7B9F-CBA9-8362-9CBB353C35EA   IE**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85D798A6-2F83-A50C-5B26-F3BCDD880ABD   CR**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85D986BB-4D6A-6317-9CAF-CBB30CF19DD6   ATL**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85D99FC8-A44F-68F7-C3BB-8D4B49A8D1B0   SDK**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85D9CD8E-5A0B-5971-2E36-284D9E2E0BF4   ADD**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85DA9C16-5F25-97FF-EB78-0AC2CD2883E8   SYS**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85DBF71E-8CAF-095A-27E3-3BCD81BEDA0B   SDK**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85DDA992-E5AE-8EC1-91E7-C461EB7E41EC   MFC**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85DED05D-2EC2-4E04-9406-AB25F577F706   [RANDOM FILENAME] - CONHOOK, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP  //WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
85E23FB5-EEAD-4A19-920D-217514180680   [RANDOM FILENAME] - CONHOOK, HTTP  //WWW.SOPHOS.COM/VIRUSINFO/ANALYSES/TROJCONHOOKN.HTML TROJAN VARIANT - RELATED TO VIRTUMONDE/VUNDO, HTTP  //WWW.BLEEPINGCOMPUTER.COM/FORUMS/HOW-TO-REMOVE-THE-TROJANVUNDOB-SEARCH42COM-MSEVENTS-TX18610-0.HTML#ENTRY110599 ADWARE
85E33A54-6481-9784-AEB9-CF853AF309D9   IE**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85E40681-E5AD-D757-D7B5-2282C9709255   API**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85E56198-1317-4AA3-031F-529D9C16FA79   MFC**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85E659D3-E110-4CE7-9D99-416FD61A1720   SOUNDPLUGIN.DLL - MYGEEK/CPVFEED.COM, HTTP  //SUNBELTBLOG.BLOGSPOT.COM/2006/04/IS-MYGEEKCOM-HELPING-SECURITY-SCAMMER.HTML ADWARE VARIANT, DETECTED BY ANTIVIR, HTTP  //WWW.AVIRA.COM/ ANTIVIRUS AS ADSPY/BHOAPP - LOGS SEARCH ENGINE QUERIES TO A %WINDIR%\SEARCH_RES.TXT FILE. ALSO SEE HERE, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=123565
85E97E15-A9A0-3175-BA8F-1C2CBA6CB76D   SYS**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85ECAFCB-BDD9-5B03-97A8-FA65CBE8809A   QQIEHELPER01.DLL, QQIEHELPER02.DLL - TENCENTADDRESSBAR, HTTP  //KR.AHNLAB.COM/SECUINFOVIRUSVIEWENGNEW3.AHN?SEQ_NO=5627 ADWARE - BUNDLED WITH THE TENCENT_QQ, HTTP  //WWW.TENCENT.COM/INDEX_E.SHTML INSTANT MESSAGING CLIENT
85ECAFCC-BDD9-5B03-97A8-FA65CBE8809A   1234.INI - UNIDENTIFIED PARASITE - SHOULD YOU HAVE ANY INFORMATION ABOUT THIS APPLICATION,   [XS4] - IF YOU ACTUALLY HAVE A COPY OF THE FILE,  PLEASE ATTACH IT TO YOUR EMAIL FOR ANALYSIS.  THANKS!
