CLSID List Results
BHOs, Toolbars, SHs, Explorer Bars
BHOs, Toolbars, SHs, Explorer Bars
| CLSID | Name | Filename | Description | Status |
| {B4F3A835-0E21-4959-BA22-42B3008E02FF} | URLRedirectionBHO, Office Document Cache Handler | URLREDIR.DLL | Part of Microsoft Office 2010 - responsible for "caching Office documents on client computer, with differential synchronization between Office client and SharePoint server" | L BHO |
| {C26B6E5C-9D27-43C7-AAB4-F8A64C09F4DC} | Microsoft.Medv.UrlRedirecti onBHO Class | UrlRedirectionBHO.dll | Part of Microsoft Enterprise Desktop Virtualization - allows controlling which web URLs will open in the host browser and which will open in the guest browser. | L BHO |
| {3304F17F-732C-4AC6-BF67-DBDC8B88C11F} | &UpdateCheck.dll | MicrosoftExtensions.dll, MICROS~1.DLL | AntivirusGT or Antivirus GT - rogue "security software" using false positives as goad to purchase | X BHO |
| {03E02289-B9F4-4BB4-B93B-5332A1A1B908} | &UpdateCheck.dll | MicrosoftExtensions.dll, MICROS~1.DLL | AntivirusGT or Antivirus GT - rogue "security software" using false positives as goad to purchase | X BHO |
| {594D3E1E-916D-479B-9657-664346E44549} | &UpdateCheck.dll | MicrosoftExtensions.dll, MICROS~1.DLL | AntivirusGT or Antivirus GT - rogue "security software" using false positives as goad to purchase | X BHO |
SEH List Results
ShellExecuteHook
ShellExecuteHook
| CLSID | Name | Filename | Description | Status |
| {01F6EB6F-AB5C-1FDD-6E5B-FB6EE3CC6CD6} | (no name) | %ProgramFiles%\Internet Explorer\HiJack.dll | Passwordstealer | X |
FF Extensions List Results
Firefox Extension
Firefox Extension
| CLSID | Name | Filename | Description | Status |
| {D46504D3-4959-4351-AED6-C7EA276DBB93} | Contextual Google Image Search, コンテキスト Google 画像検索 | {D46504D3-4959-4351-AED6-C7EA276DBB93}.xpi | Contextual Google Image Search adds Google Image Search to right-click menu on images. | L |
Active Setup List Results
Active Setup - Installed Component
Active Setup - Installed Component
| CLSID | Name | Filename | Description | Status |
| {XSO3J00A-4F83-58F1-BA15-K2XR0YB7GBI4} | (no name) | Micros.exe | Infostealer trojan, see here | X |
| {D053XGTD-1100-76RO-62DH-T5G1E2DI447J} | (no name) | Micros.exe | Infostealer trojan, detected by DrWeb as Trojan.Click2.19639 - also see here | X |