00000000-0000-0000-0000-000000000000   CnbarIE.dll, Cnbabe.dll - Commonname, 
00000000-0000-0000-0000-000000000000   msxmlpp.dll, msxslab.dll - CoolWebSearch, 
00000000-0000-0000-0000-000000000001   safesearch.dll - AutoSearch/SafeSearch, 
00000000-0000-0000-0000-000000000001   msxmlfilt.dll - CoolWebSearch, 
00000000-0000-0000-0000-000000000010   DH.dll - DeskWizz.com, 
00000000-0000-0000-0000-000000000221   CSIE.DLL, CTIE.DLL - ClearSearch, 
00000000-0000-0000-0000-000000000240   IE_ClrSch.dll - ClearSearch, 
00000000-0000-0000-0000-000000002230   Csbb.dll - ClearSearch, 
00000000-0000-0000-8835-3EFF76BF2657   kw3eef76.dll - LZIO.com adware, 
00000000-0000-0000-BFA1-D7EE6696B865   icdd7ee6.dll, icddefff.dll - LZIO.com adware, 
00000000-0000-41a3-98CF-00000000168B   wmcbaaca.dll, wm41a398.dll - LZIO.com adware, 
00000000-0000-476B-A2E7-BB1B6D46B554   Zango SiteFinder.dll - 180Solutions ZangoSearch, 
00000000-0000-47c5-A90F-2CDE8F7638DB   iedcb1f5.dll, iel2cde8.dll, ie758e49.dll, ielcaabe.dll - LZIO.com adware, 
00000000-0000-5DFC-5652-1705043F6518   audiosrv32.dll - "T4" BrowserAd adware
00000000-0000-7EBF-57C6-0BAE047EA682   autodisc32.dll - "T4" BrowserAd adware
00000000-0001-0345-2280-0287F27A63EE   Browserad.dll - "T4" BrowserAd adware
00000000-0001-1DBE-075A-39EC04BD88AF   Avicap32.dll - "T4" BrowserAd adware
00000000-0001-F7A6-1F38-0204019E355E   Asferror32.dll - "T4" BrowserAd adware
00000000-0002-53D4-0622-35EA0235778E   Ati2dvaa32.dll - "T4" BrowserAd adware
00000000-0008-D357-0798-004401965D4A   apphelp32.dll - "T4" BrowserAd adware
00000000-0009-1C42-7D61-6CFF050894A7   avisynthEx32.dll - "T4" BrowserAd adware
00000000-0015-BD9C-263A-493001BA0C6C   asycfilt32.dll - "T4" BrowserAd adware
00000000-002B-EFE6-6B08-560C01922D3B   Apcups32.dll - "T4" BrowserAd adware
00000000-0033-C1AC-0E62-0C1F0537605D   aviwrap32.dll - "T4" BrowserAd adware
00000000-008C-1E65-6AA6-3A270279F027   Ati2dvag32.dll - "T4" BrowserAd adware
00000000-00FA-71ED-4ABA-348801BAA0A9   Athprxy32.dll - "T4" BrowserAd adware
00000000-08C8-8E68-587B-61F804EE6164   avisynth32.dll - "T4" BrowserAd adware
00000000-0C95-B1F8-547A-405204D6961A   avifile32.dll - "T4" BrowserAd adware
00000000-10D6-4e5f-8F7F-29B32C1C0FC4   icddefff.dll - LZIO.com adware, 
00000000-1530-70F0-6420-4C2701B37263   asfsipc32.dll - "T4" BrowserAd adware
00000000-15D9-4736-AB29-131578A45F2B   wsrchc3.dll - WordsOnWeb, 
00000000-167B-41bc-95FF-86A07B14712C   he3bbcff.dll - LZIO.com adware, 
00000000-2565-4c5b-A455-A74C8A2247AB   wmcbaaca.dll - LZIO.com adware, 
00000000-387E-9D50-0079-1744044CB22A   authz32.dll - "T4" BrowserAd adware
00000000-59D4-4008-9058-080011001200   dlmax.dll - Transponder, 
00000000-5eb9-11d5-9d45-009027c14662   ehelper.dll, VX2.dll - VX2.Transponder, 
00000000-64C4-4a64-9767-895AB4921E41   ielcaabe.dll - LZIO.com adware, 
00000000-6CB0-410C-8C3D-8FA8D2011D0A   iMeshBHO.dll - iMesh, 
00000000-C1EC-0345-6EC2-4D0300000000   ZServ.dll - Transponder, 
00000000-D9E3-4BC6-A0BD-3D0CA4BE5271   Fhfmm.dll - AdBreak, 
00000000-DD60-0064-6EC2-6E0100000000   Pynix.dll - Transponder, 
00000000-F09C-02B4-6EC2-AD0300000000   BTGrab.dll - Transponder, 
00000001-C003-4A2F-9142-7CB1D78DE6C1   tct101.dll -  DyFuCA.Internet Optimizer, 
00000010-0000-0010-8000-000000000002   AnnotateBHO.dll - Annotate.net NetRadar, 
00000010-6F7D-442C-93E3-4A4827C2E4C8   nem219.dll, nem220.dll - DyFuCa/Internet_Optimizer, 
00000015-A527-34E7-25C2-03A4E313B2E9   winsrvs_1.dll - "Ramdud", 
0000001D-BA9B-11D2-BDF1-0090272A6D78   smbar.dll - Surfmonkey, 
00000026-8735-428D-B81F-DD098223B25F   speer.dll - Transponder, 
00000035-92F8-407F-98A5-7D8ADA59B6BB   Speer2.dll - Transponder, 
00000049-8F91-4D9C-9573-F016E7626484   ceres.dll - Transponder, 
0000005D-C175-4405-BAC5-1F3B2BAF67C6   kz515.dll - Transponder variant, 
00000062-2E5F-4AF7-986E-5B64E0951A96   imGiant.dll - Transponder, 
00000097-7C67-4BA6-8B42-05128941688A   Speeryox.dll - Transponder, 
000000DA-0786-4633-87C6-1AA7A4429EF1   emesx.dll - FavoriteMan, 
000000F1-34E3-4633-87C6-1AA7A44296DA   FOne.dll - FavoriteMan, 
00000185-B716-11D3-92F3-00D0B709A7D8   BHO.0.1.0.***.dll (* = digit), BHO010~*.DLL - SmartBrowser, 
00000185-C745-43D2-44F1-01A1C789C738   BHO.0.1.0.***.dll (* = digit), BHO010~*.DLL - SmartBrowser, 
00000250-0320-4DD4-BE4F-7566D2314352   VoiceIP.dll - Transponder, 
0000026A-8230-4DD4-BE4F-6889D1E74167   Tps108.dll - Transponder, 
00000273-8230-4DD4-BE4F-6889D1E74167   host.dll - Transponder, 
000004CC-E4FF-4F2C-BC30-DBEF0B983BC9   Ipinsigt.dll - IPInsight, 
00000580-C637-11D5-831C-00105AD6ACF0   Msview.dll - Transponder, 
000006B1-19B5-414A-849F-2A3C64AE6939   bi.dll - Transponder, 
00000762-3965-4A1A-98CE-3D4BF457D4C8   sidesearch.dll, sidesearch****.dll ( * = digit) - Lycos SideSearch, 
00000E45-6B72-46D2-9A2C-06C78C93C4FA   tmbho.dll - "The Mutual Rewards"   Browser plugin
00000EF1-0786-4633-87C6-1AA7A44296DA   ATPartners.dll, ATPART~*.dll, n3tpa1p.dll, Calsdr.dll, Gr0*.dll (* = digit), td1.dll, random file names - FavoriteMan, 
00000EF1-34E3-4633-87C6-1AA7A44296DA   F1.dll, mpz300.dll, ZZ.dll, ***.dll (random chars) - FavoriteMan, 
00000FF6-0043-40AE-A591-3FB8AB4B8316   siteErr.dll - Acez.SiteError, 
00001E9D-B879-35AF-C94E-AA3B109CDF81   CR**32.DLL - CoolWebSearch/HomeSearch, 
000020DD-C72E-4113-AF77-DD56626C6C42   twaintec.dll - TwainTech adware, 
0000607D-D204-42C7-8E46-216055BF9918   mxTarget.dll - Transponder, 
00006236-A927-4979-9F45-AB915FB9AADE   SITEHE~1.DLL - ChangeSoft SiteHelper hijacker 
0000CC75-ACF3-4cac-A0A9-DD3868E06852   Dapbho.dll - DAP, 
00010A21-B924-4CD6-893C-EEA1071AE8B3   PCDBS.DLL - AdsStore adware, 
00014B58-338A-45F2-81E2-6A86F27399B7   cfg.dll, BoBoHelper.dll, BOBOHE~1.DLL - Parasite of Chinese origin producing hicn1.com popups - detected by DrWeb, 
000277A3-7D84-406a-9799-D12A81594693   srchfst.dll - SearchFast, 
00027925-0017-4faf-9539-90E4AC0B9EC5   ttext.dll, eltt.dll, sh32.dll - IePlugin/ImiServ, 
00041A26-7033-432C-94C7-6371DE343822   msnet.dll, scbar.dll, winex.dll, se.dll - NetworkEssentials.SCBar, 
000473CD-A3ED-4969-A063-2BBA07945441   Oemji.dll - Oemji.Toolbar, 
0007522A-2297-43C1-8EB1-C90B0FF20DA5   enhtb.dll - ShopNav, 
000E6ED5-E3FC-4c93-99E9-D38D2A9F9B09   he3bbcff.dll, he3e3fc4.dll - LZIO.com adware, 
000E7270-CC7A-0786-8E7A-DA09B51938A6   n3tpa1.dll, netpals.dll - NetPal, 
000FBDB5-8043-4F24-ABCC-22654DA54A22   Flash.dll, Config.dll - Unidentified parasite of Chinese origin - should you have any information about this application,   [xs4] - if you actually have a copy of the file,  please attach it to your email for analysis.  Thanks!
