1. /
  2. Security Response/
  3. Adware.Topicks

Adware.Topicks

Updated:
February 13, 2007 11:38:19 AM
Type:
Adware
Version:
0.96
Publisher:
Idium Systems
Risk Impact:
Low
File Names:
Datamgr.dll,HtCheck2.dll,hthost.dll,Idhost.exe,IdmUp.dll,TpBar.dll,TPReg.dll
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows NT, Windows XP

Adware.Topicks does not seem to work properly. The following information is based on what this adware tries to do when it is installed:
  1. Creates the following registry keys:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\TOPicks - Explore the web\DisplayName"="TOPicks - Explore the web"
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\TOPicks - Explore the web\UninstallString"="C:\PROGRA~1\topicks\bin\UNWISE.EXE C:\PROGRA~1\topicks\bin\INSTALL.LOG"
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Program Files\topicks\bin\Datamgr.dll"=0x1
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Program Files\topicks\bin\HtCheck2.dll"=0x1
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ToPicks Starter"="C:\Program Files\ToPicks\Bin\Idhost.exe"
    HKEY_CURRENT_USER\Software\ToPicks\General\App Code"="Default_Full"
    HKEY_CURRENT_USER\Software\ToPicks\General\Install"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\General\Started"=0x40053DAA
    HKEY_CURRENT_USER\Software\ToPicks\General\Version"="1.0.1.0"
    HKEY_CURRENT_USER\Software\ToPicks\General\Skin"="146^248^7"
    HKEY_CURRENT_USER\Software\ToPicks\General\Gambling"=0x1
    HKEY_CURRENT_USER\Software\ToPicks\General\Sex"=0x1
    HKEY_CURRENT_USER\Software\ToPicks\General\P2P"=""
    HKEY_CURRENT_USER\Software\ToPicks\General\P2P Params"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\General\First Time"=0x1
    HKEY_CURRENT_USER\Software\ToPicks\General\Is Icon"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\General\Is Install"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\General\Demo"=0x1
    HKEY_CURRENT_USER\Software\ToPicks\General\Log Flag"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\General\Mode"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\General\First Update"=0x1
    HKEY_CURRENT_USER\Software\ToPicks\General\Active"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\General\Last Active"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\General\First Update End"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Links\Comm Links"=0x4
    HKEY_CURRENT_USER\Software\ToPicks\Links\Sites Links"=0x7
    HKEY_CURRENT_USER\Software\ToPicks\Links\More Info"="www.MoreInfo.com"
    HKEY_CURRENT_USER\Software\ToPicks\Links\More Links"=0xA
    HKEY_CURRENT_USER\Software\ToPicks\Links\LR Additional Links"=0xE
    HKEY_CURRENT_USER\Software\ToPicks\Links\HR Additional Links"=0x14
    HKEY_CURRENT_USER\Software\ToPicks\Links\ini"="Updater.ini"
    HKEY_CURRENT_USER\Software\ToPicks\Links\Update"="http://tpdownload.topicks.com/default/running"
    HKEY_CURRENT_USER\Software\ToPicks\Links\Mode ASPS"="www.topicks.com"|
    HKEY_CURRENT_USER\Software\ToPicks\Links\Mode ASP"="util/fullsize.asp"
    HKEY_CURRENT_USER\Software\ToPicks\Log\Last"=0x40053DAA
    HKEY_CURRENT_USER\Software\ToPicks\Log\interval"=0x7
    HKEY_CURRENT_USER\Software\ToPicks\Log\Is Log"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Log\Last Date"=""
    HKEY_CURRENT_USER\Software\ToPicks\Log\Log File"="\bin\logs.dat"
    HKEY_CURRENT_USER\Software\ToPicks\Log\Log Path"="TopicksLogs.asp"
    HKEY_CURRENT_USER\Software\ToPicks\Log\Log Server"="tpreport.topicks.com"
    HKEY_CURRENT_USER\Software\ToPicks\Log\Cents"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Log\Billing Interval"=0x1E
    HKEY_CURRENT_USER\Software\ToPicks\Log\Last Billing"=0x40053DAA
    HKEY_CURRENT_USER\Software\ToPicks\Log\Billing File"="\bin\blng.dat"
