BF04EC21-B4D7-E397-C0E8-1F5F00D064D8   MS**.DLL - CoolWebSearch/HomeSearch, 
BF064477-8D27-74FA-140F-CDE147E66D23   D3**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF066C8D-411B-5E5E-EDB2-24E2EF323206   NET**.DLL - CoolWebSearch/HomeSearch, 
BF11B9E4-3B77-E5AF-86B2-02B125404061   IE**32.DLL - CoolWebSearch/HomeSearch, 
BF16EA73-9CEA-4C3E-B9D4-F4250B94446C   [random filename] - VirtuMonde/Vundo, 
BF182DBF-1283-4BD3-86EE-D3239228770C   QQZone.dll, QQZoneHelper.dll - Unidentified parasite of Chinese origin,  file located in the Program Files\Internet Explorer\Connection Wizard directory - should you have any information about this application,   [xs4] - if you actually have a copy of the file,  please attach it to your email for analysis.  Thanks!
BF1DF99D-6BD4-9618-1150-AB8EA227AC2B   APP**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF461BFA-61C9-0499-764F-BCDD7A00B876   CR**.DLL - CoolWebSearch/HomeSearch, 
BF521E33-CB86-A8D7-FA50-BFA99E74595C   ADD**32.DLL - CoolWebSearch/HomeSearch, 
BF5E408D-DCB9-A18D-AF6B-AF0DB4A3C5AC   WIN**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF696D27-7E68-2CD9-8E87-785201D029CB   D3**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF6A75DE-1232-5F7B-60A7-27D953750F34   D3**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF6B4D62-8D32-92D9-5406-BCE7C016CBE1   SYS**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF6CAF6E-44D6-FF55-6954-2A6A4605DE3B   NT**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF6D7F4B-1A0C-1011-7B93-10E06002B58F   MFC**32.DLL - CoolWebSearch/HomeSearch, 
BF72B011-6009-E285-2E9A-6D194A5172DC   WIN**32.DLL - CoolWebSearch/HomeSearch, 
BF755B85-EA69-4F58-9A59-D85F384A15FF   ******.dat (* = random char) - VirtuMonde adware variant, 
BF7866D6-BABA-DD76-E154-EDBCBB4EB3C3   API**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF789B90-EB9F-B92F-15B1-D535C22DAA3E   ADD**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF815E89-30E0-A55D-0D6F-817146C6169B   MFC**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF82252D-ABE1-E8BB-F0BF-178FB378D258   MFC**.DLL - CoolWebSearch/HomeSearch, 
BF8303BF-FE09-FBCD-6FA8-9E8D3C07DA44   D3**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF830E17-E7FD-0E58-280B-BF8D1B2C0D75   WIN**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF84821B-7B5C-7683-8B83-A2001C69A972   ADD**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF8AEA4B-E205-8CDF-7D53-3F49B6DF5CC1   API**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF8BB1DF-5D06-CF3D-61A2-C4572371188D   CR**32.DLL - CoolWebSearch/HomeSearch, 
BF8BCD8D-1706-A506-7F03-F958EDA8BA2F   CR**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF8C66F5-1A2F-25AD-C2FA-D06309B1DD27   SYS**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF8D4EE0-564B-3B49-FA37-796261650844   APP**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF8E8A3B-3B07-92AF-7CDE-94E44B1AB52C   JAVA**32.dll (* = random char) - CoolWebSearch/HomeSearch, 
BF8F3AB9-E114-FBA9-9879-C2F10070AD06   IP**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF8FBF42-9571-D28C-767B-E97CE6225679   NET**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF951D96-668C-0E40-F035-5B9FB0461652   API**.DLL - CoolWebSearch/HomeSearch, 
BF97E97C-168D-6BD6-D534-BAAB52B0306D   API**32.DLL - CoolWebSearch/HomeSearch, 
BF9877E2-F1DE-CA20-A3B6-63B89CB79FA5   NET**32.DLL - CoolWebSearch/HomeSearch, 
BF9AAF26-9064-6C4F-091C-07C0FEDA8044   WIN**.DLL - CoolWebSearch/HomeSearch, 
BF9B86BB-0A64-B0AD-FD7B-9CCE5B7B4C01   d3**.dll (* = random char) - CoolWebSearch/HomeSearch, 
