2800DFD4-C702-3400-284A-30DCADD84758   API**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
280B02D9-7B7C-E344-563F-4821BA2C9279   API**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
280CA95C-CBA3-486E-5BCD-B3B542DA458A   API**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
280FF49E-F8F7-2FBA-5DB7-2855B4B63DD3   ADD**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
2810AAE0-EDAA-41F6-86F3-FF420FF9052F   [random filename] - VirtuMonde/Vundo, 
2810FBA5-55EC-4BEE-8263-0E2FA5883768   isaddon.dll - ProtectionBar, rogue "security software", related to the notorious PS_Guard/SpywareQuake/WinAntivirus, 
2815DA3C-D289-035A-9DB6-347CF0FD05E7   API**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
2816A669-5396-432D-C6A2-978A8E8A9E63   MS**.DLL - CoolWebSearch/HomeSearch, 
2818B797-4E38-0CF8-5455-D4914850AA30   MFC**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
2818C44B-BB2A-1D3D-B10F-7519A7E3CBD8   ATL**32.DLL - CoolWebSearch/HomeSearch, 
281A7715-F545-65E2-7FF1-02AE0DA5911A   WIN**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
281B058B-DF96-C43C-3E72-CBAA47BCF041   D3**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
281B123F-4C98-C682-AA2C-5C22B63F01EA   NET**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
2820133F-6D1C-8230-4635-3EC22B4F8C38   NET**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
282032FC-C6CA-9E36-F009-345A15203683   JAVA**.DLL - CoolWebSearch/HomeSearch, 
28223167-A6CC-2F8F-758F-1F424FBB380E   MFC**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
28227E37-9A96-F49C-7290-6ECDFEE5E35B   ATL**32.DLL - CoolWebSearch/HomeSearch, 
2822C00C-CF0F-0B42-899D-E9566314265A   CR**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
2822FEC2-66CA-FBCB-D508-9367B7AA509F   ATL**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
2824CF77-AF01-AB9B-0E03-B55D8EAF18D4   D3**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
2824D883-15E7-A16B-3520-77E6CB566CAE   D3**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
282585B6-48E6-1CBB-BD75-367AFF3E6520   JAVA**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
28258802-DCF4-0A65-50CC-A5E290AB5388   SYS**.DLL - CoolWebSearch/HomeSearch, 
2825AEB2-BECC-119B-D482-F8F24CE5B9FA   IE**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
2825EDEE-36A3-D552-74FA-B7E58C7D53BF   MS**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
28263ADC-061F-622A-0FBE-4277E57E29DA   NET**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
283715D8-4B32-91ED-58C5-CDF8C4F6A0D0   SDK**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
28386422-AEBB-2D60-86DF-C802CE656542   JAVA**32.dll (* = random char) - CoolWebSearch/HomeSearch, 
283A3009-5EBC-9AF5-6BEE-171F61DF8F6D   MS**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
283AC120-8D27-BA38-11A3-539427563B6C   IE**32.DLL - CoolWebSearch/HomeSearch, 
283C5CE5-035E-3899-08E1-8A27E5DD4CDB   MFC**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
283C8D07-3D28-27CD-F6A1-A3A0CAC05587   D3**32.DLL - CoolWebSearch/HomeSearch, 
283E4B0A-1235-F6A4-486A-512E1455CFF5   CR**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
283F0E3A-2D7C-3197-4B59-02A3652B0497   IE**.DLL - CoolWebSearch/HomeSearch, 
2843DBFB-EF1A-9CD0-8BD8-6C594E3D26F7   D3**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
2843EAF5-2D17-7153-2C7F-01C2A8D2B7F0   MS**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
284475B9-A34F-FFA4-13BD-47555649B85F   MFC**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
28452FED-59AF-24C7-FF8F-36536977B938   NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
28454FAA-A15D-30CD-A952-4CEB53685373   MFC**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
2846032F-8EA0-4EFF-E13E-006290501796   NT**32.DLL - CoolWebSearch/HomeSearch, 