    HKEY_CURRENT_USER\Software\ToPicks\Path\Bin"="\Bin"
    HKEY_CURRENT_USER\Software\ToPicks\Path\Comm File"="\Bin\spnsrs.xml"
    HKEY_CURRENT_USER\Software\ToPicks\Path\Graphic"="\Graphic"
    HKEY_CURRENT_USER\Software\ToPicks\Path\Icon"="logo.swf"
    HKEY_CURRENT_USER\Software\ToPicks\Path\Category"="../Bin/ctgs.xml"
    HKEY_CURRENT_USER\Software\ToPicks\Path\Comm Ini"="\Bin\test.ini"
    HKEY_CURRENT_USER\Software\ToPicks\Path\Flash"="\Graphic\topicks.swf"
    HKEY_CURRENT_USER\Software\ToPicks\Path\MoreInfo Flash"="\Graphic\info.swf"
    HKEY_CURRENT_USER\Software\ToPicks\Path\Link Flash"="\Graphic\link.swf"
    HKEY_CURRENT_USER\Software\ToPicks\Path\FileVersion"="\bin\fileversion.ini"
    HKEY_CURRENT_USER\Software\ToPicks\Path\Program"="C:\Program Files\Topicks"
    HKEY_CURRENT_USER\Software\ToPicks\Path\RealTime File"="C:\Program Files\ToPicks\Bin\RealTimeSitesSites.xml"
    HKEY_CURRENT_USER\Software\ToPicks\Path\Sites File"="C:\Program Files\ToPicks\Bin\Sites.xml"
    HKEY_CURRENT_USER\Software\ToPicks\Path\Icon Flash"=""
    HKEY_CURRENT_USER\Software\ToPicks\Path\Index"="\Bin\CtgInd.dat"
    HKEY_CURRENT_USER\Software\ToPicks\Path\Top Sellers"="../Bin/topslrs.xml"
    HKEY_CURRENT_USER\Software\ToPicks\Path\ParamVals"="\Bin\ParamVl.ini"
    HKEY_CURRENT_USER\Software\ToPicks\Path\ParamSet"="\Bin\ParamSet.ini"
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\1"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\2"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\3"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\4"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\5"=0x1
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\6"=0x1
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\7"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\8"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\9"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\10"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\11"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\12"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\13"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\14"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\15"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\16"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\17"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\18"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\19"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\20"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\21"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\22"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\23"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\24"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 1\25"=0x0
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\1"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\2"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\3"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\4"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\5"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\6"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\7"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\8"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\9"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\10"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\11"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\12"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\13"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\14"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\15"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\16"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\17"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\18"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\19"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\20"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\21"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\22"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\23"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\24"=""