00104261-366C-F5DC-AF52-372D821F4505   ADD**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00110011-4B0B-44D5-9718-90C88817369B   NavExt.dll, sys_ext.dll - CoolWebSearch, 
00172AD1-F4BD-48C0-AEB5-A4CFE4638393   v199.dll - QuickLinks/LinkMaker, 
0019C3E2-DD48-4A6D-AB2D-8D32436313D9   oo4.dll, bsx5.dll - BookedSpace, 
0019C3E2-DD48-4A6D-ABCD-8D32436313D9   bxsx5.dll - BookedSpace, 
0019C3E2-DD48-4A6D-ABCD-8D32436323D9   bxxs5.dll, cfgmgr51.dll, cfgmgr52.dll, msbk32.dll, cfg32p.dll - BookedSpace, 
001C0628-4726-F204-3F0F-77067AD8EEC5   API**.DLL - CoolWebSearch/HomeSearch, 
001C5F47-E8D6-E618-54EC-43089D824B4B   WIN**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
001DAE60-95C0-11d3-924E-009027950886   Spotonbh.dll - WebSearch, 
001E92E3-8050-9CD1-84A6-0910CDBA5E2B   CR**.DLL - CoolWebSearch/HomeSearch, 
001F2470-5DF5-11d3-B991-00A0C9BB0874   AtHocTBr.DLL - AtHoc Toolbar, 
001F2570-5DF5-11d3-B991-00A0C9BB0874   Ebayband.dll - Ebay Toolbar, 
001F6CC3-7E5E-DDEA-0B5C-0DA6CBD9094F   IP**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
001F84D9-3242-C74E-D300-64A76315DE22   NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
0026AD90-C86F-4269-97F3-DAB4897C6D06   incfindbho.dll, INCFIN~*.DLL - eUniverse IncrediFind, 
00283B79-8EAF-A0F2-004A-EFD319AA175D   MFC**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
002AF282-E42D-4B51-9F70-F1570C02FAAD   Target.dll - TargetAD, 
002EB272-2590-4693-B166-FBD5D9B6FEA6   multimpp.dll - MultiMPP.com adware, 
003156AA-B2AD-54C8-CF6D-1C992B937149   API**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
003169BC-AB68-482F-AEA6-B51A47BDDB83   ATIDEMGREDEM.dll - Parasite of Chinese origin hailing from yeacool.net, detected by Kaspersky, 
00317A0E-1167-6D33-BFED-F012365FE844   WIN**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00320615-B6C2-40A6-8F99-F1C52D674FAD   localNRD.dll - Transponder, 
0032CCFA-D80B-DABE-C53B-7E94CD4E0B9D   JAVA**.DLL, win**.dll (* = random char) - CoolWebSearch/HomeSearch, 
0032D506-4FE0-DF8E-EB48-201C0AF54F67   SDK**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
0033669F-AADD-AA59-AA7D-AA4B78888000   wavvie2.dll - Variant of the Goldun, 
0033802A-E431-05A1-C82A-1F1A0E244040   NET**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
0033AAE9-55C7-41F3-F763-32B1DA16BE5C   MFC**32.DLL - CoolWebSearch/HomeSearch, 
003479D7-3BFD-52B0-F893-2938F51395A0   CR**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
003482D3-A1D3-5890-2FB0-DBB032CAE989   ADD**.DLL - CoolWebSearch/HomeSearch, 
0036F389-FEF8-43AC-9220-16430E0012ED   iEBINST.dll - NaupointToolbar, 
004334EB-68A9-4A29-9C12-1B225260C14B   wnsd.dll, msoes.dll - Rogue.CZ.b, 
00499BEF-283D-292E-F1C6-60D8F572A8A1   D3**32.DLL - CoolWebSearch/HomeSearch, 
0049B89D-F24D-0FF7-FF16-A5D9BEA94A53   ADD**32.DLL - CoolWebSearch/HomeSearch, 
004CAE59-A6ED-EFA4-22CF-1C6730C6A2D5   JAVA**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
004E2FBC-E423-85D7-ADF3-8C72B483F00A   CR**32.DLL  (* = random char) - CoolWebSearch/HomeSearch, 
004F7901-07FD-C0C0-D131-5B7DF9DD3DEB   MFC**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
004FBD22-BF74-D521-7B75-458EFE8A5F31   JAVA**.DLL - CoolWebSearch/HomeSearch, 
00534B55-3155-CA4F-B41D-0E922121D03C   browsemu.dll - Variant of the Goldun, 
0054E846-22A9-B070-9BB5-4EA63B80B61C   API**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
0055C38C-E2C4-C5C7-5658-572D24B2C091   MFC**32.DLL - CoolWebSearch/HomeSearch, 
00566D5A-B6F9-27AB-FD3D-31394CDD5109   MFC**32.DLL - CoolWebSearch/HomeSearch, 
005714CD-0630-8CC6-E2CB-ADCEC38BF51A   NT**32.DLL - CoolWebSearch/HomeSearch, 
0059410E-8DEE-0D98-C3BC-33C7339C21E9   APP**.DLL - CoolWebSearch/HomeSearch, 
00595A1A-F3C3-0278-F9C8-F54F803375B2   SYS**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00597C23-DF8F-1D28-47F2-6A500B910E65   IE**32.DLL - CoolWebSearch/HomeSearch, 
005BABB0-E95B-9CB5-BA39-5FD11B1F199C   MFC**.DLL - CoolWebSearch/HomeSearch, 
006037F9-A004-367C-C7FB-9C0C131CA3DF   SDK**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
0061A6A3-22A7-89C0-EBA9-4070623258CA   ATL**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
0061BD63-058F-80E6-6F6F-93801F6BBD3D   MFC**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00628392-AE63-F006-1DD1-149D80FA0A89   NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
0062ABA8-6257-DA69-E685-7B9F2846DF6B   API**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
0063090B-13DF-4A70-B546-1B118D5A15E6   API**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
0063CFED-833F-566C-9F68-3F006AA0B861   ADD**32.DLL - CoolWebSearch/HomeSearch, 
0063EB9B-4D3F-3D35-AEB9-740124D75902   IP**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00646EA9-2F9C-89E4-B2D7-0C0D9FC98508   APP**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00648363-6F72-649D-E734-F486A6986C74   MFC**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00648569-1164-8F09-369E-5F1D4CF3EB7A   MFC**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00673769-777F-4814-BE0F-74CBA1D823B8   Iehook.dll - Malware taking advantage of the ASN.1_exploit, 
0067566B-843F-941D-23E9-DE22B6315D82   IP**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
006822A7-054C-D4E1-5DD5-312044BEE60E   ATL**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
006D0367-56A7-6546-49D8-7B6D4D791008   IP**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
006E8685-3705-B1F5-5DF6-0369B85B3CFE   APP**.DLL - CoolWebSearch/HomeSearch, 
007085F0-1707-524E-D27C-EE61D3E63E88   JAVA**32.dll - CoolWebSearch/HomeSearch, 
00712260-4066-862C-4194-4CE678821EC8   NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
0072D796-0D8F-DC8B-A3DC-49F26EC3D261   CR**.DLL - CoolWebSearch/HomeSearch, 
007430E2-88D1-986B-566D-510B4B345BB4   SDK**32.DLL - CoolWebSearch/HomeSearch, 
0078391E-5E2C-E562-5F00-073BD75EB9F1   MS**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
007938B8-8D10-1224-1A13-F33AEB4B4A80   D3**32.DLL - CoolWebSearch/HomeSearch, 
0079FF9A-FD61-2E10-F545-1738C991EC0B   NT**.DLL - CoolWebSearch/HomeSearch, 
007A6846-97DC-92B1-9E5A-E8BBFBC955C7   MFC**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
007B5594-42B2-B1C8-B616-65426F4907FF   API**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
007B911E-5570-A396-6F4A-A0CC235143DC   D3**.DLL - CoolWebSearch/HomeSearch, 
007CE2B4-4BF8-3DD4-30AB-1A5DBE3DF7C5   NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
007D7874-818F-5A8C-2C0C-25C2A5907083   ADD**.DLL - CoolWebSearch/HomeSearch, 
007DB292-112E-4F90-41EA-F1D4D83ADE09   SDK**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
007E5563-0D3B-D2C1-5E35-E9EFC3682342   MS**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
007E8EDE-934B-8E63-6BD6-54D267C76795   CR**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
007F3E5D-5957-E86E-8681-82EE2B1C5E7F   ADD**32.DLL - CoolWebSearch/HomeSearch, 
007FBB10-29F9-1035-4BC6-EADBD6D78464   SYS**32.DLL - CoolWebSearch/HomeSearch, 
00817647-6EE6-B4F8-6A5C-A8F16395AB8F   MS**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
008235DF-6200-E376-279F-7B87938F2373   WIN**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00855F0F-758B-EB9E-3AB8-C69E2F68F200   JAVA**32.dll (* = random char) - CoolWebSearch/HomeSearch, 
008602DA-BF96-4343-F9AA-6322853BD842   SYS**.DLL - CoolWebSearch/HomeSearch, 
008732CD-9A7E-961E-B1DD-6CA480CC53E8   NT**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
008764D5-773A-A0CE-0E07-D1A50B2AEB9C   CR**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
0088A176-1C11-E962-D58B-1F18D0E207D4   ATL**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00895341-563C-4117-837D-BCAC36A5DD26   IE**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
008977B5-B606-4A82-74FD-902541715430   NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
0089926D-DE04-05DF-23E5-7BAF764D77DB   WIN**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
0089AB79-34E9-0ABF-5AF2-3D27B3E4CBA4   ADD**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
0089E432-038D-2B85-3BE2-F538EA8CB9CA   JAVA**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
008A3C3B-9249-57B4-CBC9-55AB9E690943   ADD**32.DLL - CoolWebSearch/HomeSearch, 
008A49EF-1F4A-59F9-2873-E623FDFB2AEC   JAVA**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
008A5E43-7E04-6264-19E3-CABC19B791F6   MS**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
008DB894-99ED-445D-8547-0E7C9808898D   4b_1,0,1,2_mslagent.dll - Adware.Slagent, 
009057E0-E644-7B31-F576-A66A75B760A4   ADD**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00910FC8-0897-B399-2EF2-26EFF8788326   SDK**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
009127DE-BC8B-9CFD-F6A5-8DE090C457F8   CR**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
0092CB9E-A898-102E-13F0-85FC8AF2AD31   SYS**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00942B4E-EC2D-7EFF-8608-94F77063C123   NT**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
0094E9D6-E148-BC7D-424A-678CAF6D4907   NT**.DLL - CoolWebSearch/HomeSearch, 
0096CC0A-623C-4829-AD9C-19AF0DC9D8FE   Dapiebar.dll - DAP, 
009C95E8-B287-5BB1-A8C1-CCCE652E7FA6   D3**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00A0A40C-F432-4C59-BA11-B25D142C7AB7   2IN***~*.DLL, ms****.dll (* = random char) - ClientMan, 
00A24B03-DD53-09FF-B089-5061C12D30FD   ATL**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00A4658F-104F-49F5-B123-8172789AF3C3   urihelper1.dll - Unidentified parasite - should you have any information about this application,   [xs4] - if you actually have a copy of the file,  please attach it to your email for analysis.  Thanks!
