CLSID List Results
BHOs, Toolbars, SHs, Explorer Bars
BHOs, Toolbars, SHs, Explorer Bars
| CLSID | Name | Filename | Description | Status |
| {9201F4D5-426B-46AD-8D07-EADFBF594C21} | Shockwave Flash Fx | flashfx.dll | Malware, dropper detected by ESET's Nod32 antivirus as a variant of Win32/Kryptik.AUDQ | X BHO |
| {32C18258-23D0-41b0-A87D-2672ABFB5366} | Shockwave Flash | sflash.dll, shockw.dat | Password stealer trojan, identified as Trojan-Spy:W32/Banker.GMH | X BHO |
| {4A12DFA2-5C41-4E3A-A7F3-6849B5E5381B} | Shockwave Flash 0bject | Flash.dll | Downloader and hijacker of Chinese origin hailing from mokead.com - identified as AdMoke adware | X BHO |
| {110E25E1-8103-4368-8662-B1188985D70A} | Shockwave Flash Object | ssl.dll | Infostealer trojan, dropper detected by Kaspersky antivirus as Trojan-Dropper.Win32.Dapato.bzzh - also see here | X BHO |
| {FCADDC14-BD46-408A-9842-CDBE1C6D37EB} | Shockwave Flash Object | flash.dll | Password stealer trojan of Brazilian origin, see this ThreatExpert Report | X BHO |
Startup List Results
Startup Entry
Startup Entry
| Name | Filename | Description | Status |
| Shockwave | csrss.exe | Added by the W32.Sndog@mm WORM! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate program file in \%WINDIR%\System32\ | X |
| Shockwave Init | SWINIT.EXE | Part of Macromedia Shockwave. Controls the Shockwave Remote Control Panel. The Remote Control can be activated manually from the Start Menu by locating and selecting Shockwave and then Shockwave Remote under Programs | N |
| Shockwave Support | FlashPlayer.exe | W32/Delf-DRA | X |
| Shockwave Updater | SWHELP~1.EXE SWHELP~2.EXE SwHelper_nnnnnnn.exe | Related to Shockwave Updater from Adobe. Backweb application. Note: Located in \%WINDIR%\System32\Adobe\Shockwave | N |
| Shockwave Flash | flashcxz.exe | Unidentified info stealer. Information at Threat Expert Note: Located in %temp% | X |
O16 List Results
ActiveX
ActiveX
| CLSID | Name | Filename | Description | Status |
| {D27CDB6E-AE6D-11CF-96B8-444553540000} | Shockwave Flash Object | swflash.cab | Related to Macromedia now Adobe.com | L |
| {D27CDB6E-AE6D-11CF-96B8-444571440000} | Shockwave Flash Object | swflash.cab | Related to Macromedia Shockwave Player | L |