Global Search

Not sure what a file is? Sort through the possibilities with a quick search of all of the lists.
Or get more accurate results by browsing and searching by list.
CLSID List Results
BHOs, Toolbars, SHs, Explorer Bars

CLSID Name Filename Description Status
{51dd3535-abea-484a-b1cf-06ab7b092c0c}Babylon Toolbar by Visicombabylon01X.dllBabylon Toolbar by Visicom, bundled with various third party software - remove unless you wittingly installed it and/or intend it to be there.O BHO, TB
{9D2C4CFB-0C11-4658-9EF5-B05BED9CC447}DVA Mediatemlxopqqem.dllAdware downloader causing false spyware warnings and connecting to rogue "security sites", a member of the Trojan-Downloader.Zlob.Media-Codec aka NewMediaCodec malware familyX BHO
{4480F41F-F91F-4781-B1EA-30D261DA06AC}DVA Mediatemlxopqxpw.dllAdware downloader causing false spyware warnings and connecting to rogue "security sites", a member of the Trojan-Downloader.Zlob.Media-Codec aka NewMediaCodec malware familyX BHO
{D878CD49-CE41-4434-831D-EFC15D06D25C}DVA Mediatemlxopqnmd.dllAdware downloader causing false spyware warnings and connecting to rogue "security sites", a member of the Trojan-Downloader.Zlob.Media-Codec aka NewMediaCodec malware familyX BHO
{566C6071-FBB6-490C-A333-E489DDE9424D}DVA Mediatemlxopqrxg.dllAdware downloader causing false spyware warnings and connecting to rogue "security sites", a member of the Trojan-Downloader.Zlob.Media-Codec aka NewMediaCodec malware familyX BHO

Startup List Results
Startup Entry

Name Filename Description Status
Go My MediaGo-My-Media.exeAdded by the Go My Media Browser hijacker. Note: Located in \%Program Files%\SecuredNet\X
TV MediaTvm.exeCleverIEHooker hijacker variantX
Flash Media^^% ^ %%% %^%%%^%%^%^% % ^^%% % %^^^^ ^%%^%% .exeAdded by a variant of the IRCBOT TROJAN! See hereX
Microsoft mediawinmplayers.exeAdded by a variant of the W32.SPYBOT WORM!X
Media FinderMF.exeUsed to automate downloads from file hosting sites, may contain adware Note: Located in %programfiles%\Media Finder\.N

O20 List Results
AppInit_DLLs & Winlogon Notify

Name Filename Description Status
Extensions, H323TSP, Hints, Installer, Internet Settings, IPConfTSP, Media Center, MediaContentIndex, ModuleUsagerandom named dll in the System32 folderVariant of Adware.Look2MeX Winlogon Notify
O23 List Results
Windows Services

Name Filename Description Status
VAIO Media plus Digital Media Server (SOHDms)SOHDms.exeRelated to Sony Corporation VAIO Media plus Digital Media Server. Note: Located in \%Program Files%\Sony\VAIO Media plus\L
Microsoft Mediartsecas.exeW32/Rbot-KPH Note: Read the link, allows remote accessX
PS3 Media Serverwrapper.exeRelated to Playstation 3 Media Server from Digital Trends. Note: Located in \%Program Files%\PS3 Media Server\win32\service\ Note: No longer in serviceL
Microsoft MediaRtsecar.exeW32/Vanebot-AX Note: Read the link, allows remote accessX
Media Center 14 ServiceJRService.exeRelated to J River Media Center. Organize and experience all your media Music, photos and video etc... Note: Located in \%Program Files%\J River\Media Center 14\L

SEH List Results
ShellExecuteHook

CLSID Name Filename Description Status
{367BDF4B-04E5-46C9-9D83-D68307F659E3}NSIS Media Extensionwmdmb32.dll, ns**.dll (** two random numbers)NSIS Media adwareX
{D0ABAB9C-4F67-46C8-8061-11489EDE03DF}NSIS Media Extensionns**.dll (** two random numbers)NSIS Media adwareX
{DDBB6F2B-E2B7-4645-81AF-ECD28FA4E87D}NSIS Media Extensionns**.dll (** two random numbers)NSIS Media adwareX
{955F7C01-3417-4F1E-8C31-5A2EF48897CB}NSIS Media Extensionns**.dll (** two random numbers)NSIS Media adwareX
{097F10A7-487F-4457-AB1F-827C59479A72}NSIS Media Extensionns**.dll (** two random numbers)NSIS Media adwareX