85F175D1-7DD4-EDE0-8831-656AB0899A5E   APP**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85F1F7B8-CC17-E2DA-8EFF-F97C0ABCF6F9   NET**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85F30D49-60FD-6D87-DB29-3C75DD93BD56   API**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85F3E634-BC0A-8323-0375-D5743546E873   ATL**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85F4A366-EF18-EE63-8BCA-9409682EF1F6   ATL**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85FA3F49-C5B5-B4EC-53AF-CC3365181BC9   IP**32.DLL  (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
85FAEA13-9C62-4917-8571-B35C563A1943   BUYUNION.DLL - PARASITE OF CHINESE ORIGIN,  IDENTIFIED AS BUYUNION, HTTP  //KR.AHNLAB.COM/SECUINFOVIRUSVIEWENGNEW3.AHN?SEQ_NO=7870 ADWARE
85FEBA8F-EDD1-EF02-1DBC-3A55E2858EB9   WIN**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
856D6A8E-A24C-498A-A55A-2B25C606A6B4   NETSTER.DLL, _NETSTER.DLL - NETSTER SMART BROWSE TOOLBAR, HTTP  //AT.NETSTER.COM/INDEX.ASP?SITE=YXQUBMV0C3RLCI5JB20%3D 
85C03155-23F1-4347-B5F7-11A7F419ED63   STARWARE.DLL, STARWARE***.DLL (* = DIGIT) - COMET_SYSTEMS/STARWARE, HTTP  //SECURITYRESPONSE.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.STARWARE.HTML ADWARE
85C2C2A1-3F20-4EAD-ADC3-BD3217391543   RUNDLL16.DLL - BROWSERAID, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.BROWSERAID.HTML ADWARE VARIANT
85C76FBD-6218-4379-95C1-B4F37BF6180A   SEARCHBAR.DLL - POPMONSTER ADWARE VARIANT, HTTP  //WWW.PESTPATROL.COM/PESTINFO/P/POPMONSTER.ASP
85E0B171-04FA-11D1-B7DA-00A0C90348D7   SEARCHTOOL.DLL - UPMEDIA, HTTP  //WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=453103967 ADWARE COMPONENT - NOTE   THIS IS IN FACT NOT A TOOLBAR PROPER BUT A INTERNET EXPLORER TOOLBAND REGISTERED IN HKCU OR HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\EXPLORER BARS
85E517D1-1B6B-4662-AF6E-4B9738091DCC   FSEARCHBAR.DLL - FASTSEARCH, HTTP  //WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=453094244 ADWARE
8522F9B3-38C5-4AA4-AE40-7401F1BBC898   HTTP://WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=453074893 
8522F9B3-38C5-4AA4-AE40-7401F1BBC851   FREE_MP3SEARCH.EXE ADWARE, BROWSER HIJACKER - MORE HERE 
85D1F3B2-2A21-11D7-97B9-0010DC2A6243   SIGNUPTEMPLAT...-DEVEL.CAB RELATED TO VIRTOOL.WIN32.COLLECTOR   
8522F9B3-38C5-4AA4-AE40-7401F1BBC899   HTTP://WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=453076507 
8504FA2E-FA5B-4550-B1A6-B06C3B70F38C   TBMPIL.DLL, TBMPI0.DLL, TBMPI1.DLL - MPILAHI_TOOLBAR, HTTP  //MPILAHI.FORUMTOOLBAR.COM/ - A CONDUIT/EFFECTIVEBRAND, HTTP  //WWW.CONDUIT.COM/BENEFITS/DEFAULT.ASPX "FREE COMMUNITY" TOOLBAR - MODIFIES THE DEFAULT IE SEARCHHOOK. SOME CONDUIT TOOLBARS ARE REPUTED THAVE A CERTAIN ADWARE/TRACKWARE FUNCTIONALITY.
85880F59-485A-474D-9955-915EC345316C   CRICINFO.DLL - CRICINFO_TOOLBAR, HTTP  //WWW.CRICINFO.COM/TOOLBAR/ - A SOFTOMATE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT -  SOFTOMATE CUSTOMIZES TOOLBARS TCUSTOMERS NEEDS. THE DLL FILES FOR THEIR TOOLBARS CONTAIN SOME SPYWARE/ADWARE FUNCTIONALITY, ALTHOUGH NOT ALL OF THE TOOLBARS USE THIS.  REMOVE UNLESS YOU BOTH TRUST IT AND EXPRESSLY MEANT TINSTALL IT.
858EE471-F0C6-44C7-B593-9CA06DE9D804   SENSIS-TOOLBAR.DLL, SENSIS~1.DLL - SENSIS.COM.AU, HTTP  //WWW.SENSIS.COM.AU/TOOLBAR.DTOOLBAR - A SOFTOMATE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT -  SOFTOMATE CUSTOMIZES TOOLBARS TCUSTOMERS NEEDS. THE DLL FILES FOR THEIR TOOLBARS CONTAIN SOME SPYWARE/ADWARE FUNCTIONALITY, ALTHOUGH NOT ALL OF THE TOOLBARS USE THIS.  REMOVE UNLESS YOU BOTH TRUST IT AND EXPRESSLY MEANT TINSTALL IT.
85A3F3A9-CCD8-40E0-95BE-18D218855BCD   GETIONARYPL.DLL, GETION~1.DLL - GETIONARY, HTTP  //WWW.GETIT.PL/EN.PHP/GETIONARY TOOLBAR - A SOFTOMATE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT -  SOFTOMATE CUSTOMIZES TOOLBARS TCUSTOMERS NEEDS. THE DLL FILES FOR THEIR TOOLBARS CONTAIN SOME SPYWARE/ADWARE FUNCTIONALITY, ALTHOUGH NOT ALL OF THE TOOLBARS USE THIS.  REMOVE UNLESS YOU BOTH TRUST IT AND EXPRESSLY MEANT TINSTALL IT.