00A6FAF1-072E-44cf-8957-5838F569A31D   MWSSRCAS.DLL - MyWebSearch/MySearch, 
00A7FBB1-F3E5-BA11-ADCA-7115E5F5414B   CR**.DLL - CoolWebSearch/HomeSearch, 
00A8711A-6850-059A-543F-7899E1455BA9   API**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00A88ECE-D542-06D0-B1E9-091150D86D41   MS**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00A94FA3-6D7B-4318-1171-4B2F003FC38C   NT**32.DLL - CoolWebSearch/HomeSearch, 
00A967B9-116E-2D7C-E935-A210A88C986F   IE**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00ABB85E-07E6-B7B9-BA96-1CA233683B48   MFC**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00ABE373-5988-C64A-2ECC-433A0B6D18C5   IE**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00AC8F9D-A0CB-27D9-59F8-9DBFA4F78894   NT**32.DLL - CoolWebSearch/HomeSearch, 
00AC93F1-0095-2044-4A78-7147C0B300AF   ATL**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00AD3519-3F00-5087-FF3D-ADBC964ABCAE   ADD**.DLL - CoolWebSearch/HomeSearch, 
00AF53EB-A6A4-2A98-EA99-7B4BBFA3E903   MFC**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00B1D504-60FD-44ae-B142-996FF6C5B7CF   CU-1.dll - ChristiansUnite_Toolbar, 
00B4D9DA-4CA0-9F67-B881-787806788C35   ADD**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00B4DB26-DFBE-9E21-5BD8-E7EF97E67BAD   MFC**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00B50900-FA51-47A0-9184-B4C15FE0F25A   [unknown] - Anyplay.Toolbar, 
00B5649E-C2D8-1DC8-AEC0-BEFBB4FF9DA4   CR**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00B78A2F-66BE-9875-FBF9-E1F486C65401   CR**32.DLL - CoolWebSearch/HomeSearch, 
00B7DCF4-9B37-BE2B-F3F7-6C8DFB0597F0   MFC**32.DLL - CoolWebSearch/HomeSearch, 
00B90684-CDCB-5F04-FCA4-7F1DEE956606   JAVA**.DLL - CoolWebSearch/HomeSearch, 
00BD2861-C654-4694-A44A-98642D73247D   MTSSRCAS.DLL - MyWebSearch/MySearch, 
00C0618C-1BC9-8D1E-D318-81B8263C4778   SYS**32.DLL - CoolWebSearch/HomeSearch, 
00C9C6A4-1889-46BC-B73A-F4DDCC042735   [random file name] - Vundo.B, 
00C9D850-244D-10E1-B3C1-10805E499D95   lspoolnt.dll - OpenWares "ContextuAd" aka MediaBack adware
00C9D850-244D-10E1-B3C1-20805E499D95   WINSPL32.DLL - OpenWares "ContextuAd" aka MediaBack adware
00C9D850-244D-10E1-B3C9-10805E499D95   lclsplnt.dll - OpenWares "ContextuAd" aka MediaBack adware
00C9D850-244D-11E1-B3C9-10805E499D95   lclspl.dll - OpenWares "ContextuAd" aka MediaBack adware
00CEAF8F-BF59-429b-A1D9-91C88CCFE94B   abx_search.dll, ABX_SE~*.DLL, rmndll32.dll - Adware.ABXToolbar, 
00D07086-69D6-6192-75BE-263181D1C881   SDK**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00D13CE9-1879-41bd-B8A3-EA3CB1BD01BC   helper.dll - Troj/Banker-DTE, 
00D6A7E7-4A97-456f-848A-3B75BF7554D7   PerfectNavBHO.dll, PERFEC~*.DLL - eUniverse/IncrediFind, 
00DBDAC8-4691-4797-8E6A-7C6AB89BC441   *****.dll ( * = random char) - ConHook-N, 
00DD5500-8540-964C-2DA8-C829F9E58A84   NT**.DLL - CoolWebSearch/HomeSearch, 
00DD6309-C35E-7ACF-CE4F-6C92538A0A8D   CR**.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00DFBD56-5EA0-27AF-72CF-75BB300B83DF   CR**32.DLL (* = random char) - CoolWebSearch/HomeSearch, 
00E97FF9-C2D5-30AF-2580-1DF6C99280CB   IP**.DLL - CoolWebSearch/HomeSearch, 
00F16DC8-1B2A-42F4-B18B-E21DA9D2D7FD   01A00.DLL - FastFind.org SubSearch, 
00F1D395-4744-40f0-A611-980F61AE2C59   dsr.dll - Adware.DrSearch, a IEPlugin, 
00000001-5E6E-11D4-BE7A-0059002700CD   uniplugin.dll  Unknown Malware 
000277A3-7D84-406A-9799-D12A81594693   srchfst.dll  SEARCHFORIT 
00D6A7E7-4A97-456F-848A-3B75BF7554D7   perfectnav150c.dll  eUniverse//KeenValue 
00000000-0000-11D1-ABED-709549C10000 IEHELPER.DLL - UNIDENTIFIED PARASITE,  FILE LOCATED IN A  "PROGRAM FILES\WHG\INSTANT HELP APPLICATION UPDATE 1.2" DIRECTORY - SHOULD YOU HAVE ANY INFORMATION ABOUT THIS APPLICATION,   [XS4] - IF YOU ACTUALLY HAVE A COPY OF THE FILE,  PLEASE ATTACH IT TO YOUR EMAIL FOR ANALYSIS.  THANKS!
00009E9F-DDD7-AA59-AA7D-AA4B7D6BE000 SHDOCVS.DLL - PARASITE, DETECTED BY ETRUST AS A VARIANT OF THE TIBS_C, HTTP://WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=453103844 TROJAN AND BY KASPERSKY, HTTP://WWW.KASPERSKY.COM/ ANTIVIRUS AS TROJAN.WIN32.BHO.AL
00631CBD-77F9-1C68-9C89-9E8A19DA73BE APP**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP://CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00BE86F6-2E61-4C1E-A36B-AE233EE21FA2 ESOUBAR.DLL - ESOU.TOOLBAR, HTTP://RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=116560 ADWARE
00000000-0000-0000-0000-100000000003 E83D919E87...2A33D1D2_35.EXE ADDED BY THE TROJAN-DOWNLOADER.WIN32.SMALL.BWY 
00000000-0000-0000-0000-000330050660 ABOXINST_INT20.EXE REPORTED AS WIN32/TROJANDOWNLOADER.VB.FI BY NOD32. 
00000000-6666-0704-0B53-2C8830E9FAEC AXLOAD.CAB SITE KEY.ONE2BILL.DE BLOCKED BY THIS HOST FILE. 
00000000-0000-0000-0000-000020030000 A091AEL.EXE DIALER - MORE HERE 
00000012-890E-4AAC-AFD9-000000000000 HARDCORETEENS.XXX ADWARE, BROWSER HIJACKER - MORE HERE 
00000000-0000-0000-0000-000020040000 HTTP://SECURITYRESPONSE.SYMANTEC.COM/AVCENTER/VENC/DATA/DIALER.TRAFFICADVANCE.HTML 
00000000-0000-0000-0000-100005000004 FILE B_35.EXE ADDED BY THE TROJAN-DOWNLOADER.WIN32.SMALL.BWY 
00000000-0000-0000-0000-100005000004 D4511B3C2E80E749C8...C4F15F6B_13.EXE ADDED BY THE TROJAN-DOWNLOADER.WIN32.SMALL.BWY 
00000000-5555-0704-0B53-2C8830E9FAEC HTTP://RESEARCH.SUNBELT-SOFTWARE.COM/THREAT_DISPLAY.CFM?NAME=IELOADER&THREATID=39158&SEARCH=IELOADER 
00000000-CDDC-0704-0B53-2C8830E9FAEC HTTP://RESEARCH.SUNBELT-SOFTWARE.COM/THREAT_DISPLAY.CFM?NAME=IELOADER&THREATID=39158&SEARCH=IELOADER 
00000000-8633-1405-0B53-2C8830E9FAEC HTTP://WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=453074881 
00000000-DDBB-0704-0B53-2C8830E9FAEC HTTP://WWW.VIRUSLIST.COM/EN/VIRUSES/ENCYCLOPEDIA?VIRUSID=39586 
00000000-0000-0001-0001-596BAEDD1289  SHORT MESSAGE ADDED BY CNSMIN NOTE: INSTEAD OF REFERING TO A FILE, THIS ENTRY REFERS TO THE FOLLOWING ADDRESS: HTTP://SMS.3721.COM/IE/INDEX.HTM?PID=U_66036_5402 
000007C6-17DF-4438-92A4-DE5537471BA3  SIDESEARCH RELATED TO SIDE SEARCH
000000A0-0000-0000-0000-000000000011  KEYSAVER	%SYSTEM%\KEYSAVER.DLL	TROJAN-DROPPER.WIN32.SMALL
00CEAF8F-BF59-429B-A1D9-91C88CCFE94B: ABX_SEARCH.DLL, ABX_SE~*.DLL, RMNDLL32.DLL - ADWARE.ABXTOOLBAR, HTTP://WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.ABXTOOLBAR.HTML
00000000-0000-0000-0000-000020000000  Known Malware Component. http://www.google.com/search?hl=en&q=00000000-0000-0000-0000-000020000000&btnG=Google+Search
00000000-0000-0000-0000-000020050000  Known Malware Component. http://www.google.com/search?hl=en&q=00000000-0000-0000-0000-000020050000&btnG=Google+Search
00000000-0000-0000-1234-012398761234  Known Malware Component. http://www.google.com/search?hl=en&q=00000000-0000-0000-1234-012398761234&btnG=Google+Search
00000000-0023-0000-5400-320020040070  Known Malware Component. http://www.google.com/search?hl=en&q=00000000-0023-0000-5400-320020040070&btnG=Google+Search
00000000-7777-0704-0b53-2c8830e9faec  Known Malware Component. http://www.google.com/search?hl=en&q=00000000-7777-0704-0b53-2c8830e9faec&btnG=Google+Search
00000000-ABBA-0704-0B53-2C8830E9FAEC  Known Malware Component. http://www.google.com/search?hl=en&q=00000000-ABBA-0704-0B53-2C8830E9FAEC&btnG=Google+Search
00000012-890e-4aac-afd9-eff6954a34dd  Known Malware Component. http://www.google.com/search?hl=en&q=00000012-890e-4aac-afd9-eff6954a34dd&btnG=Google+Search
00000566-0000-0010-8000-00AA006D2EA4  Known Malware Component. http://www.google.com/search?hl=en&q=00000566-0000-0010-8000-00AA006D2EA4&btnG=Google+Search
00000EF1-0786-4633-87C6-1AA7A44297DA  Known Malware Component. http://www.google.com/search?hl=en&q=00000EF1-0786-4633-87C6-1AA7A44297DA&btnG=Google+Search
0002000D-0000-0000-C000-000000000046  Known Malware Component. http://www.google.com/search?hl=en&q=0002000D-0000-0000-C000-000000000046&btnG=Google+Search
00020420-0000-0000-c000-000000000046  Known Malware Component. http://www.google.com/search?hl=en&q=00020420-0000-0000-c000-000000000046&btnG=Google+Search
00020421-0000-0000-C000-000000000046  Known Malware Component. http://www.google.com/search?hl=en&q=00020421-0000-0000-C000-000000000046&btnG=Google+Search
00020422-0000-0000-C000-000000000046  Known Malware Component. http://www.google.com/search?hl=en&q=00020422-0000-0000-C000-000000000046&btnG=Google+Search
00020423-0000-0000-C000-000000000046  Known Malware Component. http://www.google.com/search?hl=en&q=00020423-0000-0000-C000-000000000046&btnG=Google+Search
00020424-0000-0000-c000-000000000046  Known Malware Component. http://www.google.com/search?hl=en&q=00020424-0000-0000-c000-000000000046&btnG=Google+Search
