Dell Edoc Viewer

• eraser.shell.dll is registered as an AutoPlay event handler named 'DVDFab5OnDVDArrival' with the ProgID of 'DVDFab5Open' and the action verb 'Open.

• eraser.shell.dll added to Windows Explorer under the name 'ScanNow' with a class of {41F8EF51-8CD0-4df4-A13A-0E09A7E98AB3}.
• shellext.dll added to Windows Explorer under the name 'axcrypt.File' with a class of {C3DFC144-30F8-4138-81F9-578DBEB9324A}.
• fahdll.dll added to Windows Explorer under the name 'FileAssociationHelper' with a class of {D5CF14A2-B3CA-49DC-8E3E-0BB233B26D09}.

• npfacebookvideocalling.dll is loaded in the Google Chrome web browser as 'npFacebookVideoCalling.dll'.
• npswf32.dll is loaded in the Google Chrome web browser as 'NPSWF32.dll'.
• npnitromozilla.dll is loaded in the Google Chrome web browser as 'npnitromozilla.dll'.

• classiciedll_64.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'ClassicIEBHO Class' with the class of {EA801577-E6AD-4BD5-8F71-4BE0154331A4}.
• classicexplorer64.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'ExplorerBHO Class' with the class of {449D0D6E-2412-4E61-B68F-1CB625CD9E52}.
• classiciedll_32.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'ClassicIEBHO Class' with the class of {EA801577-E6AD-4BD5-8F71-4BE0154331A4}.
• classicexplorer32.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'ExplorerBHO Class' with the class of {449D0D6E-2412-4E61-B68F-1CB625CD9E52}.
• wot.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'WOT Helper' with the class of {C920E44A-7F78-4E64-BDD7-A57026E7FEB7}.
• adblockplus32.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'Adblock Plus for IE Browser Helper Object' with the class of {FFCB3198-32F3-4E8B-9539-4324694ED664}.

• classicie_32.exe is installed as an Internet Explorer extension using the class ##TOOLBAR_DISABLED_##{56753e59-af1d-4fba-9e15-31557124ada2}.
• classicexplorer64.dll is installed as an Internet Explorer extension using the class {64964764-1101-4bbd-8891-B56B1A53B9B3}.
• classicexplorer32.dll is installed as an Internet Explorer extension using the class {64964764-1101-4bbd-8891-B56B1A53B9B3}.

• classicexplorer64.dll is loaded as Internet Explorer Toolbar with the name 'Classic Explorer Bar' with the class of {553891B7-A0D5-4526-BE18-D3CE461D6310}.
• classicexplorer32.dll is loaded as Internet Explorer Toolbar with the name 'Classic Explorer Bar' with the class of {553891B7-A0D5-4526-BE18-D3CE461D6310}.
• wot.dll is loaded as Internet Explorer Toolbar with the name 'WOT' with the class of {71576546-354D-41c9-AAE8-31F2EC22BF0D}.

• wot.dll installs an IE Web Browser in Internet Explorer named 'WOT' with a class of {71576546-354D-41C9-AAE8-31F2EC22BF0D}.

• npswf32.dll is loaded into Mozilla Firefox under the product name 'Adobe Flash Player 10.1 Plugino' with a plugin key of '@adobe.com/FlashPlayer' for all users of the PC.
• CVHBS.EXE is loaded into Mozilla Firefox under the product name 'Microsoft SharePoint Plug-in for Firefox' with a plugin key of '@microsoft.com/SharePoint,version=14.0' for all users of the PC.
• npfacebookvideocalling.dll is loaded into Mozilla Firefox under the product name 'Facebook Video Calling 2.0.0.447' with a plugin key of '@Skype Limited.com/Facebook Video Calling Plugin'.
• npnitromozilla.dll is loaded into Mozilla Firefox under the product name 'Nitro Reader 3' with a plugin key of '@nitropdf.com/NitroPDF' for all users of the PC.

