PDA

View Full Version : TheGuardian info?



xsubx
2006-03-12, 16:12
Spybot has picked up 4 registry keys under the heading "TheGuardian" but does not give any further information about it. I've not managed to find anything conclusive on the web either.

Can anyone shed any light on the nature of TheGuardian?

Thanks.

___________________________________________________

TheGuardian

Browser helper object
(Registry key)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CD4C3CF0-4B15-11D1-ABED-709549C10000}

Class ID
(Registry key)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{CD4C3CF0-4B15-11D1-ABED-709549C10000}

Root class
(Registry key)
HKEY_LOCAL_MACHINE\Software\Classes\IEHlprObj.IEHlprObj.1

Root class
(Registry key)
HKEY_LOCAL_MACHINE\Software\Classes\IEHlprObj.IEHlprObj

md usa spybot fan
2006-03-12, 16:47
Googling for the CLSID of {CD4C3CF0-4B15-11D1-ABED-709549C10000} makes it seem as if TheGuardian may be part of spyware that is installed by Go!Zilla without consent.

Castlecops
http://castlecops.com/CLSID.html
Object Name: IEHlprObj Class
GUID: {CD4C3CF0-4B15-11D1-ABED-709549C10000}
Status: X BHO
Filename: Goiehlp.dll
Description: GoZilla
The link there leads to this:
Go!Zilla
http://www.oit.duke.edu/ats/support/spyware/gozilla.html

From: eTrust Spyware Encyclopedia
Go'Zilla
http://www.pestpatrol.com/spywarecenter/pest.aspx?id=453073194