    HKEY_CURRENT_USER\Software\ToPicks\Resv 2\25"=""
    HKEY_CURRENT_USER\Software\ToPicks\SRM\Is SRM"=0x1
    HKEY_CURRENT_USER\Software\ToPicks\SRM\Last"=0x4013D7E8
    HKEY_CURRENT_USER\Software\ToPicks\SRM\Interval"=0x7
    HKEY_CURRENT_USER\Software\ToPicks\SRM\SRM File"="\Bin\srm.dat"
    HKEY_CURRENT_USER\Software\ToPicks\SRM\Flash Info File"=""
    HKEY_CURRENT_USER\Software\ToPicks\SRM\Last Date"="2003-10-27T11:09-05:00"
    HKEY_CURRENT_USER\Software\ToPicks\SRM\SRM Path"="topicks/TopPicksCollect.asp"
    HKEY_CURRENT_USER\Software\ToPicks\SRM\SRM Server"="tpcms.topicks.com"
    HKEY_CURRENT_USER\Software\ToPicks\Threads\Delay1"=0x2
    HKEY_CURRENT_USER\Software\ToPicks\Threads\Delay2"=0x1
    HKEY_CURRENT_USER\Software\ToPicks\Threads\Delay3"=0x2
    HKEY_CLASSES_ROOT\DataMgr32.DataMgr1.1\(Default)"="DataMgr1 Class"
    HKEY_CLASSES_ROOT\DataMgr32.DataMgr1.1\CLSID\(Default)"="{9F8AC164-6826-4B52-8F65-9C31305E81CC}"
    HKEY_CLASSES_ROOT\DataMgr32.DataMgr1\(Default)"="DataMgr1 Class"
    HKEY_CLASSES_ROOT\DataMgr32.DataMgr1\CLSID\(Default)"="{9F8AC164-6826-4B52-8F65-9C31305E81CC}"
    HKEY_CLASSES_ROOT\DataMgr32.DataMgr1\CurVer\(Default)"="DataMgr32.DataMgr1.1"
    HKEY_CLASSES_ROOT\CLSID\{9F8AC164-6826-4B52-8F65-9C31305E81CC}\(Default)"="DataMgr1 Class"
    HKEY_CLASSES_ROOT\CLSID\{9F8AC164-6826-4B52-8F65-9C31305E81CC}\ProgID\(Default)"="DataMgr32.DataMgr1.1"
    HKEY_CLASSES_ROOT\CLSID\{9F8AC164-6826-4B52-8F65-9C31305E81CC}\VersionIndependentProgID\(Default)"="DataMgr32ataMgr1"
    HKEY_CLASSES_ROOT\CLSID\{9F8AC164-6826-4B52-8F65-9C31305E81CC}\InprocServer32\(Default)"="C:\Program Files\topicks\bin\Datamgr.dll"
    HKEY_CLASSES_ROOT\CLSID\{9F8AC164-6826-4B52-8F65-9C31305E81CC}\InprocServer32\ThreadingModel"="Apartment"
    HKEY_CLASSES_ROOT\CLSID\{9F8AC164-6826-4B52-8F65-9C31305E81CC}\TypeLib\(Default)"="{BE7613D4-7D09-4CF8-B747-6DFF0564891E}"
    HKEY_CLASSES_ROOT\DataMgr32.ActionMgr.1\(Default)"="ActionMgr Class"
    HKEY_CLASSES_ROOT\DataMgr32.ActionMgr.1\CLSID\(Default)"="{D7CB5BAF-18D9-46D4-8F72-909D409506FA}"
    HKEY_CLASSES_ROOT\DataMgr32.ActionMgr\(Default)"="ActionMgr Class"
    HKEY_CLASSES_ROOT\DataMgr32.ActionMgr\CLSID\(Default)"="{D7CB5BAF-18D9-46D4-8F72-909D409506FA}"
    HKEY_CLASSES_ROOT\DataMgr32.ActionMgr\CurVer\(Default)"="DataMgr32.ActionMgr.1"
    HKEY_CLASSES_ROOT\CLSID\{D7CB5BAF-18D9-46D4-8F72-909D409506FA}\(Default)"="ActionMgr Class"
    HKEY_CLASSES_ROOT\CLSID\{D7CB5BAF-18D9-46D4-8F72-909D409506FA}\ProgID\(Default)"="DataMgr32.ActionMgr.1"
    HKEY_CLASSES_ROOT\CLSID\{D7CB5BAF-18D9-46D4-8F72-909D409506FA}\VersionIndependentProgID\(Default)"="DataMgr32.ActionMgr"
    HKEY_CLASSES_ROOT\CLSID\{D7CB5BAF-18D9-46D4-8F72-909D409506FA}\InprocServer32\(Default)"="C:\Program Files\topicks\bin\Datamgr.dll"
    HKEY_CLASSES_ROOT\CLSID\{D7CB5BAF-18D9-46D4-8F72-909D409506FA}\InprocServer32\ThreadingModel"="Apartment"
    HKEY_CLASSES_ROOT\CLSID\{D7CB5BAF-18D9-46D4-8F72-909D409506FA}\TypeLib\(Default)"="{BE7613D4-7D09-4CF8-B747-6DFF0564891E}"
    HKEY_CLASSES_ROOT\TypeLib\{BE7613D4-7D09-4CF8-B747-6DFF0564891E}\1.0\(Default)"="DataMgr32 1.0 Type Library"
    HKEY_CLASSES_ROOT\TypeLib\{BE7613D4-7D09-4CF8-B747-6DFF0564891E}\1.0\FLAGS\(Default)"="0"
    HKEY_CLASSES_ROOT\TypeLib\{BE7613D4-7D09-4CF8-B747-6DFF0564891E}\1.0\0\win32\(Default)"="C:\Program Files\topicks\bin\Datamgr.dll"