BF9C2D3D-5B9B-04D7-E10A-0852D229EF01   WIN**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF9D9A9A-5A21-5961-6262-5C5E91D2B595   WIN**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF9F10FA-709E-CF57-683F-AE59338D3FFA   MFC**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF9F255F-D068-C7B2-58A0-82E15F49B6F5   API**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BF9FD1DE-F8B7-0B90-C8C8-E057F3E59535   NET**.DLL - CoolWebSearch/HomeSearch, 
BFA3C459-EC3A-4271-4DB5-4286E3C5AD00   MS**.DLL - CoolWebSearch/HomeSearch, 
BFA3E662-C8F6-5C22-9ADF-B7966E2436A3   CR**32.DLL - CoolWebSearch/HomeSearch, 
BFA461C9-0499-764F-BCDD-A00B87618D30   SYS**.DLL - CoolWebSearch/HomeSearch, 
BFA5124E-7DA8-0AB6-26D2-399EE122E311   NET**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BFA5F3E7-F606-C1FE-B0FB-3707E343B936   MFC**.DLL - CoolWebSearch/HomeSearch, 
BFA7FB09-7AC3-95E9-2881-B1966F738029   WIN**32.DLL - CoolWebSearch/HomeSearch, 
BFA9AA21-50C4-1BA5-0F30-DCA239B508A3   NET**.DLL - CoolWebSearch/HomeSearch, 
BFAA3D4F-3121-6765-035E-63AE94A824A9   MS**32.DLL - CoolWebSearch/HomeSearch, 
BFAB13DD-FA3F-8F46-9854-AD246BEE716F   SDK**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BFB0102C-C699-7A0C-6B1A-FC5C546EAEE5   ATL**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BFB065A2-4F3C-61BB-4A5B-FA6D452D3EAC   ATL**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BFB28430-59F9-E148-CE91-EFEF55BB49E2   NET**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BFB4EB30-513C-AF6C-DEDB-9970A1BFD3CD   MFC**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BFB5D2CE-194B-C74E-63C1-C2F668F52093   MS**.DLL - CoolWebSearch/HomeSearch, 
BFB9A736-61A2-5418-9571-DB34939C175C   API**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BFBD6C8A-197E-7353-856C-144733A3E7C2   IP**32.DLL - CoolWebSearch/HomeSearch, 
BFBEE69C-9405-CA32-626D-F9CB61DEDFEE   MFC**32.DLL - CoolWebSearch/HomeSearch, 
BFBF69BA-7562-15E2-678B-81C7CDB0FBE4   ADD**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BFBF7402-6F56-197C-30EF-A2D7ABD52E16   NT**.DLL - CoolWebSearch/HomeSearch, 
BFBFA424-9910-08B0-2FBF-CC5180D847C2   SYS**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BFBFF9AA-22B3-FF5F-0EE0-C9538197D788   JAVA**32.dll (* = random char) - CoolWebSearch/HomeSearch, 
BFC37431-DFCB-61A3-0285-957EFA484789   D3**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BFC4005B-261E-C233-3DB0-EF03A3D1B759   IE**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BFC5CE8D-591D-2D83-B505-AE97D6B9C0DC   IE**.DLL - CoolWebSearch/HomeSearch, 
BFC8672C-EF61-E4EF-175D-788C0572B33E   NET**32.DLL - CoolWebSearch/HomeSearch, 
BFC8E15D-A9D9-C737-3BFC-6E181D103960   APP**.DLL - CoolWebSearch/HomeSearch, 
BFC94006-2B7D-0A8B-4FAA-119B6D26EE5C   NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BFCAB9C2-C5E8-7E2C-E8BE-E21E905E5718   SDK**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BFCC120F-4F3A-3A0B-9B4E-FB277CCFD06A   IE**32.DLL - CoolWebSearch/HomeSearch, 
BFCC5487-4B10-FC8D-DEFC-18A15DD56877   IE**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BFCE86CD-118E-CFF9-B9D9-CAC992FA0CE7   WIN**.DLL - CoolWebSearch/HomeSearch, 
BFD102D8-EE94-AFF4-38E7-CAEDD0208A5D   CR**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BFD1B764-7DD8-E992-CE2D-EAEBC173BD67   NT**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BFD25AD1-7D6F-EC13-C8DF-3A51830DD9D7   NT**32.DLL - CoolWebSearch/HomeSearch, 
BFD31A50-347C-461D-D47A-686D4852C0B1   D3**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BFD60278-6A2B-3485-AA7A-3E735AEC07AB   NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BFD83CA2-CBB3-0220-5E39-3D03516A6741   NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BFD9FA3A-C0CE-30AE-2B7C-0F987054EF24   NET**.DLL - CoolWebSearch/HomeSearch, 
