HTMLEdit Spyware Profile
Title: HTMLEdit
Also Known as: Trojan/Hijacker/Toolbar/HTMLEdit, Adware.Click
Severity scale:
HTMLEdit is a spyware program that is pretty common. It frequently gets bundled with other spyware or adware programs. It first appeared in August of 2005.
It is disguised as an apparently innocent toolbar. However, the toolbar can only reference the web pages of its vendor’s associates. In reality, it is a browser hijacker that will redirect your searches to its affiliate sites and will reset your home page to its own home page.
HTMLEdit will also monitor your browsing activity. It does this by keystroke logging and taking snapshots of your computer’s monitor. Besides being able to see the web pages you visit, it can also collect your login and credit card information.
HTMLEdit is a risky program to have on your computer for your privacy. It is also an annoyance, in that it slows down your computer’s operating speed and program stability. The browser redirection is also an annoyance, and perhaps an exposure to further malware infections.
You should remove this program from your computer immediately if you get infected. You should use a trusted antispyware program such as SpyZooka to remove it.
Also Known As:
Trojan/Hijacker/Toolbar/HTMLEdit,
Adware.Click, Adware.CommonName,
Adware.GogoTools, SpecificMedia.GogoTools
Spyware Type: Toolbar, Browser Hijacker
Associated Files:
lie1d6ff.dll, win32/lie1d6ff.dll, sifoppsa.dll, HTMLEdit.Bho
HTMLEdit.Bho.1
win32/HTMLEdit.Bho
win32/HTMLEdit.Bho.1
{CAEFA8EB-B417-46c7-82D1-1B8D1D8EF924}
{CAEFA8EB-B417-46c7-82D1-1B8D1D8EF924}
{CAEFA8EB-B417-46c7-82D1-1B8D1D8EF924}
{CAEFA8EB-B417-46c7-82D1-1B8D1D8EF924}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{81270159-e8f9-4713-9646-03531e0eef58}
Key: software\microsoft\windows\currentversion\run\win16
Value: @
Key: software\classes\clsid\{81270159-e8f9-4713-9646-03531e0eef58}
Key: software\microsoft\internet explorer\toolbar\{81270159-e8f9-4713-9646-03531e0eef58}
Value: @
Key: software\microsoft\windows\currentversion\run\regmon
Value: @
Key: CLSID\{81270159-e8f9-4713-9646-03531e0eef58}
Key: software\microsoft\internet explorerinternet0%\toolbar
Value: {81270159-e8f9-4713-9646-03531e0eef58}