    HKEY_CLASSES_ROOT\TypeLib\{BE7613D4-7D09-4CF8-B747-6DFF0564891E}\1.0\HELPDIR\(Default)"="C:\Program Files\topicks\bin\"
    HKEY_CLASSES_ROOT\Interface\{E964B4A5-351B-40A6-8B8D-D856AAC538DC}\(Default)"="IDataMgr1"
    HKEY_CLASSES_ROOT\Interface\{E964B4A5-351B-40A6-8B8D-D856AAC538DC}\ProxyStubClsid\(Default)"="{00020424-0000-0000-C000-000000000046}"
    HKEY_CLASSES_ROOT\Interface\{E964B4A5-351B-40A6-8B8D-D856AAC538DC}\ProxyStubClsid32\(Default)"="{00020424-0000-0000-C000-000000000046}"
    HKEY_CLASSES_ROOT\Interface\{E964B4A5-351B-40A6-8B8D-D856AAC538DC}\TypeLib\(Default)"="{BE7613D4-7D09-4CF8-B747-6DFF0564891E}"
    HKEY_CLASSES_ROOT\Interface\{E964B4A5-351B-40A6-8B8D-D856AAC538DC}\TypeLib\Version"="1.0"
    HKEY_CLASSES_ROOT\Interface\{B8492793-8827-4172-A83F-E4A6DE6E707F}\(Default)"="IActionMgr"
    HKEY_CLASSES_ROOT\Interface\{B8492793-8827-4172-A83F-E4A6DE6E707F}\ProxyStubClsid\(Default)"="{00020424-0000-0000-C000-000000000046}"
    HKEY_CLASSES_ROOT\Interface\{B8492793-8827-4172-A83F-E4A6DE6E707F}\ProxyStubClsid32\(Default)"="{00020424-0000-0000-C000-000000000046}"
    HKEY_CLASSES_ROOT\Interface\{B8492793-8827-4172-A83F-E4A6DE6E707F}\TypeLib\(Default)"="{BE7613D4-7D09-4CF8-B747-6DFF0564891E}"
    HKEY_CLASSES_ROOT\Interface\{B8492793-8827-4172-A83F-E4A6DE6E707F}\TypeLib\Version"="1.0"
    HKEY_CLASSES_ROOT\HtCheck2.CheckPage.1\(Default)"="CheckPage Class"
    HKEY_CLASSES_ROOT\HtCheck2.CheckPage.1\CLSID\(Default)"="{0352960F-47BE-11D5-AB93-00D0B760B4EB}"
    HKEY_CLASSES_ROOT\HtCheck2.CheckPage\(Default)"="CheckPage Class"
    HKEY_CLASSES_ROOT\HtCheck2.CheckPage\CLSID\(Default)"="{0352960F-47BE-11D5-AB93-00D0B760B4EB}"
    HKEY_CLASSES_ROOT\HtCheck2.CheckPage\CurVer\(Default)"="HtCheck2.CheckPage.1"
    HKEY_CLASSES_ROOT\CLSID\{0352960F-47BE-11D5-AB93-00D0B760B4EB}\(Default)"="CheckPage Class"
    HKEY_CLASSES_ROOT\CLSID\{0352960F-47BE-11D5-AB93-00D0B760B4EB}\ProgID\(Default)"="HtCheck2.CheckPage.1"
    HKEY_CLASSES_ROOT\CLSID\{0352960F-47BE-11D5-AB93-00D0B760B4EB}\VersionIndependentProgID\(Default)"="HtCheck2.CheckPage"
    HKEY_CLASSES_ROOT\CLSID\{0352960F-47BE-11D5-AB93-00D0B760B4EB}\InprocServer32\(Default)"="C:\Program Files\topicks\bin\HtCheck2.dll"
    HKEY_CLASSES_ROOT\CLSID\{0352960F-47BE-11D5-AB93-00D0B760B4EB}\InprocServer32\ThreadingModel"="Apartment"
    HKEY_CLASSES_ROOT\CLSID\{0352960F-47BE-11D5-AB93-00D0B760B4EB}\TypeLib\(Default)"="{DAE64161-491D-11D5-AB93-00D0B760B4EB}"
    HKEY_CLASSES_ROOT\HtCheck2.CHelpObj.1\(Default)"="CHelpObj Class"
    HKEY_CLASSES_ROOT\HtCheck2.CHelpObj.1\CLSID\(Default)"="{CBDB0279-9D76-48AC-ABD3-8CB9A4D73D4A}"
    HKEY_CLASSES_ROOT\HtCheck2.CHelpObj\(Default)"="CHelpObj Class"
    HKEY_CLASSES_ROOT\HtCheck2.CHelpObj\CLSID\(Default)"="{CBDB0279-9D76-48AC-ABD3-8CB9A4D73D4A}"
    HKEY_CLASSES_ROOT\HtCheck2.CHelpObj\CurVer\(Default)"="HtCheck2.CHelpObj.1"
    HKEY_CLASSES_ROOT\CLSID\{CBDB0279-9D76-48AC-ABD3-8CB9A4D73D4A}\(Default)"="CHelpObj Class"
    HKEY_CLASSES_ROOT\CLSID\{CBDB0279-9D76-48AC-ABD3-8CB9A4D73D4A}\ProgID\(Default)"="HtCheck2.CHelpObj.1"
    HKEY_CLASSES_ROOT\CLSID\{CBDB0279-9D76-48AC-ABD3-8CB9A4D73D4A}\VersionIndependentProgID\(Default)"="HtCheck2.CHelpObj"
    HKEY_CLASSES_ROOT\CLSID\{CBDB0279-9D76-48AC-ABD3-8CB9A4D73D4A}\InprocServer32\(Default)"="C:\Program Files\topicks\bin\HtCheck2.dll"
    HKEY_CLASSES_ROOT\CLSID\{CBDB0279-9D76-48AC-ABD3-8CB9A4D73D4A}\TypeLib\(Default)"="{DAE64161-491D-11D5-AB93-00D0B760B4EB}"
    HKEY_CLASSES_ROOT\TypeLib\{DAE64161-491D-11D5-AB93-00D0B760B4EB}\1.0\(Default)"="HtCheck2 1.0 Type Library"
    HKEY_CLASSES_ROOT\TypeLib\{DAE64161-491D-11D5-AB93-00D0B760B4EB}\1.0\FLAGS\(Default)"="0"
    HKEY_CLASSES_ROOT\TypeLib\{DAE64161-491D-11D5-AB93-00D0B760B4EB}\1.0\0\win32\(Default)"="C:\Program Files\topicks\bin\HtCheck2.dll"