BFEDCA47-067A-A991-0E41-D9B6EAD4EFEC   D3**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BFEF1F9F-402B-04C7-B7F5-C6B10121E19D   IE**.DLL - CoolWebSearch/HomeSearch, 
BFF9AA12-B35F-5FD0-E04C-538197D788AE   NT**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
BFFA51A0-0B64-4aa3-AAC4-325F9338D0BE   ********.dll (* = random char) - "Adware-Click", 
BFFB14CE-5DCB-C371-8960-2404CA0FF16A   NT**32.DLL - CoolWebSearch/HomeSearch, 
BFBE0DA2-48E9-A396-3A21-50CC092AA4C1 D3**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP://CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF1CED2C-4B3F-4079-A330-864EDA5A4CFF IESPLUGIN.DLL - PROTECTIONBAR, ROGUE "SECURITY SOFTWARE", RELATED TO THE NOTORIOUS PS_GUARD/SPYWAREQUAKE/WINANTIVIRUS, HTTP://SUNBELTBLOG.BLOGSPOT.COM/2006/03/SEEN-IN-WILD-SPYWARE-QUAKE_25.HTML FOISTWARE AND DETECTED AS A VARIANT OF THE FAKEALE AKA ZLOB OR PUPER TROJAN - SEE HERE, HTTP://WWW.SOPHOS.COM/SECURITY/ANALYSES/TROJZLOBNSJ.HTML
BF4FC0C7-4387-4D18-AD86-DF33DDDE33C7 WEBSETUP.CAB IDENTIFIED BY SPYWAREBLASTER 
BFC9677B-8006-4336-9D49-2C797AEFCB9E EGDACCESS_1058_XP.CAB DIALER - MORE HERE 
BF69DF00-4734-477F-8257-27CD04F88779  SCAN AND PROTECT YOUR PC "SPYWARE REMOVER" OF DUBIOUS REPUTE - SEE THE AUTHORITATIVE SPYWAREWARRIOR_LIST_OF_ROGUE/SUSPECT_ANTI-SPYWARE_PRODUCTS_&_WEB_SITES NOTE: THE FILE IS FOUND UNDER C:\PROGRAM FILES\UNSPYPC FOLDER.
BF69DF00-2734-477F-8257-27CD04F88779  START SPYWARE REMOVER "SPYWARE REMOVER" OF DUBIOUS REPUTE - SEE THE AUTHORITATIVE SPYWAREWARRIOR_LIST_OF_ROGUE/SUSPECT_ANTI-SPYWARE_PRODUCTS_&_WEB_SITES NOTE: THE FILE IS FOUND UNDER C:\PROGRAM FILES\KILLANDCLEAN
BFA03761-5565-41B3-93D9-82B354C0A8EC  [[SEE NOTE]] ADDED BY ACTIVSHOP_ADWARE NOTE: NAME VARIES BETWEEN MANY NAMES. IT IS A DIRECT-MARKETING ADWARE APPLICATION THAT DISPLAYS ADS IN A SIDEBAR. IT HIJACKS THE SEARCH TERMS AND DOWNLOAD THE RELATED ADS FROM ITS SERVERS AT ACTIVSHOPPER.COM. IT ALSO INSTALLS A NEWS BAR LAUNCHER, WHICH WAS NOT WORKING PROPERLY AT THE TIME OF WRITING THIS DOCUMENT. A BROWSER HELPER OBJECT IS INSTALLED IN INTERNET EXPLORER. USUALLY IT WILL INCLUDE THE WORD "SHOPPER". THE ENTRY REFERS TO SHDOCVW.DLL.
BF8A3163-C0C3-4477-44D7-BFC3441F4A5F: JAVA**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP://CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFFA51A0-0B64-4AA3-AAC4-325F9338D0BE: ********.DLL (* = RANDOM CHAR) - "ADWARE-CLICK", HTTP://VIL.NAI.COM/VIL/CONTENT/PRINT135935.HTM AKA AZESEARCH.MWSEARCH, HTTP://RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=15299 PARASITE VARIANT - SEARCH HIJACKER REDIRECTING TO MORWILLSEARCH.COM
bf279130-3f58-4e26-8043-cd5688a4d4c9  Known Malware Component. http://www.google.com/search?hl=en&q=bf279130-3f58-4e26-8043-cd5688a4d4c9&btnG=Google+Search
bf4b360b-1717-4bea-8c5b-6936de82e8f6  Known Malware Component. http://www.google.com/search?hl=en&q=bf4b360b-1717-4bea-8c5b-6936de82e8f6&btnG=Google+Search
BFAE1995-4CAC-40D0-B029-42CEC449E838  Known Malware Component. http://www.google.com/search?hl=en&q=BFAE1995-4CAC-40D0-B029-42CEC449E838&btnG=Google+Search
bfbae8da-9920-4166-a5a4-ebd03f59abf5  Known Malware Component. http://www.google.com/search?hl=en&q=bfbae8da-9920-4166-a5a4-ebd03f59abf5&btnG=Google+Search
BFB5F154-9212-46F3-B547-AC6106030A54   WIZARD.DLL - SEARCHWIZARD, A STEALTH INSTALLED SOFTOMATE, HTTP://WWW.F-SECURE.COM/SW-DESC/SOFTOMATE_TOOLBAR.SHTML TOOLBAR VARIANT - DETECTED BY KASPERSKY, HTTP://WWW.KASPERSKY.COM/ ANTIVIRUS AS ADWARE.WIN32.SOFTOMATE.AH
BFB5F154-9212-46F3-B547-AC6106030A54   WIN_ST~1.DLL, WIN_STREAM_PLUGIN.DLL - WINSTREAM.COM PLUGIN TOOLBAR - A SOFTOMATE, HTTP://WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT .
BF812A36-0805-4B6F-8B45-0F83B547F300   [RANDOM FILENAME] - CONHOOK, HTTP://RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP://WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP://WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
BFA1273D-F878-4B6D-911D-32731F1FE6AE   [RANDOM FILENAME] - CONHOOK, HTTP://RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP://WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP://WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
BFBA1D3E-30F9-4965-922D-72D67616691D   [RANDOM FILENAME] - CONHOOK, HTTP://RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP://WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP://WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
BFE16606-AC7A-40CD-96A6-F786190148B8   [RANDOM FILENAME] - CONHOOK, HTTP://RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP://WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP://WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
BFEDE0E4-93B8-4E48-918B-0026C10AA7E4   SFR_TOOLBAR_F6.DLL, SFR_TO~1.DLL - TEXTOWEB, HTTP://WWW.TEXTOWEB.COM/ TOOLBAR - SEND SMS VIA INTERNET.  A SOFTOMATE, HTTP://WWW.F-SECURE.COM/SW-DESC/SOFTOMATE_TOOLBAR.SHTML TOOLBAR VARIANT -  SOFTOMATE CUSTOMIZES TOOLBARS TO CUSTOMERS NEEDS. THE DLL FILES FOR THEIR TOOLBARS CONTAIN SOME SPYWARE/ADWARE FUNCTIONALITY, ALTHOUGH NOT ALL OF THE TOOLBARS USE THIS. 
BF04EC21-B4D7-E397-C0E8-1F5F00D064D8   MS**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF064477-8D27-74FA-140F-CDE147E66D23   D3**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF066C8D-411B-5E5E-EDB2-24E2EF323206   NET**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF11B9E4-3B77-E5AF-86B2-02B125404061   IE**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF16EA73-9CEA-4C3E-B9D4-F4250B94446C   [RANDOM FILENAME] - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE COMPONENT
BF182DBF-1283-4BD3-86EE-D3239228770C   QQZONE.DLL, QQZONEHELPER.DLL - UNIDENTIFIED PARASITE OF CHINESE ORIGIN,  FILE LOCATED IN THE PROGRAM FILES\INTERNET EXPLORER\CONNECTION WIZARD DIRECTORY - SHOULD YOU HAVE ANY INFORMATION ABOUT THIS APPLICATION,   [XS4] - IF YOU ACTUALLY HAVE A COPY OF THE FILE,  PLEASE ATTACH IT TO YOUR EMAIL FOR ANALYSIS.  THANKS!