00020425-0000-0000-C000-000000000046  Known Malware Component. http://www.google.com/search?hl=en&q=00020425-0000-0000-C000-000000000046&btnG=Google+Search
00021401-0000-0000-c000-000000000046  Known Malware Component. http://www.google.com/search?hl=en&q=00021401-0000-0000-c000-000000000046&btnG=Google+Search
00022613-0000-0000-c000-000000000046  Known Malware Component. http://www.google.com/search?hl=en&q=00022613-0000-0000-c000-000000000046&btnG=Google+Search
0002E510-0000-0000-C000-000000000046  Known Malware Component. http://www.google.com/search?hl=en&q=0002E510-0000-0000-C000-000000000046&btnG=Google+Search
0006f02a-0000-0000-c000-000000000046  Known Malware Component. http://www.google.com/search?hl=en&q=0006f02a-0000-0000-c000-000000000046&btnG=Google+Search
0006F071-0000-0000-C000-000000000046  Known Malware Component. http://www.google.com/search?hl=en&q=0006F071-0000-0000-C000-000000000046&btnG=Google+Search
00080000-B1BA-11CE-ABC6-F5B2E79D9E3F  Known Malware Component. http://www.google.com/search?hl=en&q=00080000-B1BA-11CE-ABC6-F5B2E79D9E3F&btnG=Google+Search
00191A03-AED2-7E98-DF3B-095F54E15095  Known Malware Component. http://www.google.com/search?hl=en&q=00191A03-AED2-7E98-DF3B-095F54E15095&btnG=Google+Search
00434208-7105-4BBC-3322-0F890DDF521F  Known Malware Component. http://www.google.com/search?hl=en&q=00434208-7105-4BBC-3322-0F890DDF521F&btnG=Google+Search
0054ad19-7e4e-4ae4-b275-20f237280f5c  Known Malware Component. http://www.google.com/search?hl=en&q=0054ad19-7e4e-4ae4-b275-20f237280f5c&btnG=Google+Search
0063094d-20f9-3897-6968-14390e781c61  Known Malware Component. http://www.google.com/search?hl=en&q=0063094d-20f9-3897-6968-14390e781c61&btnG=Google+Search
0063ab53-93d2-220f-2c3f-16b75366e3bb  Known Malware Component. http://www.google.com/search?hl=en&q=0063ab53-93d2-220f-2c3f-16b75366e3bb&btnG=Google+Search
008AE8EF-75DC-2C0A-C5F1-7BD5371B6EBE  Known Malware Component. http://www.google.com/search?hl=en&q=008AE8EF-75DC-2C0A-C5F1-7BD5371B6EBE&btnG=Google+Search
008b6f21-3a6b-062f-ea4a-4c930254a73f  Known Malware Component. http://www.google.com/search?hl=en&q=008b6f21-3a6b-062f-ea4a-4c930254a73f&btnG=Google+Search
009541A0-3B81-101C-92F3-040224009C02  Known Malware Component. http://www.google.com/search?hl=en&q=009541A0-3B81-101C-92F3-040224009C02&btnG=Google+Search
00aaa6bb-1ea3-4845-b4af-ca56de7b003b  Known Malware Component. http://www.google.com/search?hl=en&q=00aaa6bb-1ea3-4845-b4af-ca56de7b003b&btnG=Google+Search
00EC76B0-1952-4F0E-A5E0-F14FFAF01F61  Known Malware Component. http://www.google.com/search?hl=en&q=00EC76B0-1952-4F0E-A5E0-F14FFAF01F61&btnG=Google+Search
009541A0-3B00-1F1C-00F3-040224009C02   WINCTL PROGRAM FILES\COMMON FILES\WINCTL.DLL TROJ/SMALL-EJG 
00000000-12C7-4305-82F9-43058F20E8D2   QQIEHELPER01.DLL, QQIEHELPER02.DL - TENCENTADDRESSBAR, HTTP://KR.AHNLAB.COM/SECUINFOVIRUSVIEWENGNEW3.AHN?SEQ_NO=5627 ADWARE - BUNDLED WITH THE TENCENT_QQ, HTTP://WWW.TENCENT.COM/INDEX_E.SHTML INSTANT MESSAGING CLIENT
00000000-12C9-4305-82F9-43058F20E8D2   QQIEHELPER01.DLL - TENCENTADDRESSBAR, HTTP://KR.AHNLAB.COM/SECUINFOVIRUSVIEWENGNEW3.AHN?SEQ_NO=5627 ADWARE - BUNDLED WITH THE TENCENT_QQ, HTTP://WWW.TENCENT.COM/INDEX_E.SHTML INSTANT MESSAGING CLIENT
0000DE80-AEC3-70C3-4176-CE509063E000   MSCOREWS.DLL  - TROJAN-DOWNLOADER, DETECTED BY KASPERSKY, HTTP://WWW.KASPERSKY.COM/ ANTIVIRUS AS TROJAN.WIN32.AGENT.AKK - ALSO SEE HERE, HTTP://WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453111393
00018593-C6BD-46F7-9349-DBA1AA674C90   DDDIEMON.DLL - ADWARE.DUDUACCELERATOR, HTTP://SECURITYRESPONSE.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.DUDUACCELERATOR.HTML
00503FA4-D6DE-4A2E-8036-DB3C25C5EFD8   [RANDOM FILENAME] - CONHOOK, HTTP://RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP://WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP://WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
009506E8-8CAD-4CA9-81D4-D815E7E4330A   CURSORCAFEINST.DLL - STARWARE/CURSORCAFE, HTTP://WWW.ANCHIVA.COM/VIRUS/VIEW.ASP?VNAME=ADWARE/STARWARECURSORCAFE BROWSER PLUGIN - DETECTED AS A COMETSYS, HTTP://VIL.NAI.COM/VIL/CONTENT/V_131069.HTM ADWARE COMPONENT
00C104F7-0F5C-470C-ABCF-A5B2E70752F1   BAIDU.DLL  - PARASITE OF CHINESE ORIGIN HAILING FROM BAIDU.COM - A BAIDUBAR, HTTP://RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=44261 ADWARE COMPONENT
00C104F7-0F5C-470C-ABCF-A5B2E70752F1   WTLHLP.DLL, APPHLP.DLL, ACCZIXP.DLL, WPPHLP.DLL - PARASITE OF CHINESE ORIGIN HAILING FROM BAIDU.COM - A BAIDUBAR, HTTP://RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=44261 ADWARE COMPONENT
00C104F7-0F5C-470C-ABCF-A5B2E70752F1   LPKWAT.DLL - PARASITE OF CHINESE ORIGIN, A BAIDUBAR, HTTP://RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=44261 ADWARE VARIANT
00E9792C-699E-4C18-8AE4-67B291EA1C74   [RANDOM FILENAME] - CONHOOK, HTTP://RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP://WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP://WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
00000000-0000-****-****-************   TEMP.DLL - LYCOS SIDESEARCH, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.SIDESEARCH.HTML ADWARE VARIANT,  WHERE "*"  IN THE CLSID FIELD REPRESENTS A RANDOM DIGIT
00000000-0000-0000-0000-000000000000   CNBARIE.DLL, CNBABE.DLL - COMMONNAME, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.COMMONNAME.HTML ADWARE
00000000-0000-0000-0000-000000000000   MSXMLPP.DLL, MSXSLAB.DLL - COOLWEBSEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML  PARASITE VARIANT
00000000-0000-0000-0000-000000000000   QQIEHELPER02.DLL - TENCENTADDRESSBAR, HTTP  //KR.AHNLAB.COM/SECUINFOVIRUSVIEWENGNEW3.AHN?SEQ_NO=5627 ADWARE - BUNDLED WITH THE TENCENT_QQ, HTTP  //WWW.TENCENT.COM/INDEX_E.SHTML INSTANT MESSAGING CLIENT
00000000-0000-0000-0000-000000000001   SAFESEARCH.DLL - AUTOSEARCH/SAFESEARCH, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.SAFESEARCH.HTML ADWARE
00000000-0000-0000-0000-000000000001   MSXMLFILT.DLL - COOLWEBSEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML  PARASITE VARIANT
00000000-0000-0000-0000-000000000010   DH.DLL - DESKWIZZ.COM, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=15169  ADWARE COMPONENT - ALSO SEE HERE, HTTP  //WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=453097319
00000000-0000-0000-0000-000000000221   CSIE.DLL, CTIE.DLL - CLEARSEARCH, HTTP  //SECURITYRESPONSE.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.CLEARSEARCH.HTML ADWARE VARIANT
00000000-0000-0000-0000-000000000240   IE_CLRSCH.DLL - CLEARSEARCH, HTTP  //SECURITYRESPONSE.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.CLEARSEARCH.HTML ADWARE VARIANT
00000000-0000-0000-0000-000000002230   CSBB.DLL - CLEARSEARCH, HTTP  //SECURITYRESPONSE.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.CLEARSEARCH.HTML ADWARE VARIANT
00000000-0000-0000-0000-B4CA9A18F1F1   QQIEHELPER01.DLL - TENCENTADDRESSBAR, HTTP  //KR.AHNLAB.COM/SECUINFOVIRUSVIEWENGNEW3.AHN?SEQ_NO=5627 ADWARE - BUNDLED WITH THE TENCENT_QQ, HTTP  //WWW.TENCENT.COM/INDEX_E.SHTML INSTANT MESSAGING CLIENT
00000000-0000-0000-8835-3EFF76BF2657   KW3EEF76.DLL - LZIO.COM ADWARE, HTTP  //WWW.SPYWAREGUIDE.COM/PRODUCT_SHOW.PHP?ID=853
00000000-0000-0000-BFA1-D7EE6696B865   ICDD7EE6.DLL, ICDDEFFF.DLL - LZIO.COM ADWARE, HTTP  //WWW.SPYWAREGUIDE.COM/PRODUCT_SHOW.PHP?ID=853
00000000-0000-11D1-ABED-709549C10000   IEHELPER.DLL - BROWSER PLUGIN HAILING FROM WILD-HOT-GIRLS.COM - SEE HERE, HTTP  //WWW.SITEADVISOR.COM/SITES/SERVER4YOU.DE/DOWNLOADS/2746027/
00000000-0000-41A3-98CF-00000000168B   WMCBAACA.DLL, WM41A398.DLL - LZIO.COM ADWARE, HTTP  //WWW.SPYWAREGUIDE.COM/PRODUCT_SHOW.PHP?ID=853
00000000-0000-4344-9B65-3E662D687D08   ZANGO SITEFINDER.DLL - 180SOLUTIONS ZANGOSEARCH, HTTP  //SECURITYRESPONSE.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.ZANGOSEARCH.HTML ADWARE VARIANT - ALSO SEE THIS_NOTE, HTTP  //WWW.BENEDELMAN.ORG/SPYWARE/180-AFFILIATES/
00000000-0000-476B-A2E7-BB1B6D46B554   ZANGO SITEFINDER.DLL - 180SOLUTIONS ZANGOSEARCH, HTTP  //SECURITYRESPONSE.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.ZANGOSEARCH.HTML ADWARE VARIANT - ALSO SEE THIS_NOTE, HTTP  //WWW.BENEDELMAN.ORG/SPYWARE/180-AFFILIATES/
00000000-0000-47C5-A90F-2CDE8F7638DB   IEDCB1F5.DLL, IEL2CDE8.DLL, IE758E49.DLL, IELCAABE.DLL - LZIO.COM ADWARE, HTTP  //WWW.SPYWAREGUIDE.COM/PRODUCT_SHOW.PHP?ID=853
00000000-0000-5DFC-5652-1705043F6518   AUDIOSRV32.DLL - "TX 4" BROWSERAD ADWARE
00000000-0000-7EBF-57C6-0BAE047EA682   AUTODISC32.DLL - "TX 4" BROWSERAD ADWARE
00000000-0001-0345-2280-0287F27A63EE   BROWSERAD.DLL - "TX 4" BROWSERAD ADWARE
00000000-0001-1DBE-075A-39EC04BD88AF   AVICAP32.DLL - "TX 4" BROWSERAD ADWARE
