EverydayLookup Internet Explorer Toolbar

• d9SrcAs.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'Search Assistant BHO' with the class of {7320e42c-584c-4d2a-97b9-9bc404fd4e53}.
• d9bar.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'Toolbar BHO' with the class of {7ca419dd-f20b-4b30-9c75-c27740c184fe}.

• d9bar.dll is installed as an Internet Explorer extension using the class {92780B25-18CC-41C8-B9BE-3C9C571A8263}.

• d9bar.dll is loaded as Internet Explorer Toolbar with the name 'DailyWellnessGuide' with the class of {45b6f222-b8b9-414f-962a-12044d652229}.

• d9SrcAs.dll is loaded in Internet Explorer as a URL search hook using the CLSID {15871ceb-053b-48a1-b82b-3715db3a13b3} and is used by IE to redirect the address of an unknown typed URLs.
• d9bar.dll loads into IE as a URL Search Hook named 'McAfee SiteAdvisor Toolbar' with a class of {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} in order to redirect unknown URL searches.

• d9bar.dll installs an IE Web Browser in Internet Explorer named 'EverydayLookup' with a class of {0A7D3C2C-131D-4B0A-9C1B-2045F6BAE42A}.

• AppIntegrator64.exe is automatically launched at startup through a scheduled task named OnlineMapFinder AppIntegrator 64-bit_Reg_HKLMWow6432Run.
• APPINTEGRATOR.EXE is automatically launched at startup through a scheduled task named OnlineMapFinder AppIntegrator 32-bit_Reg_HKLMWow6432Run.

• d9barsvc.exe runs as a service named 'InboxNowService' (InboxNow_drService).

• APPINTEGRATOR.EXE is loaded in the current user (HKCU) registry as an auto-starting executable named 'PowerSuite' and executes as "C:\Program Files1\Uniblue\POWERS~1\launcher.exe" delay 20000 -m.
• AppIntegrator64.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Hoolapp Android' and executes as "C:\users\user\appdata\Roaming\HOOLAP~1\Hoolapp.exe" /Minimized.

• APPINTEGRATOR.EXE is loaded in the all users (HKLM) registry as a startup file name 'Elite Unzip Search Scope Monitor' which loads as "C:\Program Files2\ELITEU~2\bar\2.bin\aasrchmn.exe" /m=2 /w /h.
• AppIntegrator64.exe is loaded in the all users (HKLM) registry as a startup file name 'Internet Speed Tracker Search Scope Monitor' which loads as "C:\Program Files2\INTERN~3\bar\3.bin\9tsrchmn.exe" /m=2 /w /h.
• d9medint.exe is loaded in the all users (HKLM) registry as a startup file name 'Allin1Convert Search Scope Monitor' which loads as "C:\Program Files2\ALLIN1~1\bar\2.bin\8hsrchmn.exe" /m=2 /w /h.
• d9barsvc.exe is loaded in the all users (HKLM) registry as a startup file name 'WeatherBlink Home Page Guard 64 bit' which loads as "C:\Program Files2\WEATHE~2\bar\1.bin\AppIntegrator64.exe".
• d9bar.dll is loaded in the all users (HKLM) registry as a startup file name 'Internet Speed Tracker' which loads as rundll32 C:\Program Files1\INTERN~3\bar\5.bin\9tbar.dll,S.

Comments

Error posting comment.

'Your comment has been posted to the moderator, it should be approved shortly. Thank you for commenting!'

Pick a name