85C5B796-EDA5-4353-B26E-A5D181AD9CD0   TBEMAI.DLL, TBEMA0.DLL, TBEMA1.DLL - EMAIL_NOTIFIER_TOOLBAR, HTTP  //EMAILNOTIFIER.OURTOOLBAR.COM/ - A CONDUIT/EFFECTIVEBRAND, HTTP  //WWW.CONDUIT.COM/BENEFITS/DEFAULT.ASPX "FREE COMMUNITY" TOOLBAR. SOME CONDUIT TOOLBARS ARE REPUTED THAVE A CERTAIN ADWARE/TRACKWARE FUNCTIONALITY.
85D87E3F-8740-43F1-8611-3BFD9FE675CF   TBHASS.DLL, TBHAS0.DLL, TBHAS1.DLL - HASSIDOUT.ORG_TOOLBAR, HTTP  //HASSIDOUT.OURTOOLBAR.COM/ - A CONDUIT/EFFECTIVEBRAND, HTTP  //WWW.CONDUIT.COM/BENEFITS/DEFAULT.ASPX "FREE COMMUNITY" TOOLBAR - MODIFIES THE DEFAULT IE SEARCHHOOK. SOME CONDUIT TOOLBARS ARE REPUTED THAVE A CERTAIN ADWARE/TRACKWARE FUNCTIONALITY.
85DDD882-701E-401B-8A7D-D51227048214   IEWATCHER.DLL, IEWATCH.DLL, SVCMONI.DLL - IEWATCH/PERSONINSPECT, HTTP  //SECURITYRESPONSE.SYMANTEC.COM/AVCENTER/VENC/DATA/SPYWARE.PERSONINSPECT.HTML SURVEILLANCE SOFTWARE
85FCBC52-FF46-462A-A5A7-05D8DE984068   TBSOFI.DLL, TBSOF0.DLL, TBSOF1.DLL - SOFIANEBAHRI_TOOLBAR, HTTP  //SOFIANEBAHRI.OURTOOLBAR.COM/ - A CONDUIT/EFFECTIVEBRAND, HTTP  //WWW.CONDUIT.COM/BENEFITS/DEFAULT.ASPX "FREE COMMUNITY" TOOLBAR - MODIFIES THE DEFAULT IE SEARCHHOOK. SOME CONDUIT TOOLBARS ARE REPUTED THAVE A CERTAIN ADWARE/TRACKWARE FUNCTIONALITY.
852AA4EA-68B0-487B-98E7-4F03898CB502   DVDINFOPRO_TOOLBAR.DLL - DVDINFOPRO, HTTP  //WWW.DVDINFOPRO.COM/ SEARCH TOOLBAR (NOTE    THIS ADVERT SUPPORTED TOOLBAR IS ONLY BUNDLED WITH THE FREE VERSION OF THE PROGRAM)
859ED4A7-EE29-426C-A3F8-938232E07185   ATLANT.DLL - ATLANT_TOOLBAR, HTTP  //WWW.ATLANT.WS/?SET=TOOLBAR - A SOFTOMATE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT - SOFTOMATE CUSTOMIZES TOOLBARS TCUSTOMERS NEEDS. THE DLL FILES FOR THEIR TOOLBARS CONTAIN SOME SPYWARE/ADWARE FUNCTIONALITY, ALTHOUGH NOT ALL OF THE TOOLBARS USE THIS. SOME OF THE TOOLBARS ARE FINE THAVE, SEVERY CASE IS DIFFERENT. YOUR CHOICE. 
85A04173-04BB-4BC2-A19B-8EF2C74FAE95   EBTOOLBAR.DLL - EBTOOLBAR, HTTP  //WWW.EBTOOLBAR.COM/ - A SOFTOMATE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT - SOFTOMATE CUSTOMIZES TOOLBARS TCUSTOMERS NEEDS. THE DLL FILES FOR THEIR TOOLBARS CONTAIN SOME SPYWARE/ADWARE FUNCTIONALITY, ALTHOUGH NOT ALL OF THE TOOLBARS USE THIS. SOME OF THE TOOLBARS ARE FINE THAVE, SEVERY CASE IS DIFFERENT. YOUR CHOICE. 
85D54D8C-452E-423E-A754-D32481741AB5   EQ2BAND.DLL - EQ2_ALLAKHAZAM_TOOLBAR, HTTP  //EQ2.ALLAKHAZAM.COM/DB/GUIDES.HTML?GUIDE=843 - ALSSEE HERE, HTTP  //WWW.SITEADVISOR.COM/SITES/ALLAKHAZAM.COM/DOWNLOADS/3926584/