    HKEY_CLASSES_ROOT\TypeLib\{DAE64161-491D-11D5-AB93-00D0B760B4EB}\1.0\HELPDIR\(Default)"="C:\Program Files\topicks\bin\"
    HKEY_CLASSES_ROOT\Interface\{DAE6416E-491D-11D5-AB93-00D0B760B4EB}\(Default)"="ICheckPage"
    HKEY_CLASSES_ROOT\Interface\{DAE6416E-491D-11D5-AB93-00D0B760B4EB}\ProxyStubClsid\(Default)"="{00020424-0000-0000-C000-000000000046}"
    HKEY_CLASSES_ROOT\Interface\{DAE6416E-491D-11D5-AB93-00D0B760B4EB}\ProxyStubClsid32\(Default)"="{00020424-0000-0000-C000-000000000046}"
    HKEY_CLASSES_ROOT\Interface\{DAE6416E-491D-11D5-AB93-00D0B760B4EB}\TypeLib\(Default)"="{DAE64161-491D-11D5-AB93-00D0B760B4EB}"
    HKEY_CLASSES_ROOT\Interface\{DAE6416E-491D-11D5-AB93-00D0B760B4EB}\TypeLib\Version"="1.0"
    HKEY_CLASSES_ROOT\Interface\{EB29CD69-7020-4D1D-A0BE-72130DFBA9F7}\(Default)"="ICHelpObj"
    HKEY_CLASSES_ROOT\Interface\{EB29CD69-7020-4D1D-A0BE-72130DFBA9F7}\ProxyStubClsid\(Default)"="{00020424-0000-0000-C000-000000000046}"
    HKEY_CLASSES_ROOT\Interface\{EB29CD69-7020-4D1D-A0BE-72130DFBA9F7}\ProxyStubClsid32\(Default)"="{00020424-0000-0000-C000-000000000046}"
    HKEY_CLASSES_ROOT\Interface\{EB29CD69-7020-4D1D-A0BE-72130DFBA9F7}\TypeLib\(Default)"="{DAE64161-491D-11D5-AB93-00D0B760B4EB}"
    HKEY_CLASSES_ROOT\Interface\{EB29CD69-7020-4D1D-A0BE-72130DFBA9F7}\TypeLib\Version"="1.0"
    HKEY_CLASSES_ROOT\TypeLib\{1EA4DBF0-3C3B-11CF-810C-00AA00389B71}\1.1\0\win32\(Default)"="C:\WINNT\System32\oleacc.dll"
    HKEY_CLASSES_ROOT\TypeLib\{1EA4DBF0-3C3B-11CF-810C-00AA00389B71}\1.1\0\win32\(Default)"="oleacc.dll"
    HKEY_CLASSES_ROOT\AppID\{D6BE4255-97C9-4D5C-9801-91DADDA92D81}\(Default)"="HTCheckSvr2"
    HKEY_CLASSES_ROOT\AppID\HTCheckSvr2.EXE\AppID"="{D6BE4255-97C9-4D5C-9801-91DADDA92D81}"
    HKEY_CLASSES_ROOT\HtCheckSvr.ScanPage.1\(Default)"="ScanPage Class"
    HKEY_CLASSES_ROOT\HtCheckSvr.ScanPage.1\CLSID\(Default)"="{C6958ACD-D866-4349-9F7B-FDB73384F697}"
    HKEY_CLASSES_ROOT\HtCheckSvr.ScanPage\(Default)"="ScanPage Class"
    HKEY_CLASSES_ROOT\HtCheckSvr.ScanPage\CLSID\(Default)"="{C6958ACD-D866-4349-9F7B-FDB73384F697}"
    HKEY_CLASSES_ROOT\HtCheckSvr.ScanPage\CurVer\(Default)"="HtCheckSvr.ScanPage.1"
    HKEY_CLASSES_ROOT\CLSID\{C6958ACD-D866-4349-9F7B-FDB73384F697}\(Default)"="ScanPage Class"
    HKEY_CLASSES_ROOT\CLSID\{C6958ACD-D866-4349-9F7B-FDB73384F697}\ProgID\(Default)"="HtCheckSvr.ScanPage.1"
    HKEY_CLASSES_ROOT\CLSID\{C6958ACD-D866-4349-9F7B-FDB73384F697}\VersionIndependentProgID\(Default)"="HtCheckSvr.ScanPage"
    HKEY_CLASSES_ROOT\CLSID\{C6958ACD-D866-4349-9F7B-FDB73384F697}\LocalServer32\(Default)"="C:\PROGRA~1\topicks\bin\hthost.exe"
    HKEY_CLASSES_ROOT\CLSID\{C6958ACD-D866-4349-9F7B-FDB73384F697}\AppID"="{C6958ACD-D866-4349-9F7B-FDB73384F697}"
    HKEY_CLASSES_ROOT\CLSID\{C6958ACD-D866-4349-9F7B-FDB73384F697}\TypeLib\(Default)"="{C6958ACD-D866-4349-9F7B-FDB73384F697}"
    HKEY_CLASSES_ROOT\TypeLib\{D6BE4255-97C9-4D5C-9801-91DADDA92D81}\1.0\(Default)"="HTCheckSvr2 1.0 Type Library"
    HKEY_CLASSES_ROOT\TypeLib\{D6BE4255-97C9-4D5C-9801-91DADDA92D81}\1.0\FLAGS\(Default)"="0"
    HKEY_CLASSES_ROOT\TypeLib\{D6BE4255-97C9-4D5C-9801-91DADDA92D81}\1.0\0\win32\(Default)"="C:\PROGRA~1\topicks\bin\hthost.exe"
    HKEY_CLASSES_ROOT\TypeLib\{D6BE4255-97C9-4D5C-9801-91DADDA92D81}\1.0\HELPDIR\(Default)"="C:\PROGRA~1\topicks\bin\"
    HKEY_CLASSES_ROOT\Interface\{68CCC4DA-B487-4791-AD94-E72FD4D1074C}\(Default)"="IScanPage"
    HKEY_CLASSES_ROOT\Interface\{68CCC4DA-B487-4791-AD94-E72FD4D1074C}\ProxyStubClsid\(Default)"="{00020424-0000-0000-C000-000000000046}"
    HKEY_CLASSES_ROOT\Interface\{68CCC4DA-B487-4791-AD94-E72FD4D1074C}\ProxyStubClsid32\(Default)"="{00020424-0000-0000-C000-000000000046}"
    HKEY_CLASSES_ROOT\Interface\{68CCC4DA-B487-4791-AD94-E72FD4D1074C}\TypeLib\(Default)"="{D6BE4255-97C9-4D5C-9801-91DADDA92D81}"