00000000-0001-F7A6-1F38-0204019E355E   ASFERROR32.DLL - "TX 4" BROWSERAD ADWARE
00000000-0002-53D4-0622-35EA0235778E   ATI2DVAA32.DLL - "TX 4" BROWSERAD ADWARE
00000000-0008-D357-0798-004401965D4A   APPHELP32.DLL - "TX 4" BROWSERAD ADWARE
00000000-0009-1C42-7D61-6CFF050894A7   AVISYNTHEX32.DLL - "TX 4" BROWSERAD ADWARE
00000000-0015-BD9C-263A-493001BA0C6C   ASYCFILT32.DLL - "TX 4" BROWSERAD ADWARE
00000000-002B-EFE6-6B08-560C01922D3B   APCUPS32.DLL - "TX 4" BROWSERAD ADWARE
00000000-0033-C1AC-0E62-0C1F0537605D   AVIWRAP32.DLL - "TX 4" BROWSERAD ADWARE
00000000-008C-1E65-6AA6-3A270279F027   ATI2DVAG32.DLL - "TX 4" BROWSERAD ADWARE
00000000-00FA-71ED-4ABA-348801BAA0A9   ATHPRXY32.DLL - "TX 4" BROWSERAD ADWARE
00000000-08C8-8E68-587B-61F804EE6164   AVISYNTH32.DLL - "TX 4" BROWSERAD ADWARE
00000000-0C95-B1F8-547A-405204D6961A   AVIFILE32.DLL - "TX 4" BROWSERAD ADWARE
00000000-10D6-4E5F-8F7F-29B32C1C0FC4   ICDDEFFF.DLL - LZIO.COM ADWARE, HTTP  //WWW.SPYWAREGUIDE.COM/PRODUCT_SHOW.PHP?ID=853
00000000-12AD-4305-82F9-43058F20E8D2   QQIEHELPER**.DLL - TENCENTADDRESSBAR, HTTP  //KR.AHNLAB.COM/SECUINFOVIRUSVIEWENGNEW3.AHN?SEQ_NO=5627 ADWARE - BUNDLED WITH THE TENCENT_QQ, HTTP  //WWW.TENCENT.COM/INDEX_E.SHTML INSTANT MESSAGING CLIENT
00000000-12B9-4305-82F9-43058F20E8D2   QQIEHELPER01.DLL, QQIEHELPER02.DLL - TENCENTADDRESSBAR, HTTP  //KR.AHNLAB.COM/SECUINFOVIRUSVIEWENGNEW3.AHN?SEQ_NO=5627 ADWARE - BUNDLED WITH THE TENCENT_QQ, HTTP  //WWW.TENCENT.COM/INDEX_E.SHTML INSTANT MESSAGING CLIENT
00000000-12C5-4305-82F9-43058F20E8D2   QQIEHELPER01.DLL, QQIEHELPER02.DLL - TENCENTADDRESSBAR, HTTP  //KR.AHNLAB.COM/SECUINFOVIRUSVIEWENGNEW3.AHN?SEQ_NO=5627 ADWARE - BUNDLED WITH THE TENCENT_QQ, HTTP  //WWW.TENCENT.COM/INDEX_E.SHTML INSTANT MESSAGING CLIENT
00000000-12C7-4305-82F9-43058F20E8D2   QQIEHELPER01.DLL, QQIEHELPER02.DLL - TENCENTADDRESSBAR, HTTP  //KR.AHNLAB.COM/SECUINFOVIRUSVIEWENGNEW3.AHN?SEQ_NO=5627 ADWARE - BUNDLED WITH THE TENCENT_QQ, HTTP  //WWW.TENCENT.COM/INDEX_E.SHTML INSTANT MESSAGING CLIENT
00000000-12C9-4305-82F9-43058F20E8D2   QQIEHELPER01.DLL, QQIEHELPER02.DLL - TENCENTADDRESSBAR, HTTP  //KR.AHNLAB.COM/SECUINFOVIRUSVIEWENGNEW3.AHN?SEQ_NO=5627 ADWARE - BUNDLED WITH THE TENCENT_QQ, HTTP  //WWW.TENCENT.COM/INDEX_E.SHTML INSTANT MESSAGING CLIENT
00000000-1530-70F0-6420-4C2701B37263   ASFSIPC32.DLL - "TX 4" BROWSERAD ADWARE
00000000-15D9-4736-AB29-131578A45F2B   WSRCHC3.DLL - WORDSONWEB, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=42050 ADWARE
00000000-167B-41BC-95FF-86A07B14712C   HE3BBCFF.DLL - LZIO.COM ADWARE, HTTP  //WWW.SPYWAREGUIDE.COM/PRODUCT_SHOW.PHP?ID=853
00000000-2565-4C5B-A455-A74C8A2247AB   WMCBAACA.DLL - LZIO.COM ADWARE, HTTP  //WWW.SPYWAREGUIDE.COM/PRODUCT_SHOW.PHP?ID=853
00000000-387E-9D50-0079-1744044CB22A   AUTHZ32.DLL - "TX 4" BROWSERAD ADWARE
00000000-59D4-4008-9058-080011001200   DLMAX.DLL - TRANSPONDER, HTTP  //WWW.WEBHELPER4U.COM/TNEWSWRITIGS/INDEX.HTML AKA BETTERINTERNET, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.BETTERINTERNET.HTML ADWARE VARIANT
00000000-5EB9-11D5-9D45-009027C14662   EHELPER.DLL, VX2.DLL - VX2.TRANSPONDER, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=12517 ADWARE - ALSO SEE HERE, HTTP  //WWW.TRENDMICRO.COM/VINFO/VIRUSENCYCLO/DEFAULT5.ASP?VNAME=TROJ%5FBLKSTONE%2EA&VSECT=P
00000000-64C4-4A64-9767-895AB4921E41   IELCAABE.DLL - LZIO.COM ADWARE, HTTP  //WWW.SPYWAREGUIDE.COM/PRODUCT_SHOW.PHP?ID=853
00000000-663F-49E8-BDF6-F26DB51C7DD5   LIQUI.DLL - ADBREAK, HTTP  //CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453072504 ADWARE COMPONENT
00000000-C1EC-0345-6EC2-4D0300000000   ZSERV.DLL - TRANSPONDER, HTTP  //WWW.WEBHELPER4U.COM/TNEWSWRITIGS/INDEX.HTML AKA BETTERINTERNET, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.BETTERINTERNET.HTML ADWARE VARIANT
00000000-D9E3-4BC6-A0BD-3D0CA4BE5271   FHFMM.DLL - ADBREAK, HTTP  //WWW.PESTPATROL.COM/SPYWARECENTER/PEST.ASPX?ID=453072504 ADWARE
00000000-DD60-0064-6EC2-6E0100000000   PYNIX.DLL - TRANSPONDER, HTTP  //WWW.WEBHELPER4U.COM/TNEWSWRITIGS/INDEX.HTML AKA BETTERINTERNET, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.BETTERINTERNET.HTML ADWARE VARIANT
00000000-F09C-02B4-6EC2-AD0300000000   BTGRAB.DLL - TRANSPONDER, HTTP  //WWW.WEBHELPER4U.COM/TNEWSWRITIGS/INDEX.HTML AKA BETTERINTERNET, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.BETTERINTERNET.HTML ADWARE VARIANT
00000001-C003-4A2F-9142-7CB1D78DE6C1   TCT101.DLL -  DYFUCA.INTERNET OPTIMIZER, HTTP  //WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=453076206 ADWARE
00000010-0000-0010-8000-000000000002   ANNOTATEBHO.DLL - ANNOTATE.NET NETRADAR, HTTP  //WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=61818
00000010-6F7D-442C-93E3-4A4827C2E4C8   NEM219.DLL, NEM220.DLL - DYFUCA/INTERNET_OPTIMIZER, HTTP  //SARC.COM/AVCENTER/VENC/DATA/PF/ADWARE.NETOPTIMIZER.HTML ADWARE VARIANT
00000015-A527-34E7-25C2-03A4E313B2E9   WINSRVS_1.DLL - "RAMDUD", HTTP  //WWW.TRENDMICRO.COM/VINFO/GRAYWARE/VE_GRAYWAREDETAILS.ASP?GNAME=ADW_RAMM.101 ADWARE
00000026-8735-428D-B81F-DD098223B25F   SPEER.DLL - TRANSPONDER, HTTP  //WWW.WEBHELPER4U.COM/TNEWSWRITIGS/INDEX.HTML ADWARE VARIANT,  ALSO SEE HERE, HTTP  //SECURITYRESPONSE.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.MXTARGET.HTML
00000035-92F8-407F-98A5-7D8ADA59B6BB   SPEER2.DLL - TRANSPONDER, HTTP  //WWW.WEBHELPER4U.COM/TNEWSWRITIGS/INDEX.HTML ADWARE VARIANT,  ALSO SEE HERE, HTTP  //SECURITYRESPONSE.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.MXTARGET.HTML
00000049-8F91-4D9C-9573-F016E7626484   CERES.DLL - TRANSPONDER, HTTP  //WWW.WEBHELPER4U.COM/TNEWSWRITIGS/INDEX.HTML AKA BETTERINTERNET, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.BETTERINTERNET.HTML ADWARE VARIANT
0000005D-C175-4405-BAC5-1F3B2BAF67C6   KZ515.DLL - TRANSPONDER VARIANT, HTTP  //WEBHELPER4U.COM/WEBHELPERMAINMENU.HTML
00000062-2E5F-4AF7-986E-5B64E0951A96   IMGIANT.DLL - TRANSPONDER, HTTP  //WWW.WEBHELPER4U.COM/TNEWSWRITIGS/INDEX.HTML AKA BETTERINTERNET, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.BETTERINTERNET.HTML ADWARE VARIANT
00000097-7C67-4BA6-8B42-05128941688A   SPEERYOX.DLL - TRANSPONDER, HTTP  //WWW.WEBHELPER4U.COM/TNEWSWRITIGS/INDEX.HTML ADWARE VARIANT,  ALSO SEE HERE, HTTP  //SECURITYRESPONSE.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.MXTARGET.HTML
000000DA-0786-4633-87C6-1AA7A4429EF1   EMESX.DLL - FAVORITEMAN, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.FAVORITEMAN.HTML ADWARE VARIANT
000000F1-34E3-4633-87C6-1AA7A44296DA   FONE.DLL - FAVORITEMAN, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.FAVORITEMAN.HTML ADWARE VARIANT
00000185-B716-11D3-92F3-00D0B709A7D8   BHO.0.1.0.***.DLL (* = DIGIT), BHO010~*.DLL - SMARTBROWSER, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.SMARTBROWSER.HTML ADWARE
00000185-C745-43D2-44F1-01A1C789C738   BHO.0.1.0.***.DLL (* = DIGIT), BHO010~*.DLL - SMARTBROWSER, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.SMARTBROWSER.HTML ADWARE
00000250-0320-4DD4-BE4F-7566D2314352   VOICEIP.DLL - TRANSPONDER, HTTP  //WWW.WEBHELPER4U.COM/TNEWSWRITIGS/INDEX.HTML ADWARE VARIANT
0000026A-8230-4DD4-BE4F-6889D1E74167   TPS108.DLL - TRANSPONDER, HTTP  //WWW.WEBHELPER4U.COM/TNEWSWRITIGS/INDEX.HTML ADWARE VARIANT
00000273-8230-4DD4-BE4F-6889D1E74167   HOST.DLL - TRANSPONDER, HTTP  //WWW.WEBHELPER4U.COM/TNEWSWRITIGS/INDEX.HTML ADWARE VARIANT
000004CC-E4FF-4F2C-BC30-DBEF0B983BC9   IPINSIGT.DLL - IPINSIGHT, HTTP  //WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=453072534 ADWARE
00000580-C637-11D5-831C-00105AD6ACF0   MSVIEW.DLL - TRANSPONDER, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=8740 ADWARE VARIANT, ALSO SEE HERE, HTTP  //WWW.TRENDMICRO.COM/VINFO/VIRUSENCYCLO/DEFAULT5.ASP?VNAME=TROJ%5FKEYHOST%2EA&VSECT=P
000006B1-19B5-414A-849F-2A3C64AE6939   BI.DLL - TRANSPONDER, HTTP  //WWW.WEBHELPER4U.COM/TNEWSWRITIGS/INDEX.HTML ADWARE VARIANT
00000762-3965-4A1A-98CE-3D4BF457D4C8   SIDESEARCH.DLL, SIDESEARCH****.DLL ( * = DIGIT) - LYCOS SIDESEARCH, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.SIDESEARCH.HTML ADWARE VARIANT
00000AA9-A363-466E-BEF5-9BB68697AA7F   QQIEHELPER**.DLL - TENCENTADDRESSBAR, HTTP  //KR.AHNLAB.COM/SECUINFOVIRUSVIEWENGNEW3.AHN?SEQ_NO=5627 ADWARE - BUNDLED WITH THE TENCENT_QQ, HTTP  //WWW.TENCENT.COM/INDEX_E.SHTML INSTANT MESSAGING CLIENT
00000EF1-0786-4633-87C6-1AA7A44296DA   ATPARTNERS.DLL, ATPART~*.DLL, N3TPA1P.DLL, CALSDR.DLL, GR0*.DLL (* = DIGIT), TD1.DLL, RANDOM FILE NAMES - FAVORITEMAN, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.FAVORITEMAN.HTML ADWARE VARIANT
00000EF1-34E3-4633-87C6-1AA7A44296DA   F1.DLL, MPZ300.DLL, ZZ.DLL, ***.DLL (RANDOM CHARS) - FAVORITEMAN, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.FAVORITEMAN.HTML ADWARE VARIANT