BF1DF99D-6BD4-9618-1150-AB8EA227AC2B   APP**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF2C383D-235F-4439-9332-884E119A00FD   [RANDOM FILENAME] - CONHOOK, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP  //WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
BF461BFA-61C9-0499-764F-BCDD7A00B876   CR**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF468356-BB7E-42D7-9F15-4F3B9BCFCED2   HOSTSRV.DLL - PASSWORD STEALER,  DETECTED BY KASPERSKY, HTTP  //WWW.KASPERSKY.COM/ ANTIVIRUS AS TROJAN-SPY.WIN32.GOLDUN.MN
BF521E33-CB86-A8D7-FA50-BFA99E74595C   ADD**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF5E408D-DCB9-A18D-AF6B-AF0DB4A3C5AC   WIN**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF6067BE-ADFC-494B-AF71-A64BE1B1946D   [RANDOM FILENAME] - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE COMPONENT
BF696D27-7E68-2CD9-8E87-785201D029CB   D3**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF6A75DE-1232-5F7B-60A7-27D953750F34   D3**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF6B4D62-8D32-92D9-5406-BCE7C016CBE1   SYS**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF6CAF6E-44D6-FF55-6954-2A6A4605DE3B   NT**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF6D7F4B-1A0C-1011-7B93-10E06002B58F   MFC**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF72B011-6009-E285-2E9A-6D194A5172DC   WIN**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF755B85-EA69-4F58-9A59-D85F384A15FF   ******.DAT (* = RANDOM CHAR) - VIRTUMONDE ADWARE VARIANT, HTTP  //SECURITYRESPONSE.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.VIRTUMONDE.HTML
BF7866D6-BABA-DD76-E154-EDBCBB4EB3C3   API**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF789B90-EB9F-B92F-15B1-D535C22DAA3E   ADD**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF7B6011-58A9-4124-A69B-12933D8286E2   [RANDOM FILENAME] - CONHOOK, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP  //WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
BF812A36-0805-4B6F-8B45-0F83B547F300   [RANDOM FILENAME] - CONHOOK, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP  //WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
BF815E89-30E0-A55D-0D6F-817146C6169B   MFC**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF82252D-ABE1-E8BB-F0BF-178FB378D258   MFC**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF8303BF-FE09-FBCD-6FA8-9E8D3C07DA44   D3**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF830E17-E7FD-0E58-280B-BF8D1B2C0D75   WIN**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF84821B-7B5C-7683-8B83-A2001C69A972   ADD**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF8A3163-C0C3-4477-44D7-BFC3441F4A5F   JAVA**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF8AEA4B-E205-8CDF-7D53-3F49B6DF5CC1   API**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF8BB1DF-5D06-CF3D-61A2-C4572371188D   CR**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF8BCD8D-1706-A506-7F03-F958EDA8BA2F   CR**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF8C66F5-1A2F-25AD-C2FA-D06309B1DD27   SYS**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF8D4EE0-564B-3B49-FA37-796261650844   APP**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF8E8A3B-3B07-92AF-7CDE-94E44B1AB52C   JAVA**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF8F3AB9-E114-FBA9-9879-C2F10070AD06   IP**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF8FBF42-9571-D28C-767B-E97CE6225679   NET**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF951D96-668C-0E40-F035-5B9FB0461652   API**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF97E97C-168D-6BD6-D534-BAAB52B0306D   API**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF9877E2-F1DE-CA20-A3B6-63B89CB79FA5   NET**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF9A9DB3-FEDB-4507-BFCE-896FB9AB4116   [RANDOM FILENAME] - VIRTUMONDE/VUNDO, HTTP  //WWW.BLEEPINGCOMPUTER.COM/FORUMS/TOPIC18610.HTML#ENTRY110599 ADWARE VARIANT
BF9AAF26-9064-6C4F-091C-07C0FEDA8044   WIN**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF9B86BB-0A64-B0AD-FD7B-9CCE5B7B4C01   D3**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF9C2D3D-5B9B-04D7-E10A-0852D229EF01   WIN**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF9D9A9A-5A21-5961-6262-5C5E91D2B595   WIN**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF9F10FA-709E-CF57-683F-AE59338D3FFA   MFC**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF9F255F-D068-C7B2-58A0-82E15F49B6F5   API**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF9FD1DE-F8B7-0B90-C8C8-E057F3E59535   NET**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFA1273D-F878-4B6D-911D-32731F1FE6AE   [RANDOM FILENAME] - CONHOOK, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP  //WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