    HKEY_CLASSES_ROOT\Interface\{68CCC4DA-B487-4791-AD94-E72FD4D1074C}\TypeLib\Version"="1.0"
    HKEY_CLASSES_ROOT\Interface\{A02235E1-68BA-11D5-AB93-00D0B760B4EB}\(Default)"="ICallBack"
    HKEY_CLASSES_ROOT\Interface\{A02235E1-68BA-11D5-AB93-00D0B760B4EB}\ProxyStubClsid\(Default)"="{00020424-0000-0000-C000-000000000046}"
    HKEY_CLASSES_ROOT\Interface\{A02235E1-68BA-11D5-AB93-00D0B760B4EB}\ProxyStubClsid32\(Default)"="{00020424-0000-0000-C000-000000000046}"
    HKEY_CLASSES_ROOT\Interface\{A02235E1-68BA-11D5-AB93-00D0B760B4EB}\TypeLib\(Default)"="{D6BE4255-97C9-4D5C-9801-91DADDA92D81}"
    HKEY_CLASSES_ROOT\Interface\{A02235E1-68BA-11D5-AB93-00D0B760B4EB}\TypeLib\Version"="1.0"
    HKEY_CLASSES_ROOT\FetchComm.CommFetch.1\(Default)"="CommFetch Class"
    HKEY_CLASSES_ROOT\FetchComm.CommFetch.1\CLSID\(Default)"="{02CDB0ED-874A-4DCB-8D9F-C2E3B169F265}"
    HKEY_CLASSES_ROOT\FetchComm.CommFetch\(Default)"="CommFetch Class"
    HKEY_CLASSES_ROOT\FetchComm.CommFetch\CLSID\(Default)"="{02CDB0ED-874A-4DCB-8D9F-C2E3B169F265}"
    HKEY_CLASSES_ROOT\FetchComm.CommFetch\CurVer\(Default)"="FetchComm.CommFetch.1"
    HKEY_CLASSES_ROOT\CLSID\{02CDB0ED-874A-4DCB-8D9F-C2E3B169F265}\(Default)"="CommFetch Class"
    HKEY_CLASSES_ROOT\CLSID\{02CDB0ED-874A-4DCB-8D9F-C2E3B169F265}\ProgID\(Default)"="FetchComm.CommFetch.1"
    HKEY_CLASSES_ROOT\CLSID\{02CDB0ED-874A-4DCB-8D9F-C2E3B169F265}\VersionIndependentProgID\(Default)"="FetchComm.CommFetch"
    HKEY_CLASSES_ROOT\CLSID\{02CDB0ED-874A-4DCB-8D9F-C2E3B169F265}\InprocServer32\(Default)"="C:\Program Files\topicks\bin\idmcom.dll"
    HKEY_CLASSES_ROOT\CLSID\{02CDB0ED-874A-4DCB-8D9F-C2E3B169F265}\InprocServer32\ThreadingModel"="Apartment"
    HKEY_CLASSES_ROOT\CLSID\{02CDB0ED-874A-4DCB-8D9F-C2E3B169F265}\TypeLib\(Default)"="{F533946A-DB32-4426-A104-BC22F543DA6A}"
    HKEY_CLASSES_ROOT\TypeLib\{F533946A-DB32-4426-A104-BC22F543DA6A}\1.0\(Default)"="FetchComm 1.0 Type Library"
    HKEY_CLASSES_ROOT\TypeLib\{F533946A-DB32-4426-A104-BC22F543DA6A}\1.0\FLAGS\(Default)"="0"
    HKEY_CLASSES_ROOT\TypeLib\{F533946A-DB32-4426-A104-BC22F543DA6A}\1.0\0\win32\(Default)"="C:\Program Files\topicks\bin\idmcom.dll"
    HKEY_CLASSES_ROOT\TypeLib\{F533946A-DB32-4426-A104-BC22F543DA6A}\1.0\HELPDIR\(Default)"="C:\Program Files\topicks\bin\"
    HKEY_CLASSES_ROOT\Interface\{B2FFA779-8DC5-4774-837F-7323B32E293E}\(Default)"="ICommFetch"
    HKEY_CLASSES_ROOT\Interface\{B2FFA779-8DC5-4774-837F-7323B32E293E}\ProxyStubClsid\(Default)"="{00020424-0000-0000-C000-000000000046}"
    HKEY_CLASSES_ROOT\Interface\{B2FFA779-8DC5-4774-837F-7323B32E293E}\ProxyStubClsid32\(Default)"="{00020424-0000-0000-C000-000000000046}"
    HKEY_CLASSES_ROOT\Interface\{B2FFA779-8DC5-4774-837F-7323B32E293E}\TypeLib\(Default)"="{F533946A-DB32-4426-A104-BC22F543DA6A}"
    HKEY_CLASSES_ROOT\Interface\{B2FFA779-8DC5-4774-837F-7323B32E293E}\TypeLib\Version"="1.0"
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\RNG\Seed"=83 41 40 A4 BA EA CA 7C ...
    HKEY_CLASSES_ROOT\IdiumUpdater.IdiumSysUpdater.1\(Default)"="IdiumSysUpdater Class"
    HKEY_CLASSES_ROOT\IdiumUpdater.IdiumSysUpdater.1\CLSID\(Default)"="{5C40012E-44CA-11D7-8411-0002A5F9D08E}"
    HKEY_CLASSES_ROOT\IdiumUpdater.IdiumSysUpdater\(Default)"="IdiumSysUpdater Class"
    HKEY_CLASSES_ROOT\IdiumUpdater.IdiumSysUpdater\CLSID\(Default)"="{5C40012E-44CA-11D7-8411-0002A5F9D08E}"
    HKEY_CLASSES_ROOT\IdiumUpdater.IdiumSysUpdater\CurVer\(Default)"="IdiumUpdater.IdiumSysUpdater.1"
    HKEY_CLASSES_ROOT\CLSID\{5C40012E-44CA-11D7-8411-0002A5F9D08E}\(Default)"="IdiumSysUpdater Class"
    HKEY_CLASSES_ROOT\CLSID\{5C40012E-44CA-11D7-8411-0002A5F9D08E}\ProgID\(Default)"="IdiumUpdater.IdiumSysUpdater.1"
    HKEY_CLASSES_ROOT\CLSID\{5C40012E-44CA-11D7-8411-0002A5F9D08E}\VersionIndependentProgID\(Default)"="IdiumUpdater.IdiumSysUpdater"