00000FF6-0043-40AE-A591-3FB8AB4B8316   SITEERROR.DLL, SITEERR.DLL - ACEZ.SITEERROR, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?NAME=ACEZ.SITEERROR&THREATID=43078 ADWARE
00001E9D-B879-35AF-C94E-AA3B109CDF81   CR**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
000020DD-C72E-4113-AF77-DD56626C6C42   TWAINTEC.DLL - TWAINTECH ADWARE, HTTP  //WWW.PCHELL.COM/SUPPORT/TWAINTEC.SHTML
0000607D-D204-42C7-8E46-216055BF9918   MXTARGET.DLL - TRANSPONDER, HTTP  //WWW.WEBHELPER4U.COM/TNEWSWRITIGS/INDEX.HTML ADWARE VARIANT,  ALSO SEE HERE, HTTP  //SECURITYRESPONSE.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.MXTARGET.HTML
00006236-A927-4979-9F45-AB915FB9AADE   SITEHE~1.DLL - CHANGESOFT SITEHELPER HIJACKER 
00009E9F-DDD7-AA59-AA7D-AA4B7D6BE000   SHDOCVS.DLL - PARASITE, DETECTED BY ETRUST AS A VARIANT OF THE TIBS_C, HTTP  //WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=453103844 TROJAN AND BY KASPERSKY, HTTP  //WWW.KASPERSKY.COM/ ANTIVIRUS AS TROJAN.WIN32.BHO.AL
0000DE80-AEC3-70C3-4176-CE509063E000   MSCOREWS.DLL  - TROJAN-DOWNLOADER, DETECTED BY KASPERSKY, HTTP  //WWW.KASPERSKY.COM/ ANTIVIRUS AS TROJAN.WIN32.AGENT.AKK - ALSO SEE HERE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453111393
00010A21-B924-4CD6-893C-EEA1071AE8B3   PCDBS.DLL - ADSSTORE ADWARE, HTTP  //WWW.PESTPATROL.COM/PESTINFO/A/ADSSTORE.ASP
00014B58-338A-45F2-81E2-6A86F27399B7   CFG.DLL, BOBOHELPER.DLL, BOBOHE~1.DLL - PARASITE OF CHINESE ORIGIN PRODUCING HICN1.COM POPUPS - DETECTED BY DRWEB, HTTP  //WWW.DRWEB.COM/ ANTIVIRUS AS ADWARE.ADJUMP
00018593-C6BD-46F7-9349-DBA1AA674C90   DDDIEMON.DLL - ADWARE.DUDUACCELERATOR, HTTP  //SECURITYRESPONSE.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.DUDUACCELERATOR.HTML
000277A3-7D84-406A-9799-D12A81594693   SRCHFST.DLL - SEARCHFAST, HTTP  //VIL.NAI.COM/VIL/CONTENT/V_133641.HTM ADWARE
00027925-0017-4FAF-9539-90E4AC0B9EC5   TTEXT.DLL, ELTT.DLL, SH32.DLL - IEPLUGIN/IMISERV, HTTP  //WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=453072530 ADWARE VARIANT
00041A26-7033-432C-94C7-6371DE343822   MSNET.DLL, SCBAR.DLL, WINEX.DLL, SE.DLL - NETWORKESSENTIALS.SCBAR, HTTP  //WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=453075487 ADWARE
000473CD-A3ED-4969-A063-2BBA07945441   OEMJI.DLL - OEMJI.TOOLBAR, HTTP  //WWW.SYMANTEC.COM/ENTERPRISE/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2006-100617-0636-99&TABID=2 ADWARE - ALSO SEE HERE, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?&THREATID=40752
0007522A-2297-43C1-8EB1-C90B0FF20DA5   ENHTB.DLL - SHOPNAV, HTTP  //WWW.SARC.COM/AVCENTER/VENC/DATA/PF/SPYWARE.SHOPNAV.HTML ADWARE VARIANT
000E6ED5-E3FC-4C93-99E9-D38D2A9F9B09   HE3BBCFF.DLL, HE3E3FC4.DLL - LZIO.COM ADWARE, HTTP  //WWW.SPYWAREGUIDE.COM/PRODUCT_SHOW.PHP?ID=853
000E7270-CC7A-0786-8E7A-DA09B51938A6   N3TPA1.DLL, NETPALS.DLL - NETPAL, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.NETPAL.HTML ADWARE
000FBDB5-8043-4F24-ABCC-22654DA54A22   FLASH.DLL, CONFIG.DLL - UNIDENTIFIED PARASITE OF CHINESE ORIGIN - SHOULD YOU HAVE ANY INFORMATION ABOUT THIS APPLICATION,   [XS4] - IF YOU ACTUALLY HAVE A COPY OF THE FILE,  PLEASE ATTACH IT TO YOUR EMAIL FOR ANALYSIS.  THANKS!
00104261-366C-F5DC-AF52-372D821F4505   ADD**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00110011-4B0B-44D5-9718-90C88817369B   NAVEXT.DLL, SYS_EXT.DLL - COOLWEBSEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML  PARASITE VARIANT
001676B8-CB71-4093-BCB4-3290DFBA510E   ATHOCTBR.DLL - ATHOC TOOLBAR, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=2376
00172AD1-F4BD-48C0-AEB5-A4CFE4638393   V199.DLL - QUICKLINKS/LINKMAKER, HTTP  //VIL.MCAFEESECURITY.COM/VIL/CONTENT/V_134892.HTM ADWARE VARIANT - ALSO DETECTED AS ADWARE.SUGGESTOR, HTTP  //KR.AHNLAB.COM/SECUINFOVIRUSVIEWENGNEW3.AHN?SEQ_NO=4388
0019C3E2-DD48-4A6D-AB2D-8D32436313D9   OO4.DLL, BSX5.DLL - BOOKEDSPACE, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.BOOKEDSPACE.HTML ADWARE VARIANT
0019C3E2-DD48-4A6D-ABCD-8D32436313D9   BXSX5.DLL - BOOKEDSPACE, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.BOOKEDSPACE.HTML ADWARE VARIANT
0019C3E2-DD48-4A6D-ABCD-8D32436323D9   BXXS5.DLL, CFGMGR51.DLL, CFGMGR52.DLL, MSBK32.DLL, CFG32P.DLL - BOOKEDSPACE, HTTP  //WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=453076996 ADWARE VARIANT
001B3456-4ADE-44D0-8C23-D69D32658D84   ATHOCTBR.DLL - ATHOC TOOLBAR, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=2376
001C0628-4726-F204-3F0F-77067AD8EEC5   API**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
001C5F47-E8D6-E618-54EC-43089D824B4B   WIN**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
001DAE60-95C0-11D3-924E-009027950886   SPOTONBH.DLL - WEBSEARCH, HTTP  //WWW.SPYWAREGUIDE.COM/PRODUCT_SHOW.PHP?ID=505 
001E92E3-8050-9CD1-84A6-0910CDBA5E2B   CR**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
001F2470-5DF5-11D3-B991-00A0C9BB0874   ATHOCTBR.DLL - ATHOC TOOLBAR, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=2376
001F6CC3-7E5E-DDEA-0B5C-0DA6CBD9094F   IP**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
001F84D9-3242-C74E-D300-64A76315DE22   NT**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0026AD90-C86F-4269-97F3-DAB4897C6D06   INCFINDBHO.DLL, INCFIN~*.DLL - EUNIVERSE INCREDIFIND, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.INCREDIFIND.HTML ADWARE VARIANT
00283B79-8EAF-A0F2-004A-EFD319AA175D   MFC**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
002AF282-E42D-4B51-9F70-F1570C02FAAD   TARGET.DLL - TARGETAD, HTTP  //VIL.NAI.COM/VIL/CONTENT/V_137612.HTM ADWARE
002EB272-2590-4693-B166-FBD5D9B6FEA6   MULTIMPP.DLL - MULTIMPP.COM ADWARE, HTTP  //WWW.MULTIMPP.COM/
003156AA-B2AD-54C8-CF6D-1C992B937149   API**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
003169BC-AB68-482F-AEA6-B51A47BDDB83   ATIDEMGREDEM.DLL - PARASITE OF CHINESE ORIGIN HAILING FROM YEACOOL.NET, DETECTED BY KASPERSKY, HTTP  //WWW.KASPERSKY.COM/ ANTIVIRUS AS TROJAN-CLICKER.WIN32.AGENT.H - ALSO SEE HERE, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=55091
00317A0E-1167-6D33-BFED-F012365FE844   WIN**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00320615-B6C2-40A6-8F99-F1C52D674FAD   LOCALNRD.DLL - TRANSPONDER, HTTP  //WWW.WEBHELPER4U.COM/TNEWSWRITIGS/INDEX.HTML ADWARE VARIANT
0032CCFA-D80B-DABE-C53B-7E94CD4E0B9D   JAVA**.DLL, WIN**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0032D506-4FE0-DF8E-EB48-201C0AF54F67   SDK**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0033669F-AADD-AA59-AA7D-AA4B78888000   WAVVIE2.DLL - VARIANT OF THE GOLDUN, HTTP  //WWW.FRSIRT.COM/ENGLISH/VIRUS/2006/06355 PASSWORD STEALER TROJAN
0033802A-E431-05A1-C82A-1F1A0E244040   NET**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0033AAE9-55C7-41F3-F763-32B1DA16BE5C   MFC**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
003479D7-3BFD-52B0-F893-2938F51395A0   CR**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
003482D3-A1D3-5890-2FB0-DBB032CAE989   ADD**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0036F389-FEF8-43AC-9220-16430E0012ED   IEBINST.DLL - NAUPOINTTOOLBAR, HTTP  //WWW.TRENDMICRO.COM/VINFO/GRAYWARE/VE_GRAYWAREDETAILS.ASP?GNAME=ADW_NAUPONT.A ADWARE VARIANT
004334EB-68A9-4A29-9C12-1B225260C14B   WNSD.DLL, MSOES.DLL - ROGUE.CZ.B, HTTP  //KR.AHNLAB.COM/SECUINFOVIRUSVIEWENGNEW3.AHN?SEQ_NO=4529 ADWARE
00499BEF-283D-292E-F1C6-60D8F572A8A1   D3**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0049B89D-F24D-0FF7-FF16-A5D9BEA94A53   ADD**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
004CAE59-A6ED-EFA4-22CF-1C6730C6A2D5   JAVA**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
004E2FBC-E423-85D7-ADF3-8C72B483F00A   CR**32.DLL  (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
004F7901-07FD-C0C0-D131-5B7DF9DD3DEB   MFC**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
004FBD22-BF74-D521-7B75-458EFE8A5F31   JAVA**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00503FA4-D6DE-4A2E-8036-DB3C25C5EFD8   [RANDOM FILENAME] - CONHOOK, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP  //WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
00534B55-3155-CA4F-B41D-0E922121D03C   BROWSEMU.DLL - VARIANT OF THE GOLDUN, HTTP  //WWW.FRSIRT.COM/ENGLISH/VIRUS/2006/06355 PASSWORD STEALER TROJAN,  ALSO SEE HERE, HTTP  //WWW.TRENDMICRO.COM/VINFO/VIRUSENCYCLO/DEFAULT5.ASP?VNAME=TROJ_AGENT.OHL
00534B55-3155-CA4F-B41D-0E922121D03C   CSCENTFY.DLL - VARIANT OF THE GOLDUN, HTTP  //WWW.FRSIRT.COM/ENGLISH/VIRUS/2006/06355 PASSWORD STEALER TROJAN
0054E846-22A9-B070-9BB5-4EA63B80B61C   API**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0055C38C-E2C4-C5C7-5658-572D24B2C091   MFC**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00566D5A-B6F9-27AB-FD3D-31394CDD5109   MFC**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
005714CD-0630-8CC6-E2CB-ADCEC38BF51A   NT**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0059410E-8DEE-0D98-C3BC-33C7339C21E9   APP**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00595A1A-F3C3-0278-F9C8-F54F803375B2   SYS**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00597C23-DF8F-1D28-47F2-6A500B910E65   IE**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
005BABB0-E95B-9CB5-BA39-5FD11B1F199C   MFC**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
006037F9-A004-367C-C7FB-9C0C131CA3DF   SDK**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0061A6A3-22A7-89C0-EBA9-4070623258CA   ATL**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0061BD63-058F-80E6-6F6F-93801F6BBD3D   MFC**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00628392-AE63-F006-1DD1-149D80FA0A89   NT**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0062ABA8-6257-DA69-E685-7B9F2846DF6B   API**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0063090B-13DF-4A70-B546-1B118D5A15E6   API**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00631CBD-77F9-1C68-9C89-9E8A19DA73BE   APP**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0063CFED-833F-566C-9F68-3F006AA0B861   ADD**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0063EB9B-4D3F-3D35-AEB9-740124D75902   IP**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00646EA9-2F9C-89E4-B2D7-0C0D9FC98508   APP**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00648363-6F72-649D-E734-F486A6986C74   MFC**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00648569-1164-8F09-369E-5F1D4CF3EB7A   MFC**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00673769-777F-4814-BE0F-74CBA1D823B8   IEHOOK.DLL - MALWARE TAKING ADVANTAGE OF THE ASN.1_EXPLOIT, HTTP  //WWW.US-CERT.GOV/CAS/TECHALERTS/TA04-041A.HTML 
0067566B-843F-941D-23E9-DE22B6315D82   IP**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
006822A7-054C-D4E1-5DD5-312044BEE60E   ATL**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
006D0367-56A7-6546-49D8-7B6D4D791008   IP**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
006E8685-3705-B1F5-5DF6-0369B85B3CFE   APP**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
007085F0-1707-524E-D27C-EE61D3E63E88   JAVA**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00712260-4066-862C-4194-4CE678821EC8   NT**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0072D796-0D8F-DC8B-A3DC-49F26EC3D261   CR**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
007430E2-88D1-986B-566D-510B4B345BB4   SDK**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0078391E-5E2C-E562-5F00-073BD75EB9F1   MS**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
007938B8-8D10-1224-1A13-F33AEB4B4A80   D3**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0079FF9A-FD61-2E10-F545-1738C991EC0B   NT**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
007A6846-97DC-92B1-9E5A-E8BBFBC955C7   MFC**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
007B5594-42B2-B1C8-B616-65426F4907FF   API**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
007B911E-5570-A396-6F4A-A0CC235143DC   D3**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
007CE2B4-4BF8-3DD4-30AB-1A5DBE3DF7C5   NT**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
007D7874-818F-5A8C-2C0C-25C2A5907083   ADD**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
007DB292-112E-4F90-41EA-F1D4D83ADE09   SDK**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
007E5563-0D3B-D2C1-5E35-E9EFC3682342   MS**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
007E8EDE-934B-8E63-6BD6-54D267C76795   CR**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
007F3E5D-5957-E86E-8681-82EE2B1C5E7F   ADD**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
007FBB10-29F9-1035-4BC6-EADBD6D78464   SYS**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00817647-6EE6-B4F8-6A5C-A8F16395AB8F   MS**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
008235DF-6200-E376-279F-7B87938F2373   WIN**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00855F0F-758B-EB9E-3AB8-C69E2F68F200   JAVA**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
008602DA-BF96-4343-F9AA-6322853BD842   SYS**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
008732CD-9A7E-961E-B1DD-6CA480CC53E8   NT**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
008764D5-773A-A0CE-0E07-D1A50B2AEB9C   CR**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0088A176-1C11-E962-D58B-1F18D0E207D4   ATL**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00895341-563C-4117-837D-BCAC36A5DD26   IE**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
008977B5-B606-4A82-74FD-902541715430   NT**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0089926D-DE04-05DF-23E5-7BAF764D77DB   WIN**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0089AB79-34E9-0ABF-5AF2-3D27B3E4CBA4   ADD**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0089E20D-43CC-47F5-ADAD-D6810B74622E   [RANDOM FILENAME] - CONHOOK, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP  //WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
0089E432-038D-2B85-3BE2-F538EA8CB9CA   JAVA**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
008A3C3B-9249-57B4-CBC9-55AB9E690943   ADD**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
008A49EF-1F4A-59F9-2873-E623FDFB2AEC   JAVA**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
008A5E43-7E04-6264-19E3-CABC19B791F6   MS**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
008DB894-99ED-445D-8547-0E7C9808898D   4B_1,0,1,2_MSLAGENT.DLL - ADWARE.SLAGENT, HTTP  //SECURITYRESPONSE.SYMANTEC.COM/AVCENTER/VENC/DATA/TROJAN.SIMCSS.B.HTML
009057E0-E644-7B31-F576-A66A75B760A4   ADD**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00910FC8-0897-B399-2EF2-26EFF8788326   SDK**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
009127DE-BC8B-9CFD-F6A5-8DE090C457F8   CR**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0092CB9E-A898-102E-13F0-85FC8AF2AD31   SYS**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00942B4E-EC2D-7EFF-8608-94F77063C123   NT**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
0094E9D6-E148-BC7D-424A-678CAF6D4907   NT**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
009506E8-8CAD-4CA9-81D4-D815E7E4330A   CURSORCAFEINST.DLL - STARWARE/CURSORCAFE, HTTP  //WWW.ANCHIVA.COM/VIRUS/VIEW.ASP?VNAME=ADWARE/STARWARECURSORCAFE BROWSER PLUGIN - DETECTED AS A COMETSYS, HTTP  //VIL.NAI.COM/VIL/CONTENT/V_131069.HTM ADWARE COMPONENT
009C95E8-B287-5BB1-A8C1-CCCE652E7FA6   D3**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00A0A40C-F432-4C59-BA11-B25D142C7AB7   2IN***~*.DLL, MS****.DLL (* = RANDOM CHAR) - CLIENTMAN, HTTP  //WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=453074909 ADWARE VARIANT
00A24B03-DD53-09FF-B089-5061C12D30FD   ATL**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00A4658F-104F-49F5-B123-8172789AF3C3   URIHELPER1.DLL - UNIDENTIFIED PARASITE - SHOULD YOU HAVE ANY INFORMATION ABOUT THIS APPLICATION,   [XS4] - IF YOU ACTUALLY HAVE A COPY OF THE FILE,  PLEASE ATTACH IT TO YOUR EMAIL FOR ANALYSIS.  THANKS!
00A7FBB1-F3E5-BA11-ADCA-7115E5F5414B   CR**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00A8711A-6850-059A-543F-7899E1455BA9   API**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00A88ECE-D542-06D0-B1E9-091150D86D41   MS**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00A94FA3-6D7B-4318-1171-4B2F003FC38C   NT**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00A967B9-116E-2D7C-E935-A210A88C986F   IE**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00ABB85E-07E6-B7B9-BA96-1CA233683B48   MFC**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00ABE373-5988-C64A-2ECC-433A0B6D18C5   IE**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00AC8F9D-A0CB-27D9-59F8-9DBFA4F78894   NT**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00AC93F1-0095-2044-4A78-7147C0B300AF   ATL**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00AD3519-3F00-5087-FF3D-ADBC964ABCAE   ADD**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00AF53EB-A6A4-2A98-EA99-7B4BBFA3E903   MFC**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00B4D9DA-4CA0-9F67-B881-787806788C35   ADD**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00B4DB26-DFBE-9E21-5BD8-E7EF97E67BAD   MFC**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00B50900-FA51-47A0-9184-B4C15FE0F25A   ANYPLAYBAR.DLL  - ANYPLAY.TOOLBAR, HTTP  //KR.AHNLAB.COM/SECUINFOVIRUSVIEWENGNEW3.AHN?SEQ_NO=5622 ADWARE
00B5649E-C2D8-1DC8-AEC0-BEFBB4FF9DA4   CR**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00B78A2F-66BE-9875-FBF9-E1F486C65401   CR**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00B7DCF4-9B37-BE2B-F3F7-6C8DFB0597F0   MFC**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00B90684-CDCB-5F04-FCA4-7F1DEE956606   JAVA**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00C0618C-1BC9-8D1E-D318-81B8263C4778   SYS**32.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00C104DE-0F5C-470C-ABCF-A5B2E70752F1   QQIEHELPER**.DLL - TENCENTADDRESSBAR, HTTP  //KR.AHNLAB.COM/SECUINFOVIRUSVIEWENGNEW3.AHN?SEQ_NO=5627 ADWARE - BUNDLED WITH THE TENCENT_QQ, HTTP  //WWW.TENCENT.COM/INDEX_E.SHTML INSTANT MESSAGING CLIENT
00C104F7-0F5C-470C-ABCF-A5B2E70752F1   BAIDU.DLL  - PARASITE OF CHINESE ORIGIN HAILING FROM BAIDU.COM - A BAIDUBAR, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=44261 ADWARE COMPONENT
00C104F7-0F5C-470C-ABCF-A5B2E70752F1   WTLHLP.DLL, APPHLP.DLL, ACCZIXP.DLL, WPPHLP.DLL - PARASITE OF CHINESE ORIGIN HAILING FROM BAIDU.COM - A BAIDUBAR, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=44261 ADWARE COMPONENT
00C104F7-0F5C-470C-ABCF-A5B2E70752F1   LPKSAT.DLL, LPKWAT.DLL - PARASITE OF CHINESE ORIGIN, A BAIDUBAR, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=44261 ADWARE VARIANT
00C104F7-0F5C-470C-ABCF-A5B2E70752F1   KBDICS.DLL, WCCZIXP.DLL, WBDICS.DLL - PARASITE OF CHINESE ORIGIN HAILING FROM BAIDU.COM - A BAIDUBAR, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=44261 ADWARE COMPONENT - ALSO DETECTED BY ANTIVIR, HTTP  //WWW.AVIRA.COM/ ANTIVIRUS AS TR/DROP.ATLANDICS
00C9C6A4-1889-46BC-B73A-F4DDCC042735   [RANDOM FILE NAME] - VUNDO.B, HTTP  //WWW.BLEEPINGCOMPUTER.COM/FORUMS/HOW-TO-REMOVE-THE-TROJANVUNDOB-SEARCH42COM-MSEVENTS-TX18610-0.HTML#ENTRY110599 ADWARE VARIANT
00C9D850-244D-10E1-B3C1-10805E499D95   LSPOOLNT.DLL - OPENWARES "CONTEXTUAD" AKA MEDIABACK ADWARE
00C9D850-244D-10E1-B3C1-20805E499D95   WINSPL32.DLL - OPENWARES "CONTEXTUAD" AKA MEDIABACK ADWARE
00C9D850-244D-10E1-B3C9-10805E499D95   LCLSPLNT.DLL - OPENWARES "CONTEXTUAD" AKA MEDIABACK ADWARE
00C9D850-244D-11E1-B3C9-10805E499D95   LCLSPL.DLL - OPENWARES "CONTEXTUAD" AKA MEDIABACK ADWARE
00CEAF8F-BF59-429B-A1D9-91C88CCFE94B   ABX_SEARCH.DLL, ABX_SE~*.DLL, RMNDLL32.DLL - ADWARE.ABXTOOLBAR, HTTP  //WWW.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.ABXTOOLBAR.HTML
00D07086-69D6-6192-75BE-263181D1C881   SDK**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00D0E786-A9E4-4EC5-82BA-E4E57D285B83   [RANDOM FILENAME] - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE COMPONENT
00D13CE9-1879-41BD-B8A3-EA3CB1BD01BC   HELPER.DLL, HELPER1.DLL - TROJ/BANKER-DTE, HTTP  //WWW.SOPHOS.COM/SECURITY/ANALYSES/TROJBANKERDTE.HTML TROJAN
00D6A7E7-4A97-456F-848A-3B75BF7554D7   PERFECTNAVBHO.DLL, PERFECTNAV150C.DLL, PERFEC~*.DLL - EUNIVERSE/INCREDIFIND, HTTP  //WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=453078517 PARASITE
00DBDAC8-4691-4797-8E6A-7C6AB89BC441   *****.DLL ( * = RANDOM CHAR) - CONHOOK-N, HTTP  //WWW.SOPHOS.COM/VIRUSINFO/ANALYSES/TROJCONHOOKN.HTML TROJAN COMPONENT - RESPONSIBLE FOR INSTALLING A VARIANT OF VUNDO, HTTP  //WWW.BLEEPINGCOMPUTER.COM/FORUMS/HOW-TO-REMOVE-THE-TROJANVUNDOB-SEARCH42COM-MSEVENTS-TX18610-0.HTML#ENTRY110599 ADWARE
00DD5500-8540-964C-2DA8-C829F9E58A84   NT**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00DD6309-C35E-7ACF-CE4F-6C92538A0A8D   CR**.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00DFBD56-5EA0-27AF-72CF-75BB300B83DF   CR**32.DLL (* = RANDOM CHAR) - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00E9792C-699E-4C18-8AE4-67B291EA1C74   [RANDOM FILENAME] - CONHOOK, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP  //WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
00E97FF9-C2D5-30AF-2580-1DF6C99280CB   IP**.DLL - COOLWEBSEARCH/HOMESEARCH, HTTP  //CWSHREDDER.NET/CWSHREDDER/CWSCHRONICLES.HTML#HOMESEARCH ADWARE COMPONENT
00F12C64-735E-4C25-9A9E-50701A0E672F   [RANDOM FILENAME] - CONHOOK, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=45786 AKA CHISYNE, HTTP  //WWW3.CA.COM/SECURITYADVISOR/VIRUSINFO/VIRUS.ASPX?ID=48117 TROJAN VARIANT - VIRTUMONDE/VUNDO, HTTP  //WWW.SYMANTEC.COM/SECURITY_RESPONSE/WRITEUP.JSP?DOCID=2004-112111-3912-99 ADWARE DOWNLOADER
00F16DC8-1B2A-42F4-B18B-E21DA9D2D7FD   01A00.DLL - FASTFIND.ORG SUBSEARCH, HTTP  //WWW.PESTPATROL.COM/PESTINFO/S/SUBSEARCH.ASP
00F1D395-4744-40F0-A611-980F61AE2C59   DSR.DLL - ADWARE.DRSEARCH, A IEPLUGIN, HTTP  //SECURITYRESPONSE.SYMANTEC.COM/AVCENTER/VENC/DATA/ADWARE.IEPLUGIN.HTML VARIANT
00000000-0000-0000-0000-000000000001   KOOLBAR.DLL - KOOLBAR, HTTP  //WWW.KOOLBAR.NET/
00490D79-3A7F-4C8A-9E04-2BC1D89676F1   100%_FREE_SPADES_TOOLBAR.DLL - TOOLBAR BUNDLED WITH DREAMQUEST'S, HTTP  //DQSOFT.COM/DOWNLOAD.HTML "100% FREE 500 CARD GAME" FOR WINDOWS, REDIRECTING SEARCHES TO WWW.100PERCENTFREE-TOOLBAR.COM
00BE86F6-2E61-4C1E-A36B-AE233EE21FA2   ESOUBAR.DLL - ESOU.TOOLBAR, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?THREATID=116560 ADWARE
00000000-0000-0000-0000-100000000003   E83D919E87...2A33D1D2_35.EXE ADDED BY THE TROJAN-DOWNLOADER.WIN32.SMALL.BWY 
00000000-0000-0000-0000-000330050660   ABOXINST_INT20.EXE REPORTED AS WIN32/TROJANDOWNLOADER.VB.FI BY NOD32. 
00000000-6666-0704-0B53-2C8830E9FAEC   AXLOAD.CAB SITE KEY.ONE2BILL.DE BLOCKED BY THIS HOST FILE. 
000000A0-0000-0000-0000-000000000011   KEYSAVER %SYSTEM%\KEYSAVER.DLL TROJAN-DROPPER.WIN32.SMALL 
00000000-0000-0000-0000-000020030000   A091AEL.EXE DIALER - MORE HERE 
00000012-890E-4AAC-AFD9-000000000000   HARDCORETEENS.XXX ADWARE, BROWSER HIJACKER - MORE HERE 
00000000-0000-0000-0000-000020040000   HTTP://SECURITYRESPONSE.SYMANTEC.COM/AVCENTER/VENC/DATA/DIALER.TRAFFICADVANCE.HTML 
00000000-0000-0000-0000-100005000004   FILE B_35.EXE ADDED BY THE TROJAN-DOWNLOADER.WIN32.SMALL.BWY 
00000000-0000-0000-0000-100005000004   D4511B3C2E80E749C8...C4F15F6B_13.EXE ADDED BY THE TROJAN-DOWNLOADER.WIN32.SMALL.BWY 
00000005-0000-0000-0000-100005000004   A2D6A66E9331D6976483FCAA95FAF748_35.EXE SITE BLOCKED BY MVP HOSTS FILE. MORE: HERE 
00000EF1-0786-4633-87C6-1AA7A44296DA   HTTP://WWW.SPYWAREGUIDE.COM/PRODUCT_SHOW.PHP?ID=427 
00000000-5555-0704-0B53-2C8830E9FAEC   HTTP://RESEARCH.SUNBELT-SOFTWARE.COM/THREAT_DISPLAY.CFM?NAME=IELOADER&THREATID=39158&SEARCH=IELOADER 
00000000-CDDC-0704-0B53-2C8830E9FAEC   HTTP://RESEARCH.SUNBELT-SOFTWARE.COM/THREAT_DISPLAY.CFM?NAME=IELOADER&THREATID=39158&SEARCH=IELOADER 
00000000-8633-1405-0B53-2C8830E9FAEC   HTTP://WWW3.CA.COM/SECURITYADVISOR/PEST/PEST.ASPX?ID=453074881 
00000000-DDBB-0704-0B53-2C8830E9FAEC   HTTP://WWW.VIRUSLIST.COM/EN/VIRUSES/ENCYCLOPEDIA?VIRUSID=39586 
00000000-6CB0-410C-8C3D-8FA8D2011D0A   IMESHBHO.DLL - IMESH, HTTP  //RESEARCH.SUNBELT-SOFTWARE.COM/THREATDISPLAY.ASPX?NAME=IMESH&THREATID=6994 MEDIABAR
0000001D-BA9B-11D2-BDF1-0090272A6D78   SMBAR.DLL - SURFMONKEY, HTTP  //WWW.CEXX.ORG/SURFMONK.HTM
0000CC75-ACF3-4CAC-A0A9-DD3868E06852   DAPBHO.DLL - DAP, HTTP  //WWW.SPEEDBIT.COM/DEFAULTT.ASP?
001DBB38-E6E5-4D02-9E49-2B6A25936928   MAGICALMOUNTAIN.DLL, MAGICA~1.DLL - MAGICAL_MOUNTAIN_TOOLBAR, HTTP  //WWW.MAGICALMOUNTAIN.NET/MMTOOLBAR/MMTOOLBAR.ASP - A SOFTOMATE, HTTP  //WWW.CA.COM/US/SECURITYADVISOR/PEST/PEST.ASPX?ID=453082746 TOOLBAR VARIANT -  SOFTOMATE CUSTOMIZES TOOLBARS TCUSTOMERS NEEDS. THE DLL FILES FOR THEIR TOOLBARS CONTAIN SOME SPYWARE/ADWARE FUNCTIONALITY, ALTHOUGH NOT ALL OF THE TOOLBARS USE THIS.  REMOVE UNLESS YOU TRUST IT.
001F2570-5DF5-11D3-B991-00A0C9BB0874   EBAYBAND.DLL - EBAY TOOLBAR, HTTP  //PAGES.EBAY.COM/EBAY_TOOLBAR/ 
0096CC0A-623C-4829-AD9C-19AF0DC9D8FE   DAPIEBAR.DLL - DAP, HTTP  //WWW.SPEEDBIT.COM/DEFAULTT.ASP? 
009DDA87-4E44-437F-8239-40B333381870   TBDODE.DLL, TBDOD0.DLL, TBDOD1.DLL - DODELOVE_TOOLBAR, HTTP  //DODELOVE.OURTOOLBAR.COM/ - A CONDUIT/EFFECTIVEBRAND, HTTP  //WWW.CONDUIT.COM/BENEFITS/DEFAULT.ASPX "FREE COMMUNITY" TOOLBAR - MODIFIES THE DEFAULT IE SEARCHHOOK. SOME CONDUIT TOOLBARS ARE REPUTED THAVE A CERTAIN ADWARE/TRACKWARE FUNCTIONALITY.
00A6FAF1-072E-44CF-8957-5838F569A31D   MWSSRCAS.DLL - MYWEBSEARCH/MYSEARCH, HTTP  //VIL.MCAFEESECURITY.COM/VIL/CONTENT/V_134251.HTM - NOW OWNED BY ASK JEEVES INC - SEE NOTE, HTTP  //WWW.BENEDELMAN.ORG/SPYWARE/INSTALLATIONS/ASKJEEVES-BANNER/
00B1D504-60FD-44AE-B142-996FF6C5B7CF   CU-1.DLL - CHRISTIANSUNITE_TOOLBAR, HTTP  //TOOLBAR.CHRISTIANSUNITE.COM/ - DETECTED BY SOME ANTIVIRUS SOFTWARE AS "ADWARE.SOFTOMATE"
00BD2861-C654-4694-A44A-98642D73247D   MTSSRCAS.DLL - MYWEBSEARCH/MYSEARCH, HTTP  //VIL.MCAFEESECURITY.COM/VIL/CONTENT/V_134251.HTM - NOW OWNED BY ASK JEEVES INC - SEE NOTE, HTTP  //WWW.BENEDELMAN.ORG/SPYWARE/INSTALLATIONS/ASKJEEVES-BANNER/
