CLSID List Results
BHOs, Toolbars, SHs, Explorer Bars
BHOs, Toolbars, SHs, Explorer Bars
| CLSID | Name | Filename | Description | Status |
| {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} | BS Player Toolbar, BS Player ControlBar Toolbar | tbBS_P.dll, tbBS_0.dll, tbBS_1.dll, tbBS_2.dll, prxtbBS_P.dll, prxtbBS_0.dll, prxtbBS_1.dll, prxtbBS_2.dll, prxtbBS_3.dll | BS Player Toolbar - a Conduit "Community Toolbar" - redirects searches to search.conduit.com. Conduit toolbars are also reputed to have a certain trackware functionality and will often come bundled with various third party software - remove unless you wittingly installed it and intend it to be there - detected by Malwarebytes Anti-Malware as "PUP.Optional.Conduit" - also see here | O BHO, TB, SH |
| {22347AEE-A37A-45D3-8804-FDC7F9289CE1} | Player | orgnavi.dll | Downloader trojan causing false spyware warnings and connecting to fake "security sites", member of the FakeAlert aka SmitFraud malware family | X BHO |
| {E5AF0624-F539-47D9-BA37-D8B339E858F4} | Player | orgnavi.dll | Downloader trojan causing false spyware warnings and connecting to fake "security sites" - member of the FakeAlert aka SmitFraud malware family | X BHO |
| {FAB71C44-8C45-43EF-B1BE-2E33076166D4} | Player | orgnavi.dll | Downloader trojan causing false spyware warnings and connecting to fake "security sites", member of the FakeAlert aka SmitFraud malware family | X BHO |
| {72AC05E3-89FD-42BB-A646-C2EE381A4908} | Player | orgnavi.dll | Downloader trojan causing false spyware warnings and connecting to fake "security sites", member of the FakeAlert aka SmitFraud malware family | X BHO |
Startup List Results
Startup Entry
Startup Entry
| Name | Filename | Description | Status |
| iLivid | iLivid.exe | Added by the iLivid.exe Trojan Downloader.Agent Note: Located in \%Documents and Settings%\user1\local settings\application data\ | X |
| BS Player | bsplayer.exe | BSplayer - A video player used to play avi, mpg, wmv and other multimedia files. | N |
| Player | Player.exe | Detected by Kaspersky as Trojan.Win32.Delf.eza. Note: Located in %AppData%\Adobe | X |
| SVA Player | SVAplayer.exe | QuickFlicks Streaming Player - regarded as spyware. See here for details of how to disable or uninstall it | X |
| MP4 Player | mp4Player.exe | Related to MPEG4IP From Open Source. This is a tool for streaming video and audio that is standards-oriented and free from proprietary protocols and extensions. Note: Located in \%Program Files%\MP4 Player\ | U |
O9 List Results
Internet Explorer Buttons
Internet Explorer Buttons
| CLSID | Name | Filename | Description | Status |
| {d81ca86b-ef63-42af-bee3-4502d9a03c2d} | MUSICMATCH MX Web Player | openWebRadio.html | MusicMatch MX Web Player. | L |
| {03b5d444-9d5c-4361-aab5-f81f37f0f704} | Text To Speech Live Player | Related to Text_to_Speech Live Player.It integrates with MS Word, WordPerfect, Internet Explorer and Windows Explorer, lets you direct listen to text in documents, web pages, emails etc. Note: Located in C:\Program Files\Text To Speech Live Player\ | L |
O23 List Results
Windows Services
Windows Services
| Name | Filename | Description | Status |
| Remote Media Player | lsscs.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) | X |
| Player Location Check | service.exe | Related to GeoComply GeoLocation Service from GEOCOMPLY USA, INC. Note: Located in \%Program Files%\GeoComply\\PlayerLocationCheck\Application\ | L |
| SafeGuard SGLOG Player (SgLogPlayer) | SgLogPlayer.exe | Related to SafeGuard_Easy Hard Disk Encryption from Utimaco. Note: Located in C:\WINDOWS\system32\ | L |
| Motorola Digital Audio Player Manager | MotorolaDAP.exe | Related to Motorola Inc. Motorola Digital Audio Player. Note: Located in \%WINDIR%\%System%\ | L |