    HKEY_CLASSES_ROOT\CLSID\{5C40012E-44CA-11D7-8411-0002A5F9D08E}\InprocServer32\(Default)"="C:\Program Files\topicks\bin\IdmUp.dll"
    HKEY_CLASSES_ROOT\CLSID\{5C40012E-44CA-11D7-8411-0002A5F9D08E}\InprocServer32\ThreadingModel"="Both"
    HKEY_CLASSES_ROOT\CLSID\{5C40012E-44CA-11D7-8411-0002A5F9D08E}\TypeLib\(Default)"="{5C400120-44CA-11D7-8411-0002A5F9D08E}"
    HKEY_CLASSES_ROOT\TypeLib\{5C400120-44CA-11D7-8411-0002A5F9D08E}\1.0\(Default)"="IdiumUpdater 1.0 Type Library"
    HKEY_CLASSES_ROOT\TypeLib\{5C400120-44CA-11D7-8411-0002A5F9D08E}\1.0\FLAGS\(Default)"="0"
    HKEY_CLASSES_ROOT\TypeLib\{5C400120-44CA-11D7-8411-0002A5F9D08E}\1.0\0\win32\(Default)"="C:\Program Files\topicks\bin\IdmUp.dll"
    HKEY_CLASSES_ROOT\TypeLib\{5C400120-44CA-11D7-8411-0002A5F9D08E}\1.0\HELPDIR\(Default)"="C:\Program Files\topicks\bin\"
    HKEY_CLASSES_ROOT\Interface\{5C40012D-44CA-11D7-8411-0002A5F9D08E}\(Default)"="IIdiumSysUpdater"
    HKEY_CLASSES_ROOT\Interface\{5C40012D-44CA-11D7-8411-0002A5F9D08E}\ProxyStubClsid\(Default)"="{00020424-0000-0000-C000-000000000046}"
    HKEY_CLASSES_ROOT\Interface\{5C40012D-44CA-11D7-8411-0002A5F9D08E}\ProxyStubClsid32\(Default)"="{00020424-0000-0000-C000-000000000046}"
    HKEY_CLASSES_ROOT\Interface\{5C40012D-44CA-11D7-8411-0002A5F9D08E}\TypeLib\(Default)"="{5C400120-44CA-11D7-8411-0002A5F9D08E}"
    HKEY_CLASSES_ROOT\Interface\{5C40012D-44CA-11D7-8411-0002A5F9D08E}\TypeLib\Version"="1.0"
    HKEY_CLASSES_ROOT\Interface\{5C40012F-44CA-11D7-8411-0002A5F9D08E}\(Default)"="_IIdiumSysUpdaterEvents"
    HKEY_CLASSES_ROOT\Interface\{5C40012F-44CA-11D7-8411-0002A5F9D08E}\ProxyStubClsid\(Default)"="{00020420-0000-0000-C000-000000000046}"
    HKEY_CLASSES_ROOT\Interface\{5C40012F-44CA-11D7-8411-0002A5F9D08E}\ProxyStubClsid32\(Default)"="{00020420-0000-0000-C000-000000000046}"
    HKEY_CLASSES_ROOT\Interface\{5C40012F-44CA-11D7-8411-0002A5F9D08E}\TypeLib\(Default)"="{5C400120-44CA-11D7-8411-0002A5F9D08E}"
    HKEY_CLASSES_ROOT\Interface\{5C40012F-44CA-11D7-8411-0002A5F9D08E}\TypeLib\Version"="1.0"
    HKEY_CLASSES_ROOT\Topicks.TopicksBar.1\(Default)"="Topicks Categories"
    HKEY_CLASSES_ROOT\Topicks.TopicksBar.1\CLSID\(Default)"="{80E81A0E-9741-4FBC-8EE3-3B78C04ADA1D}"
    HKEY_CLASSES_ROOT\Topicks.TopicksBar\(Default)"="Topicks Categories"
    HKEY_CLASSES_ROOT\Topicks.TopicksBar\CLSID\(Default)"="{80E81A0E-9741-4FBC-8EE3-3B78C04ADA1D}"
    HKEY_CLASSES_ROOT\Topicks.TopicksBar\CurVer\(Default)"="Topicks.TopicksBar.1"
    HKEY_CLASSES_ROOT\CLSID\{80E81A0E-9741-4FBC-8EE3-3B78C04ADA1D}\(Default)"="Topicks Categories"
    HKEY_CLASSES_ROOT\CLSID\{80E81A0E-9741-4FBC-8EE3-3B78C04ADA1D}\ProgID\(Default)"="Topicks.TopicksBar.1"
    HKEY_CLASSES_ROOT\CLSID\{80E81A0E-9741-4FBC-8EE3-3B78C04ADA1D}\VersionIndependentProgID\(Default)"="Topicks.TopicksBar"
    HKEY_CLASSES_ROOT\CLSID\{80E81A0E-9741-4FBC-8EE3-3B78C04ADA1D}\InprocServer32\(Default)"="C:\PROGRA~1\topicks\bin\TpBar.dll"
    HKEY_CLASSES_ROOT\CLSID\{80E81A0E-9741-4FBC-8EE3-3B78C04ADA1D}\InprocServer32\ThreadingModel"="Apartment"
    HKEY_CLASSES_ROOT\CLSID\{80E81A0E-9741-4FBC-8EE3-3B78C04ADA1D}\TypeLib\(Default)"="{9A7CFEDA-5911-4EF1-B49A-35C34230FFC1}"
    HKEY_CLASSES_ROOT\TypeLib\{9A7CFEDA-5911-4EF1-B49A-35C34230FFC1}\1.0\(Default)"="Topicks 1.0 Type Library"
    HKEY_CLASSES_ROOT\TypeLib\{9A7CFEDA-5911-4EF1-B49A-35C34230FFC1}\1.0\FLAGS\(Default)"="0"
    HKEY_CLASSES_ROOT\TypeLib\{9A7CFEDA-5911-4EF1-B49A-35C34230FFC1}\1.0\0\win32\(Default)"="C:\Program Files\topicks\bin\TpBar.dll"
    HKEY_CLASSES_ROOT\TypeLib\{9A7CFEDA-5911-4EF1-B49A-35C34230FFC1}\1.0\HELPDIR\(Default)"="C:\Program Files\topicks\bin\"
    HKEY_CLASSES_ROOT\Interface\{262C80B1-9F63-45EA-ACF7-539BDACD0E12}\(Default)"="ITopicksBar"