Drivers List Results
Driver Entry

Name Filename Description Status
Windows Media Helpwnhelp.exeAdded by the wnhelp.exe Trojan-Banker.Win32.Agent.fynX
DiXiM Media Serverdmsf.exeRelated to dmsf.exe DiXiM Media Server from DigiOnL
Anon Mobile Media Reminder ServiceMobileMediaReminderService.exeRelated to the MobileMediaReminderService.exe Mobile Media Reminder Service from AccentureL
CyberLink PowerDVD 13 Media Server ServiceCLMSServerPDVD13.exeRelated to the CLMSServerPDVD13.ex CyberLink PowerDVD 13 Media Server Monitor from CyberLink Corp.L
CyberLink PowerDVD 12 Media Server Monitor ServiceCLMSMonitorServicePDVD12.exeRelated to CLMSMonitorServicePDVD12.exe CyberLink Media Server Monitor Service from CyberLinkL

FF Extensions List Results
Firefox Extension

CLSID Name Filename Description Status
jid0-24BIZo5c9uA4Q8HWFUDjHB0pzHA@jetpackVisicom Searchjid0-24BIZo5c9uA4Q8HWFUDjHB0pzHA@jetpack
.xpi
Visicom Search allows you to search the selected text on maps.visicom.ua site. Note: Ukrainian Visicom providing digital maps is different than Visicom Media Inc. associated with adware/PUP distribution.L
aboutmedia@gavinsharp.comabout:mediaaboutmedia@gavinsharp.com.xpiabout:media adds an about:media page that provides debugging information about media elements in Firefox. This is a fork of about:media by Chris Double and about:media by Gavin Sharp. All versions share the same ID.L
MediaReaper@sas41.extMedia ReaperMediaReaper@sas41.ext.xpiRelated to Media Reaper SASRip is a web service for downloading Video and Audio from the internet.L
ext@MediaViewV1alphaX.netMedia ViewMedia View - a variant of "BetterSurf" adware. Displays advertisements through various ways like banners or contextual ads with the note "Ads by Media View". Detected by Malwarebytes Anti-Malware as "PUP.Optional.MediaView.A". See also here. Note: The "X" in the ID and the folder name indicates random number: MediaViewV1alpha3570, MediaViewV1alpha8383 etc. Note: Installed outside of Firefox profile as Windows Registry (machine-level) extension - the Remove button is unavailable.X
ext@MediaWatchV1homeX.netMedia WatchMedia Watch - a variant of "BetterSurf" adware. Displays advertisements through various ways like banners or contextual ads with the note "Ads by Media Watch". Detected by Malwarebytes Anti-Malware as "PUP.Optional.MediaWatch.A". See also here. Note: The "X" in the ID and the folder name indicates random number: MediaWatchV1home746, MediaWatchV1home4047 etc. Note: Installed outside of Firefox profile as Windows Registry (machine-level) extension - the Remove button is unavailable.X

Active Setup List Results
Active Setup - Installed Component

CLSID Name Filename Description Status
{6b555f46-41db-4c72-ab0d-e53052dcaffb}Media Watch, MediaWatchV1home997MediaWatchV1home997.dllParasite, a variant of Adware:Win32/BetterSurf, shows popups and advertisements - detected by Malwarebytes Anti-Malware as PUP.Optional.MediaWatch.AX
{6BF52A52-394A-11d3-B153-00C04F79FAA6}Microsoft Windows Media Playerunregmp2.exe [command line:] rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStu
b",
Microsoft Windows Media PlayerL
{22D6F312-B0F6-11D0-94AB-0080C74C7E95}Microsoft Windows Media Playerunregmp2.exeMicrosoft Windows Media PlayerL
{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}Microsoft NetShow Player, NSPlay, Microsoft Windows Media Playerwmpdxm.dll, Msdxm.ocxMicrosoft NetShow or Windows Media PlayerL
Powered by SystemLookup Engine. © 2008-2018 BrightFort. All Rights Reserved. | Privacy Policy | Terms of Use