CLSID List Results
BHOs, Toolbars, SHs, Explorer Bars
BHOs, Toolbars, SHs, Explorer Bars
| CLSID | Name | Filename | Description | Status |
| {A55CC169-0B08-427b-ABC3-093A2FE2B599} | IE?????? [Windows Explorer] | wscript.dll | Browser hijacker of Chinese origin, also see this Pandasecurity Malware Report | X BHO |
Startup List Results
Startup Entry
Startup Entry
| Name | Filename | Description | Status |
| Registry | wscript.exe | Added by the VBSWG VIRUS! | X |
| explorer | wscript.exe <filename> | Sneaky way to start any VBS script. Many viruses use VBS files | X |
| Time Zone Synchronization | wscript zshell.js | Added by the NETDEX-A VIRUS! | X |
| Winhlp32 | Wscript.exe ..Msexec32.vbs | Added by the GANT.B VIRUS! | X |
| Registry | wscript.exe ShakiraPics.jpg.vbs | Added by the VBSWG.AQ WORM! Note that wscript.exe is a legitimate Microsoft file used to launch script files and shouldn't be deleted. The "ShakiraPics.jpg.vbs" file is located in the Winnt or Windows folder | X |
Active Setup List Results
Active Setup - Installed Component
Active Setup - Installed Component
| CLSID | Name | Filename | Description | Status |
| {0248EAF2-030A-466e-8DFA-C3BFE662E028} | (no name) | [wscript.exe] "%CommonProgramFiles%\cc.js" | Infostealer trojan, detected by Avira as BDS/Zegost.AG.2 | X |