    HKEY_CLASSES_ROOT\Interface\{262C80B1-9F63-45EA-ACF7-539BDACD0E12}\ProxyStubClsid\(Default)"="{00020424-0000-0000-C000-000000000046}"
    HKEY_CLASSES_ROOT\Interface\{262C80B1-9F63-45EA-ACF7-539BDACD0E12}\ProxyStubClsid32\(Default)"="{00020424-0000-0000-C000-000000000046}"
    HKEY_CLASSES_ROOT\Interface\{262C80B1-9F63-45EA-ACF7-539BDACD0E12}\TypeLib\(Default)"="{9A7CFEDA-5911-4EF1-B49A-35C34230FFC1}"
    HKEY_CLASSES_ROOT\Interface\{262C80B1-9F63-45EA-ACF7-539BDACD0E12}\TypeLib\Version"="1.0"
    HKEY_CLASSES_ROOT\ToPicksReg.ToPickReg1.1\(Default)"="ToPickReg1 Class"
    HKEY_CLASSES_ROOT\ToPicksReg.ToPickReg1.1\CLSID\(Default)"="{1717A4A5-D63A-4F70-B373-AE4AA46D1236}"
    HKEY_CLASSES_ROOT\ToPicksReg.ToPickReg1\(Default)"="ToPickReg1 Class"
    HKEY_CLASSES_ROOT\ToPicksReg.ToPickReg1\CLSID\(Default)"="{1717A4A5-D63A-4F70-B373-AE4AA46D1236}"
    HKEY_CLASSES_ROOT\ToPicksReg.ToPickReg1\CurVer\(Default)"="ToPicksReg.ToPickReg1.1"
    HKEY_CLASSES_ROOT\CLSID\{1717A4A5-D63A-4F70-B373-AE4AA46D1236}\(Default)"="ToPickReg1 Class"
    HKEY_CLASSES_ROOT\CLSID\{1717A4A5-D63A-4F70-B373-AE4AA46D1236}\ProgID\(Default)"="ToPicksReg.ToPickReg1.1"
    HKEY_CLASSES_ROOT\CLSID\{1717A4A5-D63A-4F70-B373-AE4AA46D1236}\VersionIndependentProgID\(Default)"="ToPicksReg.ToPickReg1"
    HKEY_CLASSES_ROOT\CLSID\{1717A4A5-D63A-4F70-B373-AE4AA46D1236}\InprocServer32\(Default)"="C:\Program Files\topicks\bin\TPReg.dll"
    HKEY_CLASSES_ROOT\CLSID\{1717A4A5-D63A-4F70-B373-AE4AA46D1236}\InprocServer32\ThreadingModel"="Apartment"
    HKEY_CLASSES_ROOT\CLSID\{1717A4A5-D63A-4F70-B373-AE4AA46D1236}\TypeLib\(Default)"="{49D25A3F-28EF-4F38-BF7F-BC5FE6D39FA7}"
    HKEY_CLASSES_ROOT\TypeLib\{49D25A3F-28EF-4F38-BF7F-BC5FE6D39FA7}\1.0\(Default)"="ToPicksReg 1.0 Type Library"
    HKEY_CLASSES_ROOT\TypeLib\{49D25A3F-28EF-4F38-BF7F-BC5FE6D39FA7}\1.0\FLAGS\(Default)"="0"
    HKEY_CLASSES_ROOT\TypeLib\{49D25A3F-28EF-4F38-BF7F-BC5FE6D39FA7}\1.0\0\win32\(Default)"="C:\Program Files\topicks\bin\TPReg.dll"
    HKEY_CLASSES_ROOT\TypeLib\{49D25A3F-28EF-4F38-BF7F-BC5FE6D39FA7}\1.0\HELPDIR\(Default)"="C:\Program Files\topicks\bin\"
    HKEY_CLASSES_ROOT\Interface\{C809EE32-C648-459B-9A99-5CB20F61DCFC}\(Default)"="IToPickReg1"
    HKEY_CLASSES_ROOT\Interface\{C809EE32-C648-459B-9A99-5CB20F61DCFC}\ProxyStubClsid\(Default)"="{00020424-0000-0000-C000-000000000046}"
    HKEY_CLASSES_ROOT\Interface\{C809EE32-C648-459B-9A99-5CB20F61DCFC}\ProxyStubClsid32\(Default)"="{00020424-0000-0000-C000-000000000046}"
    HKEY_CLASSES_ROOT\Interface\{C809EE32-C648-459B-9A99-5CB20F61DCFC}\TypeLib\(Default)"="{49D25A3F-28EF-4F38-BF7F-BC5FE6D39FA7}"
    HKEY_CLASSES_ROOT\Interface\{C809EE32-C648-459B-9A99-5CB20F61DCFC}\TypeLib\Version"="1.0"
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\TOPicks - Explore the web\DisplayVersion"="0.96"
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\TOPicks - Explore the web\HelpLink"="http:/ /www.topicks.com/support/"
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\TOPicks - Explore the web\Publisher"="Idium Systems Ltd."
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\TOPicks - Explore the web\URLInfoAbout"="http:/ /www.topicks.com"

2. Creates the following files:
    • C:\Program Files\topicks\bin\Datamgr.dll
    • C:\Program Files\topicks\bin\HtCheck2.dll
    • C:\Program Files\topicks\bin\hthost.exe
    • C:\Program Files\topicks\bin\Idhost.exe
    • C:\Program Files\topicks\bin\IdmUp.dll
    • C:\Program Files\topicks\bin\TpBar.dll
    • C:\Program Files\topicks\bin\TPReg.dll

According to TOPicks:

"TOPicks relays on aggregated surfing data to identify the best sites in the web. For this purpose TOPicks sends data about your surfing events. This data doesn't include any personally identifiable information and is just used as statistical data."

Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver