CLSID List Results
BHOs, Toolbars, SHs, Explorer Bars
BHOs, Toolbars, SHs, Explorer Bars
| CLSID | Name | Filename | Description | Status |
| {8932AF4E-9AE7-402A-B5E2-0084E8454F8D} | winspool | winspool.dll | Password stealer, detected by Kaspersky antivirus as Trojan.Win32.Agent.ecf | X BHO |
| {9696C043-3C58-468A-AF8E-538BACFF57A5} | winspool | winspool.dll | Password stealer, detected by Kaspersky antivirus as Trojan.Win32.Agent.ecf | X BHO |
| {36DBC179-A19F-48F2-B16A-6A3E19B42A87} | (no name) | systeminfo.dll, rundll32.dll, esentutl.dll, tskill.dll, odbcad32.dll, winver.dll, rasdial.dll, setup.dll, spoolsv.dll, finger.dll, charmap.dll, runonce.dll, scardsvr.dll, winspool.dll, any filename taken at random from the System or System32 folder | Password stealer trojan, detected by Symantec as Infostealer.Bzup.B | X BHO |
Startup List Results
Startup Entry
Startup Entry
| Name | Filename | Description | Status |
| System Update2 | winspool.exe | Added by the Autotroj-C TROJAN! | X |
| Windows Spool | winspool.exe | Added by a variant of the IRCBOT Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. | X |
O20 List Results
AppInit_DLLs & Winlogon Notify
AppInit_DLLs & Winlogon Notify
| Name | Filename | Description | Status |
| (no name) | %SYSDIR%\winspool.dll | Trojan.PurityScan.EN | X AppInit_DLLs |