Filename: gtpbx.dll
Registry Value Name: Unknown, (Recieved Though VirusBurst Infection)
Command: C:\Windows\System32\gtpbx.dll
File Location: C:\Windows\System32\
Description: Dynamic Link Library Associated With VirusBurst To Send False Notification Icon and Baloons In Task Manager. C:\Windows\Explorer.exe (or in win2k or select winxp/svr2003 as c:\winnt\explorer.exe) must be completely closed for removal of this file.
Status: X

Appears in HijackThis as O21 SSODL: died - {7fa55359-7223-410f-bc82-efb3e3ded07f} - C:\Windows\System32\gtpbx.dll

BCLabs CustomBlocking List Item 65 ({7fa55359-7223-410f-bc82-efb3e3ded07f} is its possible CLSID) as VirusBurst_DirtyDLL01

Signature Has Current CustomBlocking List

Nice custom blocking list!

I have updated the guide but have not had a chance to get the startup database. Will add those shortly. Another new one is:


[64]
Name=VirusBurst_Infector
CLSID={6570b782-1a41-4053-b2c9-12c7fcf0d84d}

Corresponds to: C:\WINDOWS\System32\duxzj.dll