BFA3C459-EC3A-4271-4DB5-4286E3C5AD00   MS**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFA3E662-C8F6-5C22-9ADF-B7966E2436A3   CR**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFA461C9-0499-764F-BCDD-A00B87618D30   SYS**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFA5124E-7DA8-0AB6-26D2-399EE122E311   NET**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFA5F3E7-F606-C1FE-B0FB-3707E343B936   MFC**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFA7FB09-7AC3-95E9-2881-B1966F738029   WIN**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFA9AA21-50C4-1BA5-0F30-DCA239B508A3   NET**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFAA3D4F-3121-6765-035E-63AE94A824A9   MS**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFAB13DD-FA3F-8F46-9854-AD246BEE716F   SDK**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFB0102C-C699-7A0C-6B1A-FC5C546EAEE5   ATL**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFB065A2-4F3C-61BB-4A5B-FA6D452D3EAC   ATL**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFB28430-59F9-E148-CE91-EFEF55BB49E2   NET**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFB4EB30-513C-AF6C-DEDB-9970A1BFD3CD   MFC**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFB5D2CE-194B-C74E-63C1-C2F668F52093   MS**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFB9A736-61A2-5418-9571-DB34939C175C   API**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFBA1D3E-30F9-4965-922D-72D67616691D   [RANDOM FILENAME] - CONHOOK, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP  //WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
BFBD6C8A-197E-7353-856C-144733A3E7C2   IP**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFBE0DA2-48E9-A396-3A21-50CC092AA4C1   D3**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFBEE69C-9405-CA32-626D-F9CB61DEDFEE   MFC**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFBF69BA-7562-15E2-678B-81C7CDB0FBE4   ADD**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFBF7402-6F56-197C-30EF-A2D7ABD52E16   NT**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFBFA424-9910-08B0-2FBF-CC5180D847C2   SYS**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFBFF9AA-22B3-FF5F-0EE0-C9538197D788   JAVA**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFC37431-DFCB-61A3-0285-957EFA484789   D3**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFC4005B-261E-C233-3DB0-EF03A3D1B759   IE**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFC5CE8D-591D-2D83-B505-AE97D6B9C0DC   IE**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFC8672C-EF61-E4EF-175D-788C0572B33E   NET**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFC8E15D-A9D9-C737-3BFC-6E181D103960   APP**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFC94006-2B7D-0A8B-4FAA-119B6D26EE5C   NT**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFCAB9C2-C5E8-7E2C-E8BE-E21E905E5718   SDK**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFCC120F-4F3A-3A0B-9B4E-FB277CCFD06A   IE**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFCC5487-4B10-FC8D-DEFC-18A15DD56877   IE**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFCE86CD-118E-CFF9-B9D9-CAC992FA0CE7   WIN**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFD102D8-EE94-AFF4-38E7-CAEDD0208A5D   CR**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFD1B764-7DD8-E992-CE2D-EAEBC173BD67   NT**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFD25AD1-7D6F-EC13-C8DF-3A51830DD9D7   NT**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFD31A50-347C-461D-D47A-686D4852C0B1   D3**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFD60278-6A2B-3485-AA7A-3E735AEC07AB   NT**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFD74C09-98E7-4498-A1F8-3500DC9D85DE   ****.DLL (* = RANDOM CHAR) - PARASITE OF CHINESE ORIGIN, DETECTED AS WIN-DOWNLOADER/BHO.FF.131072, HTTP  //KR.AHNLAB.COM/SECUINFOVIRUSVIEWENGNEW3.AHN?SEQ_NO=9424 - A RUANGO, HTTP  //WWW.PCTOOLS.COM/MRC/INFECTIONS/ID/ADWARE.RUANGO/ ADWARE COMPONENT
BFD83CA2-CBB3-0220-5E39-3D03516A6741   NT**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFD9FA3A-C0CE-30AE-2B7C-0F987054EF24   NET**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFE16606-AC7A-40CD-96A6-F786190148B8   [RANDOM FILENAME] - CONHOOK, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP  //WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
BFEDCA47-067A-A991-0E41-D9B6EAD4EFEC   D3**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFEF1F9F-402B-04C7-B7F5-C6B10121E19D   IE**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFF13A79-8F46-4E43-B290-4BA475E50F90   ABOBE FLASH PLAYER 9.DLL, ABOBEF~1.DLL, 0602323.DLL - PARASITE - A BESTTOOLBARS/SOFTOMATE, HTTP  //WWW.TRENDMICRO.COM/VINFO/GRAYWARE/VE_GRAYWAREDETAILS.ASP?GNAME=ADW_SOFTMATE.A ADWARE VARIANT OF CHINESE ORIGIN
BFF9AA12-B35F-5FD0-E04C-538197D788AE   NT**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BFFA51A0-0B64-4AA3-AAC4-325F9338D0BE   ********.DLL (* = RANDOM CHAR) - "ADWARE-CLICK", HTTP  //VIL.NAI.COM/VIL/CONTENT/PRINT135935.HTM AKA AZESEARCH.MWSEARCH, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=15299 PARASITE VARIANT - SEARCH HIJACKER REDIRECTING TO MORWILLSEARCH.COM
BFFB14CE-5DCB-C371-8960-2404CA0FF16A   NT**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
BF1CED2C-4B3F-4079-A330-864EDA5A4CFF   IESPLUGIN.DLL - PROTECTIONBAR, ROGUE "SECURITY SOFTWARE", RELATED TO THE NOTORIOUS PS_GUARD/SPYWAREQUAKE/WINANTIVIRUS, HTTP  //SUNBELTBLOG.BLOGSPOT.COM/2006/03/SEEN-IN-WILD-SPYWARE-QUAKE_25.HTML FOISTWARE AND DETECTED AS A VARIANT OF THE FAKEALE AKA ZLOB OR PUPER TROJAN - SEE HERE, HTTP  //WWW.SOPHOS.COM/SECURITY/ANALYSES/TROJZLOBNSJ.HTML
BFB5F154-9212-46F3-B547-AC6106030A54   WIZARD.DLL - SEARCHWIZARD, A STEALTH INSTALLED SOFTOMATE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT, DETECTED BY KASPERSKY ANTIVIRUS AS ADWARE.WIN32.SOFTOMATE.AH
BFB5F154-9212-46F3-B547-AC6106030A54   WIN_ST~1.DLL, WIN_STREAM_PLUGIN.DLL - WINSTREAM.COM PLUGIN TOOLBAR - A SOFTOMATE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT .
BFB5F154-9212-46F3-B547-AC6106030A54   DOSPOP.DLL - DETECTED BY A-SQUARED AS ADWARE.WIN32.DOSPOP_TOOLBAR, HTTP  //WWW.EMSISOFT.COM/EN/MALWARE/?ADWARE.WIN32.DOSPOP+TOOLBAR
BFB5F154-9212-46F3-B547-AC6106030A54   VISTATOOLBAR.DLL, VISTAT~1.DLL  - VISTA_TOOLBAR, HTTP  //DOWNLOADS.ZDNET.CO.UK/0,1000000376,39314613S,00.HTM?R=1 - A BESTTOOLBARS/SOFTOMATE, HTTP  //WWW.F-SECURE.COM/SW-DESC/ADWARE_W32_MOSTOFATE.SHTML ADWARE VARIANT
BFB5F154-9212-46F3-B547-AC6106030A54   UNTITLED.DLL - SOFTOMATE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT HAILING FROM TOOLBAR.BZ,  A SITE HOSTING MALWARE
BFB5F154-9212-46F3-B547-AC6106030A54   BUSCAGOO-NI.DLL - SOFTOMATE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT, A BROWSER HIJACKER REDIRECTING SEARCHES TO BUSCAGOO.COM
BFB5F154-9212-46F3-B547-AC6106030A54   NETDISASTER.DLL - NETDISASTER_TOOLBAR, HTTP  //WWW.NETDISASTER.COM/EN/TOOLBAR/INDEX.HTML - A SOFTOMATE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT,  ALSO DETECTED AS ADWARE.ACTIVE.SEARCH
BFB5F154-9212-46F3-B547-AC6106030A54   ESPEW.DLL - ESPEW_TOOLBAR, HTTP  //TOOLBAR.ESPEW.COM/ - A SOFTOMATE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT. HIJACKS THE START PAGE, SEARCH PAGE AND URL SEARCH HOOK
BF4FC0C7-4387-4D18-AD86-DF33DDDE33C7   WEBSETUP.CAB IDENTIFIED BY SPYWAREBLASTER 
BFC9677B-8006-4336-9D49-2C797AEFCB9E   EGDACCESS_1058_XP.CAB DIALER - MORE HERE 
BFEDE0E4-93B8-4E48-918B-0026C10AA7E4   SFR_TOOLBAR_F6.DLL, SFR_TO~1.DLL - TEXTOWEB, HTTP  //WWW.TEXTOWEB.COM/ TOOLBAR - SEND SMS VIA INTERNET - A SOFTOMATE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT -  SOFTOMATE CUSTOMIZES TOOLBARS TCUSTOMERS NEEDS. THE DLL FILES FOR THEIR TOOLBARS CONTAIN SOME SPYWARE/ADWARE FUNCTIONALITY, ALTHOUGH NOT ALL OF THE TOOLBARS USE THIS.  
BFF501DA-0ABA-41B1-A103-C37ED1670445   TBINCH.DLL, TBINC0.DLL, TBINC1.DLL - INCHIRIERI.ZOOMSHARE.COM TOOLBAR, HTTP  //INCHIRIERI.ZOOMSHARE.COM - A CONDUIT/EFFECTIVEBRAND, HTTP  //WWW.CONDUIT.COM/BENEFITS/DEFAULT.ASPX "FREE COMMUNITY" TOOLBAR - MODIFIES THE DEFAULT IE SEARCHHOOK. SOME CONDUIT TOOLBARS ARE REPUTED THAVE A CERTAIN ADWARE/TRACKWARE FUNCTIONALITY.
