http://www.castlecops.com/CLSID.html CastleCops - TonyKlein's BHO Collection en-us Paul Laudanski (mailto:paul@computercops.biz) Copyright © 2002-2005 CastleCops® 2008-07-20T21:22:25-05:00 daily 24 2003-01-01T12:00-05:00 \{188E4299-4959-4C54-A0B1-3E43B082BB59} X BHO TB qndsfmao.dll Parasite causing false spyware warnings and connecting to fake "security sites" - member of the FakeAlert, http://research.sunbelt-software.com/threatdisplay.aspx?threatid=43521 aka SmitFraud, http://research.sunbelt-software.com/threatdisplay.aspx?threatid=44645 malware family http://www.castlecops.com/clsid-55019.html http://www.castlecops.com/clsid-55019.html \{6EA1DB25-2524-4DD6-B997-42E8F38C6E46} X BHO TB 219725.dll Parasite, a member of the Trojan-Downloader.Zlob.Media-Codec, http://research.sunbelt-software.com/threatdisplay.aspx?threatid=44478 aka NewMediaCodec, http://research.sunbelt-software.com/threatdisplay.aspx?threatid=149335 malware family - detected as Trackware.ProSearch, http://www.symantec.com/security_response/writeup.jsp?docid=2008-030615-2713-99 http://www.castlecops.com/clsid-55018.html http://www.castlecops.com/clsid-55018.html \{F8EA6827-1B82-494a-ACAC-A582A714DCA8} X BHO TB tBHO.dll Browser hijacker connecting to wickedscene.com and redirecting searches to seekandexplore.com - a variant of these, http://www.castlecops.com/modules.php?name=CLSID&query=TinyBHO http://www.castlecops.com/clsid-55017.html http://www.castlecops.com/clsid-55017.html \{D5DDDA4B-BB20-4DE5-A8AC-CDB828FA5858} O BHO TB ieexp.dll Jingle Keyboard, http://www.yankeedownload.com/software/jingle-keyboard-jkqji.html http://www.castlecops.com/clsid-55016.html http://www.castlecops.com/clsid-55016.html \{22485458-DFE2-461D-92BB-6FBE7B53A1C3} X BHO TB sqvgnrpx.dll Parasite causing false spyware warnings and connecting to fake "security sites" - member of the FakeAlert, http://research.sunbelt-software.com/threatdisplay.aspx?threatid=43521 aka SmitFraud, http://research.sunbelt-software.com/threatdisplay.aspx?threatid=44645 malware family http://www.castlecops.com/clsid-55015.html http://www.castlecops.com/clsid-55015.html \{106827D3-2E72-401A-B9E2-849A518128DA} X BHO TB wbxdpgfembe.dll Adware downloader causing false spyware warnings and connecting to rogue "security sites", a member of the Trojan-Downloader.Zlob.Media-Codec, http://research.sunbelt-software.com/threatdisplay.aspx?threatid=44478 aka NewMediaCodec, http://research.sunbelt-software.com/threatdisplay.aspx?threatid=149335 malware family http://www.castlecops.com/clsid-55014.html http://www.castlecops.com/clsid-55014.html \{529842C8-D114-4D26-9C99-ED1EFE297D9A} X BHO TB jtoolbars.dll, JTOOLB~2.DLL Parasite of Korean origin detected as CashBack or JToolbar adware - see here, http://kr.ahnlab.com/info/smart2u/virus_detail_16942.html http://www.castlecops.com/clsid-55013.html http://www.castlecops.com/clsid-55013.html \{19EA4A41-C849-4756-A5B8-D25EC7AA87D1} X BHO TB jtoolbar.dll, JTOOLB~1.DLL Parasite of Korean origin detected as CashBack or JToolbar adware - see here, http://kr.ahnlab.com/info/smart2u/virus_detail_16942.html http://www.castlecops.com/clsid-55012.html http://www.castlecops.com/clsid-55012.html \{098716A9-0310-4CBE-BD64-B790A9761158} X BHO TB RichVideoCodec.dll Adware downloader, member of the Trojan-Downloader.Zlob.Media-Codec, http://research.sunbelt-software.com/threatdisplay.aspx?threatid=44478 aka NewMediaCodec, http://research.sunbelt-software.com/threatdisplay.aspx?threatid=149335 malware family http://www.castlecops.com/clsid-55011.html http://www.castlecops.com/clsid-55011.html \{E759620E-585D-4893-A44B-C84F892A3100} X BHO TB [random filename] ConHook, http://research.sunbelt-software.com/threatdisplay.aspx?threatid=45786 aka Chisyne, http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?id=48117 trojan variant - VirtuMonde/Vundo, http://www.symantec.com/security_response/writeup.jsp?docid=2004-112111-3912-99 adware downloader http://www.castlecops.com/clsid-55010.html http://www.castlecops.com/clsid-55010.html