• CVH.EXE is scheduled as a task with the class '{CA9B4117-A585-4C17-853C-D6CE17BDC837}' (runs on registration).
• datasafeonline.exe is scheduled as a task with the class '{D0C52351-65CD-42C4-96E2-2C768A4B909C}' (runs on registration).
• CVHBS.EXE is scheduled as a task named 'UpdaterEX' (runs daily at 3:07 PM).
• 7z.exe is scheduled as a task with the class '{756B733B-AE51-48D9-A99C-3186D6DF6889}' (runs on registration).
• C2RICONS.EXE is scheduled as a task with the class '{C9D0AF2A-4179-4A5C-A53B-BA0FF5C4894F}' (runs on registration).
• OFFICEVIRT.EXE is scheduled as a task with the class '{3B23BCDA-6BDB-437D-B180-6439CB4337D7}' (runs on registration).
Plus 8 more

• classicstartmenu.exe is automatically launched at startup through a scheduled task named 3.
• eraser.exe is automatically launched at startup through a scheduled task named Eraser_Reg_HKLMRun.
• driverupdate.exe is automatically launched at startup through a scheduled task named DriverUpdate Startup.

• CVHBS.EXE runs as a service named 'McAfee Application Installer Cleanup (0201661432130199)' (0201661432130199mcinstcleanup).
• classicstartmenu.exe runs as a service named 'Classic Shell Service' (ClassicShellService).
• syncupdaterservice.exe runs as a service named 'Box Sync Update Service' (BoxSyncUpdateService) "Updater for Box Sync".
• steamservice.exe runs as a service named 'Steam Client Service' (Steam Client Service) "Steam Client Service monitors and updates Steam content".
• hpsupportsolutionsframeworkservice.exe runs as a service named 'HP Support Solutions Framework Service' (HPSupportSolutionsFrameworkService) "This service allows for the detection of HP products and enables identification of support solutions for detected products.".
• CVHSVC.EXE runs as a service named 'Client Virtualization Handler' (cvhsvc) "Client Virtualization Handler Service (unlocalized description)".

• classicstartmenu.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'ClassicStartMenu.exe' and executes as C:\Program Files\Classic Shell\ClassicStartMenu.exe.
• nsmc.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'nsmc.exe' and executes as C:\Program Files\NetSpeedMonitor\nsmc.exe.
• classicie_64.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Classic Shell' and executes as C:\Program Files\Classic Shell\ClassicIE_64.exe.
• steam.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Steam' and executes as "C:\Program Files\Steam\Steam.exe" -silent.
• driverupdate.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'DriverUpdate' and executes as "C:\Program Files\DriverUpdate\DriverUpdate.exe" -boot.
• CVH.EXE is loaded in the current user (HKCU) registry as an auto-starting executable named 'OfficeSyncProcess' and executes as "C:\Program Files\Common Files\microsoft shared\virtualization handler\cvh.exe" /quietlaunch "MSOSYNC 9014006604090000".
Plus 2 more

• CVHBS.EXE is loaded in the all users (HKLM) registry as a startup file name 'MapsGalaxy Search Scope Monitor' which loads as "C:\Program Files2\MAPSGA~2\bar\1.bin\39srchmn.exe" /m=2 /w /h.
• classicstartmenu.exe is loaded in the all users (HKLM) registry as a startup file name 'Registry - Alle Benutzer' which loads as "C:\Program Files\Classic Shell\ClassicStartMenu.exe" -autorun.
• eraser.exe is loaded in the all users (HKLM) registry as a startup file name 'SafePCRepair_89 Browser Plugin Loader 64' which loads as C:\Program Files2\SAFEPC~2\bar\1.bin\89brmon64.exe.
• fahconsole.exe is loaded in the all users (HKLM) registry as a startup file name 'FAHConsole' which loads as C:\Program Files\File Association Helper\FAHConsole.exe.
• ftlnsop.exe is loaded in the all users (HKLM) registry as a startup file name 'FtLnSOP_setup' which loads as C:\Windows\Twain_32\Fjscan32\SOP\FtLnSOP.exe.
• datasafeonline.exe is loaded in the all users (HKLM) registry as a startup file name 'Dell DataSafe Online' which loads as "C:\Program Files\Dell DataSafe Online\DataSafeOnline.exe" /m.

• facebookvideocalling.exe is added as a firewall exception for 'C:\Documents and Settings\user\Application Data\Facebook\Video\Skype\FacebookVideoCalling.exe'.
• steam.exe is added as a firewall exception for 'C:\Program Files\Steam\Steam.exe'.
• CVHSVC.EXE is added as a firewall exception for 'C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE'.
• CVH.EXE is added as a firewall exception for 'C:\Program Files\Common Files\microsoft shared\virtualization handler\cvh.exe'.
• hpdevicedetection3.exe is added as a firewall exception for 'C:\Program Files\HP\Common\HPDeviceDetection3.exe'.

Comments

Error posting comment.

'Your comment has been posted to the moderator, it should be approved shortly. Thank you for commenting!'

Pick a name