BFB5F154-9212-46F3-B547-AC6106030A54   HITS2U~1.DLL, HITS2UTOOLBAR.DLL - HITS2U_TOOLBAR, HTTP  //WWW.HITS2U.COM/TOOLBAR/ - A SOFTOMATE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT - SOFTOMATE CUSTOMIZES TOOLBARS TCUSTOMERS NEEDS. THE DLL FILES FOR THEIR TOOLBARS CONTAIN SOME SPYWARE/ADWARE FUNCTIONALITY, ALTHOUGH NOT ALL OF THE TOOLBARS USE THIS. SOME OF THE TOOLBARS ARE FINE THAVE, SEVERY CASE IS DIFFERENT. YOUR CHOICE. 
BFB5F154-9212-46F3-B547-AC6106030A54   FOUINEUX.DLL - FOUINEUX.COM_SEARCH_TOOLBAR, HTTP  //WWW.FOUINEUX.COM/OUTILS.PHP - A SOFTOMATE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT -  SOFTOMATE CUSTOMIZES TOOLBARS TCUSTOMERS NEEDS. THE DLL FILES FOR THEIR TOOLBARS CONTAIN SOME SPYWARE/ADWARE FUNCTIONALITY, ALTHOUGH NOT ALL OF THE TOOLBARS USE THIS.  
BFB5F154-9212-46F3-B547-AC6106030A54   SCORE3.DLL - SCORE3.FR_TOOLBAR, HTTP  //WWW.SCORE3.FR/A_PROPOS.SHTML - A SOFTOMATE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT -  SOFTOMATE CUSTOMIZES TOOLBARS TCUSTOMERS NEEDS. THE DLL FILES FOR THEIR TOOLBARS CONTAIN SOME SPYWARE/ADWARE FUNCTIONALITY, ALTHOUGH NOT ALL OF THE TOOLBARS USE THIS.  
BFB5F154-9212-46F3-B547-AC6106030A54   2007-03-03-HDBG.DLL, 2007-0~1.DLL  - HDBG_TOOLBAR, HTTP  //WWW.DATENMATRIX.DE/PROJEKTE/HDBG/TOOLBAR/ - A SOFTOMATE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT - SOFTOMATE CUSTOMIZES TOOLBARS TCUSTOMERS NEEDS. THE DLL FILES FOR THEIR TOOLBARS CONTAIN SOME SPYWARE/ADWARE FUNCTIONALITY, ALTHOUGH NOT ALL OF THE TOOLBARS USE THIS.
BFB5F154-9212-46F3-B547-AC6106030A54   WIN_FT~1.DLL, WIN_FTP_PLUGIN.DLL - A SOFTOMATE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT - - SOFTOMATE CUSTOMIZES TOOLBARS TCUSTOMERS NEEDS. THE DLL FILES FOR THEIR TOOLBARS CONTAIN SOME SPYWARE/ADWARE FUNCTIONALITY, ALTHOUGH NOT ALL OF THE TOOLBARS USE THIS. SOME OF THE TOOLBARS ARE FINE THAVE, SEVERY CASE IS DIFFERENT. YOUR CHOICE - SHOULD YOU HAVE ANY INFORMATION ABOUT THIS APPLICATION, SUCH AS ITS EXACT PURPOSE AND WHETHER YOU DID OR DID NOT INSTALL IT WITTINGLY, [XS4] - IF YOU ACTUALLY HAVE A COPY OF THE FILE, PLEASE ATTACH IT TYOUR EMAIL FOR ANALYSIS. THANKS!  
BFB5F154-9212-46F3-B547-AC6106030A54   SBR.BASIC.DLL - SBRFORUM.COM, HTTP  //WWW.SBRFORUM.COM/ BETTING TOOLBAR - A SOFTOMATE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT -  SOFTOMATE CUSTOMIZES TOOLBARS TCUSTOMERS NEEDS. THE DLL FILES FOR THEIR TOOLBARS CONTAIN SOME SPYWARE/ADWARE FUNCTIONALITY, ALTHOUGH NOT ALL OF THE TOOLBARS USE THIS.  
BFB5F154-9212-46F3-B547-AC6106030A54   STUDIO_CATALDI.DLL, STUDIO~*.DLL - STUDIO_CATALDI_TOOLBAR, HTTP  //WWW.STUDIOCATALDI.IT/TOOLBAR.ASP - A SOFTOMATE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT -  SOFTOMATE CUSTOMIZES TOOLBARS TCUSTOMERS NEEDS. THE DLL FILES FOR THEIR TOOLBARS CONTAIN SOME SPYWARE/ADWARE FUNCTIONALITY, ALTHOUGH NOT ALL OF THE TOOLBARS USE THIS.  
