From this point of view, Internet Explorer is just like any other Win32-based program with its own memory space to preserve. With Browser Helper Objects you can write components—specifically, in-process Component Object Model (COM) components—that Internet Explorer will load each time it starts up. Such objects run in the same memory context as the browser and can perform any action on the available windows and modules. For example, a BHO could detect the browser's typical events, such as GoBack, GoForward, and DocumentComplete; access the browser's menu and toolbar and make changes; create windows to display additional information on the currently viewed page; and install hooks to monitor messages and actions.

Summary:

This spyware installs an Internet Explorer toolbar to redirect search requests. Also EliteBar creates popup windows and change MS IE home page and settings.

Spanish Shopping Portal Dialer

Creates the following files:


123messenger.per
licencia.txt
msa64chk.dll
msapasrc.dll
telefonos.txt
textos.txt


123Messenger adds in the registy run section

HKLM\Software\Microsoft\Windows\CurrentVersion\Run

following file: rundll32.exe

Details

• Dials a phone number
• Registers as BHO
• Runs in stealth mode

Dials a phone number. Creates the following registry keys:


KEY:HKCR\clsid\{ffff0001-0002-101a-a3c9-08002b2f49fb}
KEY:HCLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ffff0001-0002-101a-a3c9-08002b2f49fb}


Just some names of spyware processes RegFreeze cures from

Program overview

RegFreeze primary goal is prohibition of many critical data changes without your demand, such as your browser's start page and so forth.

Many times in order to remove a piece of spyware or for troubleshooting and diagnostic purposes, you'll have to start Windows in Safe Mode. While in Safe Mode, only specific programs and files needed to run the operating system are loaded. Some functions, such as connecting to the Internet, will not be active in Safe Mode and a standard video driver will be loaded causing a washed out look and a possible change in resolution. However, because just the essential programs and files are loaded in Safe Mode, this allows us to remove some spyware, adware, viruses and such that cannot be removed in Normal Mode. Follow the instructions below to Start Safe Mode for your specific version of Windows.