2847602D-6D1B-DCC7-7CF2-9CF30941EDB1   IP**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
2847ACFD-52D5-A1D3-7913-EB6EB86BA80E   MS**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
2847C50A-C8BB-A6A4-AF20-AEF6F512EDD8   MS**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
284909FB-3140-3EAB-13D7-77F0116C7F19   MFC**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
284B05B5-CD29-FEFC-B11A-DF8FBF7713DB   NT**.DLL - CoolWebSearch/HomeSearch, 
2850CFC5-2BAD-884B-1956-B7BC0BF9D853   NET**.DLL - CoolWebSearch/HomeSearch, 
28510C06-A16B-091E-FA46-4DB58B0A0432   ADD**.DLL - CoolWebSearch/HomeSearch, 
28516BEF-72E0-D9DB-4481-0030B4824832   ADD**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
2852372B-F3FD-19AE-7E8D-744E430FD1BE   SYS**.DLL - CoolWebSearch/HomeSearch, 
2852A986-DABA-3DEB-696E-AA3A2FA5E362   D3**32.DLL - CoolWebSearch/HomeSearch, 
28535904-81D7-97E6-851A-D847E4FBDB4C   NET**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
28537B1D-6D92-A196-D234-4D477E5963FF   IE**32.DLL - CoolWebSearch/HomeSearch, 
2856021F-4568-454E-8F4D-501BA83D80AA   [random filename] - ConHook, 
28575C2F-DF5E-A69A-D07F-CC5CE897D506   MFC**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
285B5CCD-C3F0-4EB6-9632-7D0A3C3AF824   hsrb.dll - Begin2Search, 
285D732C-1D4D-CDA2-C38F-3F1B9E0B70A9   NT**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
285D78D4-2369-CA17-092C-1D1BC0E64D78   JAVA**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
285E69CA-D55B-E593-6885-78A26541BD6F   JAVA**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
285F25A1-755C-4228-4D84-C8BE08CBD78A   D3**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
2869D6EE-2965-88DB-AB48-5D0895406516   API**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
286B2AD0-92FB-11D2-10FE-2602C19AF756   D3**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
286BFA23-394E-05DD-652B-2079D7A94D1B   CR**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
286C7425-B4D5-4CBC-433C-F5FDF5E43537   ADD**.DLL - CoolWebSearch/HomeSearch, 
286D2AA1-430A-856A-E962-15FBE7375841   APP**32.DLL - CoolWebSearch/HomeSearch, 
286D46CC-47AD-B067-BCF2-A81A4597B5C5   SYS**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
286E16A9-1DD4-D133-BD31-8F916F949C19   MFC**.DLL - CoolWebSearch/HomeSearch, 
286ECE71-3F17-089B-F6BD-0E16D255AE8A   JAVA**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
286F8207-1C69-16CC-3E99-C38C1E4D62AD   ADD**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
287067A0-9848-929E-B819-572CE5C53D03   IP**32.DLL - CoolWebSearch/HomeSearch, 
2872E36A-D072-3C6B-0DB0-E93738A6BD69   MS**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
287368C4-44ED-86D5-A425-EFBB34F6C8C6   WIN**32.DLL - CoolWebSearch/HomeSearch, 
28742345-13C2-102C-4537-3BD6EC5E7371   D3**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
28749852-4EA9-0662-286C-D43C4474D30C   IP**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
2874EF24-5B4A-FBCC-AAF3-41C5D6A1522B   NT**32.DLL - CoolWebSearch/HomeSearch, 
2874F5E4-4E22-02E1-3EB9-95C683EBB89D   SYS**.DLL - CoolWebSearch/HomeSearch, 
2875945A-2873-513B-0C3B-5EC2CDE216C4   SYS**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
28763C22-3AB6-8994-35B7-DD474FA22945   D3**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
2876779C-5E73-7B62-FEEB-18D1F3BA6422   IE**.DLL - CoolWebSearch/HomeSearch, 
2877E5F0-0EFB-EC78-DD9C-B85457CEBAAD   WIN**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
28788014-A45C-118B-A96E-A6516BFCAB86   JAVA**32.dll (* = random char) - CoolWebSearch/HomeSearch, 
28788C62-5F22-3093-C22A-23E8DF6C5DBE   SYS**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
2878B282-5123-FE7A-3B85-3F52E15DB39A   NT**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
287938FC-C69F-49E4-E2F9-36D6EEADCDF7   API**.DLL - CoolWebSearch/HomeSearch, 
28794D46-D75B-7CDB-21C3-65E69FD4B409   D3**32.DLL - CoolWebSearch/HomeSearch, 
287ADBBC-B2AC-CC15-F044-2EE2D9DB1230   SDK**32.DLL - CoolWebSearch/HomeSearch, 
28800320-C0A7-C66B-3741-B5A189601C43   NET**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
2881C9AB-5FEC-0F19-DD77-C5AF6BA4405C   ADD**.DLL - CoolWebSearch/HomeSearch, 
2882F733-B7B6-5329-F254-6F99D6D7DC9C   D3**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
28830D9D-C872-8711-312D-AEA897FED29D   ATL**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
288490AB-B9EF-D3C0-464C-36A4F2E0FE93   JAVA**.DLL - CoolWebSearch/HomeSearch, 
2884B2C4-86AB-EE70-9366-ABB58D3E8746   ATL**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
288E8765-988E-2CAD-E2AA-1387368F9CED   IP**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
288E8A17-EDA8-0E96-CAED-9600B30FF9A5   JAVA**.DLL - CoolWebSearch/HomeSearch, 
288EA1C7-DF7F-05BC-5DA4-EA006F485F17   SDK**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
288EC3DF-BC3B-1F6C-ABCE-5F01EA97E8CA   JAVA**32.dll - CoolWebSearch/HomeSearch, 
288F6A51-FC72-7396-AF5C-DA9571458BDB   IP**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
289821F2-49CF-5C3A-CDA7-55D127CAC4F6   IE**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
289AF6D4-6FA6-CEAF-D9B3-6766F8EB32EB   NT**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
289C0BAA-5064-83D0-AD02-827DD3AD1B77   ATL**.DLL  (* = random char) - CoolWebSearch/HomeSearch, 
28A44E47-1962-F448-78C6-1A2589E5B9B5   D3**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
28A5C3A0-8EDD-4FB2-1F3A-10A98544D413   ADD**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
28A5E86A-BEB3-2A6B-44A8-08239C13BA8E   NET**.DLL - CoolWebSearch/HomeSearch, 
28A68239-82F8-8D30-DC8C-F32FA43F4BF6   WIN**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
28A9AC69-9562-7657-FFA5-4E4541172B83   ADD**.DLL - CoolWebSearch/HomeSearch, 
28B05C82-9CE7-C8D2-615D-3AF18F6B2E5B   SYS**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
28B1E7AC-E33A-1961-AC89-848538F49E3B   CR**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
28BEC1BE-16B0-4A71-8B1F-F46EC2E41DFC   IP**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
28BF9BF3-E5DA-6FD8-56B2-0CE4BB053671   CR**.DLL - CoolWebSearch/HomeSearch, 
28CAEFF3-0F18-4036-B504-51D73BD81ABC   EliteToolBar version **.dll, ELITET~*.DLL  (* = digit) - EliteBar/SearchMiracle, 
28CAEFF3-0F18-4036-B504-51D73BD81C3A   Elitebar.dll, EliteBar version **.dll, ELITEB~*.DLL (* = digit), EliteToolBar version **.dll - EliteBar/SearchMiracle, 
28CD038B-E2B1-EF31-03CA-35D99E0C1479   IP**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
28DFFB3C-A6C2-481B-B8D7-AD205DECBA6E   [random file name] - Vundo.B, 
28E63F4A-2F98-35C0-D2B3-1C92AE9FD30F   WIN**.DLL - CoolWebSearch/HomeSearch, 
28F25943-7C2D-EF24-DA9B-627E7F4CE956   NET**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
28F322DD-9910-4EFE-1C53-52037148150A   ATL**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
28F3FF6F-EC48-6100-8A3C-CA02FBD81DF7   MFC**.DLL - CoolWebSearch/HomeSearch, 
28F4E056-9E3A-8C8C-E895-258990339DFD   IP**.DLL - CoolWebSearch/HomeSearch, 
28F65FCB-D130-11D8-BA48-8BE0C49AF370   popup_bl.dll, sys****.dll  (* = random digit) - CWSConyc, 
28FF0DAA-6EDD-259A-83C4-EADDF15D72AD   MFC**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
28FF18F3-57B1-2824-4D27-0CDEDF72B5DE   WIN**.DLL - CoolWebSearch/HomeSearch, 
283D371B-009D-48C4-AFA8-4BEB41F7A3B0 JAVA.DLL - W32/SILLYFDC-N, HTTP://WWW.SOPHOS.COM/SECURITY/ANALYSES/W32SILLYFDCN.HTML SPYWARE WORM, FILE LOCATED IN THE C:\WINDOWS\JAVA\CLASSES FOLDER - NOTE DO NOT CONFUSE WITH THE LEGITIMATE SUN, HTTP://JAVA.SUN.COM/JAVASE/ JAVA FILE OF THE SAME NAME, WHICH WILL ALWAYS BE LOCATED IN THE PROGRAM FILES\JAVA\JRE*.*_**\BIN DIRECTORY INSTEAD!
28A19C3E-91E4-4BCA-A623-BAF3C43C4F49 SI91E44B.DLL - LZIO.COM ADWARE, HTTP://WWW.SPYWAREGUIDE.COM/PRODUCT_SHOW.PHP?ID=853
28F4A32B-116F-48FD-B4CE-4273852BB730 GPHOTOSHOW_TOOLBAR.DLL - GPHOTOSHOW, HTTP://WWW.GPHOTOSHOW.COM/ TOOLBAR - THE TOOLBAR ITSELF IS AN ADWARE COMPONENT, BUT ONE CAN OPT OUT OF ITS INSTALL DURING SETUP - SEE HERE, HTTP://WWW.DOWNLOAD.COM/GPHOTOSHOW-FREE/3003-2407_4-10424339.HTML
288C5F13-7E52-4ADA-A32E-F5BF9D125F99 MINICLIPGAMELOADER.DLL ADDED BY TROJAN.DOWNLOADER. AS IDENTIFIED BY HJT HELPER. 
28383874-C021-41BE-85BD-2BBA0ED4CD20 DETECTED BY KASPERSKY 
28F00B0F-DC4E-11D3-ABEC-005004A44EEB HTTP://WWW.SPYWAREGUIDE.COM/PRODUCT_SHOW.PHP?ID=1205 
28798E4E-C408-4BA7-8D60-AD24BFF4211F HTTP://WWW.SPYWAREGUIDE.COM/PRODUCT_SHOW.PHP?ID=530 
280168BC-76BF-4CD0-B835-3D686EFA8DDC XUPITERTOOLBARUNINSTALLER.CAB ADWARE/HIJACKER, MORE HERE 
2817d417-6235-1262-07af-60ca3c769f0b  Known Malware Component. http://www.google.com/search?hl=en&q=2817d417-6235-1262-07af-60ca3c769f0b&btnG=Google+Search
281a061d-86c2-29a0-4871-4cef041a30b1  Known Malware Component. http://www.google.com/search?hl=en&q=281a061d-86c2-29a0-4871-4cef041a30b1&btnG=Google+Search
2833A27F-013E-091E-463C-15DA3C42D7C3  Known Malware Component. http://www.google.com/search?hl=en&q=2833A27F-013E-091E-463C-15DA3C42D7C3&btnG=Google+Search
283807B8-2C60-11D0-A31D-00AA00B92C03  Known Malware Component. http://www.google.com/search?hl=en&q=283807B8-2C60-11D0-A31D-00AA00B92C03&btnG=Google+Search
283d77e6-9233-66a7-2765-4e1c5923e622  Known Malware Component. http://www.google.com/search?hl=en&q=283d77e6-9233-66a7-2765-4e1c5923e622&btnG=Google+Search
285b4815-8434-3cb9-b8d0-745a638076f3  Known Malware Component. http://www.google.com/search?hl=en&q=285b4815-8434-3cb9-b8d0-745a638076f3&btnG=Google+Search
28754EBE-A02B-1975-121D-30A90996B687  Known Malware Component. http://www.google.com/search?hl=en&q=28754EBE-A02B-1975-121D-30A90996B687&btnG=Google+Search
28777F0A-E4E4-60C6-953D-2C3F3453CC40  Known Malware Component. http://www.google.com/search?hl=en&q=28777F0A-E4E4-60C6-953D-2C3F3453CC40&btnG=Google+Search
288BA815-D60A-5D0F-AE59-4BCE028D545F  Known Malware Component. http://www.google.com/search?hl=en&q=288BA815-D60A-5D0F-AE59-4BCE028D545F&btnG=Google+Search
288c5f13-7e52-4ada-a32e-f5bf9d125f98  Known Malware Component. http://www.google.com/search?hl=en&q=288c5f13-7e52-4ada-a32e-f5bf9d125f98&btnG=Google+Search
288F1523-FAC4-11CE-B16F-00AA0060D93D  Known Malware Component. http://www.google.com/search?hl=en&q=288F1523-FAC4-11CE-B16F-00AA0060D93D&btnG=Google+Search
2890C7EC-3491-6F81-6080-701B26B65A14  Known Malware Component. http://www.google.com/search?hl=en&q=2890C7EC-3491-6F81-6080-701B26B65A14&btnG=Google+Search
28b6a557-9584-3fa8-492e-78d57525c625  Known Malware Component. http://www.google.com/search?hl=en&q=28b6a557-9584-3fa8-492e-78d57525c625&btnG=Google+Search
28b7f406-4c6f-10a7-1f6e-0dee708f170c  Known Malware Component. http://www.google.com/search?hl=en&q=28b7f406-4c6f-10a7-1f6e-0dee708f170c&btnG=Google+Search
28ce38d0-2ba5-5d5f-14f4-357b66c22053  Known Malware Component. http://www.google.com/search?hl=en&q=28ce38d0-2ba5-5d5f-14f4-357b66c22053&btnG=Google+Search
28ceb4b2-17fd-409e-d111-66e332ccc79a  Known Malware Component. http://www.google.com/search?hl=en&q=28ceb4b2-17fd-409e-d111-66e332ccc79a&btnG=Google+Search
28F53E07-CF72-471A-9290-0BBA5248AA7E  Known Malware Component. http://www.google.com/search?hl=en&q=28F53E07-CF72-471A-9290-0BBA5248AA7E&btnG=Google+Search
280A7B65-8F00-438F-3E5A-1F039433FE60   MSN MESSENGER DSSDLL32.DLL TROJAN HORSE DOWNLOADER.AGENT 
287FF496-118D-4455-A33C-3E8C8BAF1477   [RANDOM FILENAME] - CONHOOK, HTTP://RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP://WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP://WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
28A0F341-2711-82C5-F8DF-032A36D42E96   QGFALZG.DLL - VARIANT OF THE DISABLEKEY.A, HTTP://WWW.PANDASOFTWARE.COM/VIRUS_INFO/ENCYCLOPEDIA/OVERVIEW.ASPX?LST=VIS&IDVIRUS=130894 AKA BUSKY, HTTP://WWW.SARC.COM/AVCENTER/VENC/DATA/TROJAN.BUSKY.HTML DOWNLOADER TROJAN
28CEA1DA-2199-4AEE-BA75-9032C8450B66   [RANDOM FILENAME] - CONHOOK, HTTP://RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP://WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP://WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
28F247EB-4758-4DBC-99C5-451D6955DD17   [RANDOM FILENAME] - CONHOOK, HTTP://RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP://WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP://WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
2800DFD4-C702-3400-284A-30DCADD84758   API**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
280B02D9-7B7C-E344-563F-4821BA2C9279   API**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
280CA95C-CBA3-486E-5BCD-B3B542DA458A   API**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
280FF49E-F8F7-2FBA-5DB7-2855B4B63DD3   ADD**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2810AAE0-EDAA-41F6-86F3-FF420FF9052F   [RANDOM FILENAME] - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE COMPONENT
2810FBA5-55EC-4BEE-8263-0E2FA5883768   ISADDON.DLL - PROTECTIONBAR, ROGUE "SECURITY SOFTWARE", RELATED TO THE NOTORIOUS PS_GUARD/SPYWAREQUAKE/WINANTIVIRUS, HTTP  //SUNBELTBLOG.BLOGSPOT.COM/2006/03/SEEN-IN-WILD-SPYWARE-QUAKE_25.HTML FOISTWARE AND DETECTED AS A VARIANT OF THE FAKEALE AKA ZLOB OR PUPER TROJAN - SEE HERE, HTTP  //WWW.SOPHOS.COM/SECURITY/ANALYSES/TROJZLOBNSJ.HTML
2815DA3C-D289-035A-9DB6-347CF0FD05E7   API**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2816A669-5396-432D-C6A2-978A8E8A9E63   MS**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2818B797-4E38-0CF8-5455-D4914850AA30   MFC**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2818C44B-BB2A-1D3D-B10F-7519A7E3CBD8   ATL**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
281A7715-F545-65E2-7FF1-02AE0DA5911A   WIN**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
281B058B-DF96-C43C-3E72-CBAA47BCF041   D3**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
281B123F-4C98-C682-AA2C-5C22B63F01EA   NET**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2820133F-6D1C-8230-4635-3EC22B4F8C38   NET**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
282032FC-C6CA-9E36-F009-345A15203683   JAVA**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28223167-A6CC-2F8F-758F-1F424FBB380E   MFC**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28227E37-9A96-F49C-7290-6ECDFEE5E35B   ATL**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2822C00C-CF0F-0B42-899D-E9566314265A   CR**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2822FEC2-66CA-FBCB-D508-9367B7AA509F   ATL**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2824CF77-AF01-AB9B-0E03-B55D8EAF18D4   D3**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2824D883-15E7-A16B-3520-77E6CB566CAE   D3**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
282585B6-48E6-1CBB-BD75-367AFF3E6520   JAVA**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28258802-DCF4-0A65-50CC-A5E290AB5388   SYS**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2825AEB2-BECC-119B-D482-F8F24CE5B9FA   IE**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2825EDEE-36A3-D552-74FA-B7E58C7D53BF   MS**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28263ADC-061F-622A-0FBE-4277E57E29DA   NET**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
283715D8-4B32-91ED-58C5-CDF8C4F6A0D0   SDK**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28386422-AEBB-2D60-86DF-C802CE656542   JAVA**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
283A3009-5EBC-9AF5-6BEE-171F61DF8F6D   MS**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
283AC120-8D27-BA38-11A3-539427563B6C   IE**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
283C5CE5-035E-3899-08E1-8A27E5DD4CDB   MFC**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
283C8D07-3D28-27CD-F6A1-A3A0CAC05587   D3**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
283E4B0A-1235-F6A4-486A-512E1455CFF5   CR**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
283F0E3A-2D7C-3197-4B59-02A3652B0497   IE**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2843DBFB-EF1A-9CD0-8BD8-6C594E3D26F7   D3**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2843EAF5-2D17-7153-2C7F-01C2A8D2B7F0   MS**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
284475B9-A34F-FFA4-13BD-47555649B85F   MFC**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28452FED-59AF-24C7-FF8F-36536977B938   NT**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28454FAA-A15D-30CD-A952-4CEB53685373   MFC**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2846032F-8EA0-4EFF-E13E-006290501796   NT**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2847602D-6D1B-DCC7-7CF2-9CF30941EDB1   IP**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2847ACFD-52D5-A1D3-7913-EB6EB86BA80E   MS**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2847C50A-C8BB-A6A4-AF20-AEF6F512EDD8   MS**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2848FA9D-9855-4EF1-A9A3-0028A277FE4A   MIOROSOFT OFFICE.DLL, MIOROS~1.DLL - PARASITE OF CHINESE ORIGIN - A SOFTOMATE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT HAILING FROM KUAISO.COM, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2006-072516-0526-99&TABID=1
284909FB-3140-3EAB-13D7-77F0116C7F19   MFC**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
284B05B5-CD29-FEFC-B11A-DF8FBF7713DB   NT**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2850CFC5-2BAD-884B-1956-B7BC0BF9D853   NET**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28510C06-A16B-091E-FA46-4DB58B0A0432   ADD**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28516BEF-72E0-D9DB-4481-0030B4824832   ADD**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2852372B-F3FD-19AE-7E8D-744E430FD1BE   SYS**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2852A986-DABA-3DEB-696E-AA3A2FA5E362   D3**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28535904-81D7-97E6-851A-D847E4FBDB4C   NET**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28537B1D-6D92-A196-D234-4D477E5963FF   IE**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2856021F-4568-454E-8F4D-501BA83D80AA   [RANDOM FILENAME] - CONHOOK, HTTP  //WWW.SOPHOS.COM/VIRUSINFO/ANALYSES/TROJCONHOOKN.HTML TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
28575C2F-DF5E-A69A-D07F-CC5CE897D506   MFC**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
285B5CCD-C3F0-4EB6-9632-7D0A3C3AF824   HSRB.DLL - BEGIN2SEARCH, HTTP  //SARC.COM/AVCENTER/VENC/DATA/ADWARE.BEGIN2SEARCH.HTML ADWARE VARIANT
285D732C-1D4D-CDA2-C38F-3F1B9E0B70A9   NT**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
285D78D4-2369-CA17-092C-1D1BC0E64D78   JAVA**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
285E69CA-D55B-E593-6885-78A26541BD6F   JAVA**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
285F25A1-755C-4228-4D84-C8BE08CBD78A   D3**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2869D6EE-2965-88DB-AB48-5D0895406516   API**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
286B2AD0-92FB-11D2-10FE-2602C19AF756   D3**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
286BFA23-394E-05DD-652B-2079D7A94D1B   CR**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
286C7425-B4D5-4CBC-433C-F5FDF5E43537   ADD**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
286D2AA1-430A-856A-E962-15FBE7375841   APP**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
286D46CC-47AD-B067-BCF2-A81A4597B5C5   SYS**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
286E16A9-1DD4-D133-BD31-8F916F949C19   MFC**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
286ECE71-3F17-089B-F6BD-0E16D255AE8A   JAVA**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
286F8207-1C69-16CC-3E99-C38C1E4D62AD   ADD**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
287067A0-9848-929E-B819-572CE5C53D03   IP**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2872E36A-D072-3C6B-0DB0-E93738A6BD69   MS**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
287368C4-44ED-86D5-A425-EFBB34F6C8C6   WIN**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28742345-13C2-102C-4537-3BD6EC5E7371   D3**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28749852-4EA9-0662-286C-D43C4474D30C   IP**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2874EF24-5B4A-FBCC-AAF3-41C5D6A1522B   NT**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2874F5E4-4E22-02E1-3EB9-95C683EBB89D   SYS**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2875945A-2873-513B-0C3B-5EC2CDE216C4   SYS**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28763C22-3AB6-8994-35B7-DD474FA22945   D3**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2876779C-5E73-7B62-FEEB-18D1F3BA6422   IE**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2877E5F0-0EFB-EC78-DD9C-B85457CEBAAD   WIN**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28788014-A45C-118B-A96E-A6516BFCAB86   JAVA**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28788C62-5F22-3093-C22A-23E8DF6C5DBE   SYS**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2878B282-5123-FE7A-3B85-3F52E15DB39A   NT**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
287938FC-C69F-49E4-E2F9-36D6EEADCDF7   API**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28794D46-D75B-7CDB-21C3-65E69FD4B409   D3**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
287ADBBC-B2AC-CC15-F044-2EE2D9DB1230   SDK**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
287FF496-118D-4455-A33C-3E8C8BAF1477   [RANDOM FILENAME] - CONHOOK, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP  //WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
28800320-C0A7-C66B-3741-B5A189601C43   NET**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2881C9AB-5FEC-0F19-DD77-C5AF6BA4405C   ADD**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2882F733-B7B6-5329-F254-6F99D6D7DC9C   D3**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28830D9D-C872-8711-312D-AEA897FED29D   ATL**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
288490AB-B9EF-D3C0-464C-36A4F2E0FE93   JAVA**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
2884B2C4-86AB-EE70-9366-ABB58D3E8746   ATL**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
288E8765-988E-2CAD-E2AA-1387368F9CED   IP**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
288E8A17-EDA8-0E96-CAED-9600B30FF9A5   JAVA**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
288EA1C7-DF7F-05BC-5DA4-EA006F485F17   SDK**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
288EC3DF-BC3B-1F6C-ABCE-5F01EA97E8CA   JAVA**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
288F6A51-FC72-7396-AF5C-DA9571458BDB   IP**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
289821F2-49CF-5C3A-CDA7-55D127CAC4F6   IE**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
289AF6D4-6FA6-CEAF-D9B3-6766F8EB32EB   NT**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
289C0BAA-5064-83D0-AD02-827DD3AD1B77   ATL**.DLL  (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28A0F341-2711-82C5-F8DF-032A36D42E96   QGFALZG.DLL - VARIANT OF THE DISABLEKEY.A, HTTP  //WWW.PANDASOFTWARE.COM/VIRUS_INFO/ENCYCLOPEDIA/OVERVIEW.ASPX?LST=VIS&IDVIRUS=130894 AKA BUSKY, HTTP  //WWW.SARC.COM/AVCENTER/VENC/DATA/TROJAN.BUSKY.HTML DOWNLOADER TROJAN
28A44E47-1962-F448-78C6-1A2589E5B9B5   D3**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28A5C3A0-8EDD-4FB2-1F3A-10A98544D413   ADD**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28A5E86A-BEB3-2A6B-44A8-08239C13BA8E   NET**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28A68239-82F8-8D30-DC8C-F32FA43F4BF6   WIN**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28A9AC69-9562-7657-FFA5-4E4541172B83   ADD**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28B05C82-9CE7-C8D2-615D-3AF18F6B2E5B   SYS**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28B1E7AC-E33A-1961-AC89-848538F49E3B   CR**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28BEC1BE-16B0-4A71-8B1F-F46EC2E41DFC   IP**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28BF9BF3-E5DA-6FD8-56B2-0CE4BB053671   CR**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28CAEFF3-0F18-4036-B504-51D73BD81ABC   ELITETOOLBAR VERSION **.DLL, ELITET~*.DLL  (* = DIGIT) - ELITEBAR/SEARCHMIRACLE, HTTP  //SECURITYRESPONSE.SYMANTEC.COM/AVCENTER/VENC/DATA/TROJAN.ELITEBAR.HTML ADWARE
28CAEFF3-0F18-4036-B504-51D73BD81C3A   ELITEBAR.DLL, ELITEBAR VERSION **.DLL, ELITEB~*.DLL (* = DIGIT), ELITETOOLBAR VERSION **.DLL - ELITEBAR/SEARCHMIRACLE, HTTP  //SECURITYRESPONSE.SYMANTEC.COM/AVCENTER/VENC/DATA/TROJAN.ELITEBAR.HTML ADWARE
28CD038B-E2B1-EF31-03CA-35D99E0C1479   IP**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28CEA1DA-2199-4AEE-BA75-9032C8450B66   [RANDOM FILENAME] - CONHOOK, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP  //WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
28DFFB3C-A6C2-481B-B8D7-AD205DECBA6E   [RANDOM FILE NAME] - VUNDO.B, HTTP  //WWW.BLEEPINGCOMPUTER.COM/FORUMS/HOW-TO-REMOVE-THE-TROJANVUNDOB-SEARCH42COM-MSEVENTS-TX18610-0.HTML#ENTRY110599 ADWARE VARIANT
28E63F4A-2F98-35C0-D2B3-1C92AE9FD30F   WIN**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28F247EB-4758-4DBC-99C5-451D6955DD17   [RANDOM FILENAME] - CONHOOK, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP  //WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
28F25943-7C2D-EF24-DA9B-627E7F4CE956   NET**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28F322DD-9910-4EFE-1C53-52037148150A   ATL**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28F3FF6F-EC48-6100-8A3C-CA02FBD81DF7   MFC**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28F4E056-9E3A-8C8C-E895-258990339DFD   IP**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28F65FCB-D130-11D8-BA48-8BE0C49AF370   POPUP_BL.DLL, SYS****.DLL  (* = RANDOM DIGIT) - CWSCONYC, HTTP  //SECURITYRESPONSE.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.CWSCONYC.HTML ADWARE - A COOLWEBSEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML  PARASITE VARIANT
28FF0DAA-6EDD-259A-83C4-EADDF15D72AD   MFC**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28FF18F3-57B1-2824-4D27-0CDEDF72B5DE   WIN**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
28A19C3E-91E4-4BCA-A623-BAF3C43C4F49   SI91E44B.DLL - LZIO.COM ADWARE, HTTP  //WWW.SPYWAREGUIDE.COM/PRODUCT_SHOW.PHP?ID=853
28F4A32B-116F-48FD-B4CE-4273852BB730   GPHOTOSHOW_TOOLBAR.DLL - GPHOTOSHOW, HTTP  //WWW.GPHOTOSHOW.COM/ TOOLBAR - THE TOOLBAR ITSELF IS AN ADWARE COMPONENT, BUT ONE CAN OPT OUT OF ITS INSTALL DURING SETUP - SEE HERE, HTTP  //WWW.DOWNLOAD.COM/GPHOTOSHOW-FREE/3003-2407_4-10424339.HTML
288C5F13-7E52-4ADA-A32E-F5BF9D125F99   MINICLIPGAMELOADER.DLL ADDED BY TROJAN.DOWNLOADER. AS IDENTIFIED BY HJT HELPER. 
28383874-C021-41BE-85BD-2BBA0ED4CD20   DETECTED BY KASPERSKY 
28F00B0F-DC4E-11D3-ABEC-005004A44EEB   HTTP://WWW.SPYWAREGUIDE.COM/PRODUCT_SHOW.PHP?ID=1205 
28798E4E-C408-4BA7-8D60-AD24BFF4211F   HTTP://WWW.SPYWAREGUIDE.COM/PRODUCT_SHOW.PHP?ID=530 
280168BC-76BF-4CD0-B835-3D686EFA8DDC   XUPITERTOOLBARUNINSTALLER.CAB ADWARE/HIJACKER, MORE HERE 
28C0F31E-37E5-4266-B91D-FB449DA1A47A   TBABSO.DLL, TBABS0.DLL, TBABS1.DLL - ABSOLUTEOASIS, HTTP  //ABSOLUTEOASISTOOLBAR.OURTOOLBAR.COM/ TOOLBAR - A CONDUIT/EFFECTIVEBRAND, HTTP  //WWW.CONDUIT.COM/BENEFITS/DEFAULT.ASPX "FREE COMMUNITY" TOOLBAR - MODIFIES THE DEFAULT IE SEARCHHOOK. SOME CONDUIT TOOLBARS ARE REPUTED THAVE A CERTAIN ADWARE/TRACKWARE FUNCTIONALITY.
28BE31EB-8A90-4DA0-8493-3BFE6F735BB6   MAGICALMOUNTAIN.DLL, MAGICA~1.DLL - MAGICAL_MOUNTAIN_TOOLBAR, HTTP  //WWW.MAGICALMOUNTAIN.NET/MMTOOLBAR/MMTOOLBAR.ASP - A SOFTOMATE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT -  SOFTOMATE CUSTOMIZES TOOLBARS TCUSTOMERS NEEDS. THE DLL FILES FOR THEIR TOOLBARS CONTAIN SOME SPYWARE/ADWARE FUNCTIONALITY, ALTHOUGH NOT ALL OF THE TOOLBARS USE THIS.  REMOVE UNLESS YOU TRUST IT.