| @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) | wmpnetwk.exe | Related to Windows_Media_Player Network Sharing Service. Note: Located in %ProgramFiles%\Windows Media Player\ | L |
O16 List Results
ActiveX
ActiveX
| CLSID | Name | Filename | Description | Status |
| {0C3F7D74-ADA5-4976-8908-A8189590DAFA} | 3DGreetings Player | vroom.CAB | 3DGreetings E-card viewer. | L |
| {02466323-75ED-11CF-A267-0020AF2546EA} | VivoActive Player | http://www.real.com/vivo/index.html | O | |
| {CDCD8794-3A4C-11DE-B268-E38655D89593} | PureSolo Player | puresolo.cab | related to PureSolo Player, a music program | L |
| {4F29DE54-5EB7-4D76-B610-A86B5CD2A234} | GameTap Player | GameTapWebPlayer.cab | Related to GameTap online games. | U |
| {E6D23284-0E9B-417D-A782-03E4487FC947} | Pearson MathXL Player | MathPlayer.cab | Related to Pearson_Education Inc. Online Learning tools. | L |
FF Extensions List Results
Firefox Extension
Firefox Extension
| CLSID | Name | Filename | Description | Status |
| jid1-h2qSGwT1a1jJTk@jetpack | Switch to Flash® Player for YouTube™, YouTube™ All Flash® Player | jid1-h2qSGwT1a1jJTk@jetpack.xpi | Switch to Flash® Player for YouTube™ (formerly YouTube™ All Flash® Player) plays all YouTube™ videos in Adobe Flash® Player. | L |
| {cd90bf73-20f6-44ef-993d-bb920303bd2e} | Veoh Web Player Toolbar, Veoh Web Player Community Toolbar: | Veoh Web Player Toolbar - a Conduit "Community Toolbar" - modifies the default IE URL search hook. Conduit toolbars are reputed to have a certain trackware functionality. | O | |
| youtube-video-player@lejenome.me | Simple Youtube HTML5 Video Player, Youtube HTML5 Video Player | youtube-video-player@lejenome.me.xpi | Simple Youtube HTML5 Video Player replaces YouTube video player with Firefox native video player. Note: Some legacy sites force using Flash player, you will need to install No Flash add-on to support them. Note: Deprecated in favor of HTML5 Video EveryWhere extension. | L |
| firefox@tvunetworks.com | TVU Web Player | TVUPlayer for watching TV channels distributed through TVU Networks online platform. Note: Discontinued product and service - TVUPlayer no longer works. | L | |
| magicplayer@torrentstream.org | TS Magic Player | magicplayer@torrentstream.org.xpi | AS (TS) Magic Player - Old add-on for Ace Stream Media desktop software, installed from the full package or manually from magicplayer.torrentstream.org, later replaced with "Ace Stream Web Extension". Privacy Policy - Ace Stream extensions contain an advertising module, which injects ads on websites. Note: "Location" depends on the installation method. The full package installs Windows Registry (user-level) extension outside of the Firefox profile - no Remove button in the Add-ons Manager. The manual installation creates the XPI file in the Firefox profile. Note: Newer versions use different IDs matching the following pattern: *@acestream.org. | X |
Active Setup List Results
Active Setup - Installed Component
Active Setup - Installed Component
| CLSID | Name | Filename | Description | Status |
| {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} | Microsoft NetShow Player, NSPlay, Microsoft Windows Media Player | wmpdxm.dll, Msdxm.ocx | Microsoft NetShow or Windows Media Player | L |
| {D27CDB6E-AE6D-11cf-96B8-444553540000} | Adobe Flash Player | (no file) | Adobe Flash Player | L |
| {D9689C1F-B8E6-462D-AFC8-69A79D86110A} | Video Player, VideoPlayerV3beta5015 | VideoPlayerV3beta5015.dll | Parasite, a variant of Adware:Win32/BetterSurf, shows popups and advertisements - detected by Malwarebytes Anti-Malware as Adware.VPlayer or Adware.BetterSurf | X |
| {6BF52A52-394A-11d3-B153-00C04F79FAA6} | Microsoft Windows Media Player | unregmp2.exe [command line:] rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStu b", | Microsoft Windows Media Player | L |
| {22D6F312-B0F6-11D0-94AB-0080C74C7E95} | Microsoft Windows Media Player | unregmp2.exe | Microsoft Windows Media Player | L |