CLSID List Results
BHOs, Toolbars, SHs, Explorer Bars
BHOs, Toolbars, SHs, Explorer Bars
| CLSID | Name | Filename | Description | Status |
| {11111111-1111-1111-1111-110611191184} | Koala Personal Search, KP Search bear v2, b5a025f0f4900131d6f801655e7 292940061984 | Koala Personal Search-bho.dll, Koala Personal Search-bho64.dll, KP Search bear v2-bho.dll | Crossrider cross-browser plugin, often bundled with third party software or part of an adware bundle - detected as Adware.CrossRider and by Malwarebytes Anti-Malware as "PUP.Optional.CrossRider" | X BHO |
| {799A370D-5993-4887-9DF7-0A4756A77D00} | SearchAddon | search.dll, SEARCH~1.DLL, searchaddon.dll | GonnaSearch adware | X BHO |
| {4E7BD74F-2B8D-469E-C8ED-EA2EFAD2ED61} | PCH Search & Win Toolbar | searchandwintoolbar.dll, SEARCH~1.DLL, SEARCH~2.DLL | PCH Search & Win Toolbar | O BHO, TB |
| {774A35E7-384B-4B70-A612-78B85018A812} | SearchEye SE | SearchEye SEb.dll, SEARCH~1.DLL, SEARCH~2.DLL | Parasite of Korean origin hailing from searcheye.co.kr and detected as Win-Adware/SearchEye, see here | X BHO |
| {08C06D61-F1F3-4799-86F8-BE1A89362C85} | Search Class | SearchPageURL.dll, SEARCH~1.DLL, SEARCH~*.DLL | Wanadoo , now Orange search toolbar | L SH |
Startup List Results
Startup Entry
Startup Entry
| Name | Filename | Description | Status |
| Iexploit | Iexploit.html | Added by the VBS.Inker.B WORM! Note: This worm file is found in the Windows or Winnt folder. | X |
| MoveSearch | Search.exe | PigSearch adware | X |
| WhenUSearch | Search.exe | SaveNow adware | X |
| My Web Search Installer | My Web Search Installer(00accb88).exe | Added by the My Web Search customizable Internet Explorer search toolbar with various other tools as as SMileyCentral, Zwinky, and CursorMania without your concent. Note: Located in \%Program Files%\mywebsearch\bar\setups\ | X |
| File-Extensions.org Search | File-Extensions.org-Search.exe | Related to Digidy, s.r.o. easily find the information about any file extension that you are looking for including programs associated with it.. Note: Located in \%Program Files%\File Extensions\ | N |
O9 List Results
Internet Explorer Buttons
Internet Explorer Buttons
| CLSID | Name | Filename | Description | Status |
| {45DB34C3-955C-11D3-ABEF-444553540002} | Safenotes | RoboFormComEditNote.html | Related to Roboform Password Manager and Web Form Filler that completely automates password entering and form filling. Note: Located in \%Program Files%\Siber Systems\AI RoboForm\ | L |
| {3B54DEAB-C6D4-48a8-8C32-A70558643400} | Download Video | fvdRunner.html | Related to Bitberry Software File downloader. Note: Located in \%Program Files%\FinalVideoDownloader\ | L |
| {B30C9F17-BF16-481e-BAEA-44A86128E1B4} | Download Video | ytmRunner.html | Related to Bitberry Software YouTube to MP3 Converter. Note: Located in \%Program Files%\FreeYouTubeToMP3TURBOConverter\ | L |
| {21196042-830F-419f-A594-F9D456A6C29A} | Add to TimeLeft Auction Watch | TLIntergIE.html | Related to TimeLeft a versatile desktop utility - it can be used as a countdown clock, reminder, clock, alarm clock, tray clock, stopwatch, timer, sticker, auction watch, work days/hours countdown clock and time synchronization utility. TimeLeft uses Winamp skins to show digits and text. Note: Located in \%Program Files%\TimeLeft3\ | L |
| {7966A32A-5783-4F0B-824C-09077C023080} | Download Video on This Page | IEPage.html | Related to YouTube Video Downloader Download videos from Youtube, Google, veoh, Tangle, Vimeo, Myspace Video, Megavideo.com, DailyMotion.com etc. Note: Located in \%ROOT%\Gogago\YouTube Video Downloader\ | L |
O23 List Results
Windows Services
Windows Services
| Name | Filename | Description | Status |
| Sage.Search.Indexer | Sage.Search.Indexer.exe | Related to © Sage Group Indexer for Accounting Software. Note: Located in \%Program Files%\Common Files\Sage\2070\Sage Search 1.0\Bin\ | L |
| Sage.Search.Web.Server | Sage.Search.Web.Server.exe | Related to © Sage Group Indexer for Accounting Software. Note: Located in \%Program Files%\Common Files\Sage\2070\Sage Search 1.0\Bin\ | L |
O16 List Results
ActiveX
ActiveX
| CLSID | Name | Filename | Description | Status |
| {086A694F-91FB-4068-B44C-124FB69BF05D} | SearchWWW | search.cab | Browser hijacker - more here | X |
| {0E6D264F-8C0C-49FB-9C4C-E3F93E584AB2} | Trojan.Win32.StartPage.rr | b-search.cab | Trojan, more here | X |
SEH List Results
ShellExecuteHook
ShellExecuteHook
| CLSID | Name | Filename | Description | Status |
| {CFCF4540-DEA5-4C5D-B3BA-EA823D7AB748} | (no name) | %WinDir%\search.dll | Troj/OnLineG-C Trojan | X |
| {56F9679E-7826-4C84-81F3-532071A8BCC5} | Windows Desktop Search Namespace Manager | %ProgramFiles%\Windows Desktop Search\MSNLNamespaceMgr.dll | Windows Desktop Search | L |
FF Extensions List Results
Firefox Extension
Firefox Extension
| CLSID | Name | Filename | Description | Status |
| @firefox-build-link-html | Build Link Html | @firefox-build-link-html.xpi | Build Link Html creates a html link from the selected text or the current page's title. | L |
| view-scratchpad-as-html-jetpack@erikvold.com | View Scratchpad As HTML | view-scratchpad-as-html-jetpack@erikvold.com.xpi | View Scratchpad As HTML adds a menuitem to Scratchpad which allows you to view the content as html in a new tab, and have the tab update as you change content in Scratchpad. | L |
| @extension-for-gmail-basic-html-view | Extension for Gmail Basic HTML View | @extension-for-gmail-basic-html-view.xpi | Extension for Gmail Basic HTML View adds functions for Gmail Basic HTML view. | L |
| @search-via-url | Search via URL | @search-via-url.xpi | Search via URL creates context menu items for quick searching of selected text via configurable URL's. | L |
| search@disconnect.me | Disconnect Search | search@disconnect.me.xpi | Disconnect Search lets you search privately using your favorite search engine. See also other Disconnect add-ons. | L |
Active Setup List Results
Active Setup - Installed Component
Active Setup - Installed Component
| CLSID | Name | Filename | Description | Status |
| {L6GX0X7B-A565-4Y4V-68F8-17XJKHI4X4B0} | (no name) | search engine.exe | Infostealer trojan, detected by Microsoft as Worm:Win32/Rebhip.A - also see here | X |