CheckURL is a spyware program that was first discovered in January of 2004.  It can be transmitted by manual installation by itself, or be bundled in an ad supported freeware bundle.  It is disguised as a search enhancing browser toolbar in order to convince the user to download it.

In reality, CheckURL collects computer information by keystroke logging and by taking snapshots of the computer’s screen.  It then sends this information to a remote server, which sends customized ads based on this data.  This represents a potential hazard for credit card information and account logins, and could lead to identity theft.

If you are infected with CheckURL, you should definitely remove it from your computer as quickly as you can.  It is a high risk for identity theft, and it can also affect your computer’s operating speed and stability.  Due to the hazards and complexity of manual removal, it should not be attempted unless you are a trained professional.  Instead, you should use a spyware removal tool like SpyZooka.

Associated Files:
[%programfilesdir%]Fat PuppyCheckUrl.dll
[%SYSTEM%]checkurl.dll
[%WINDOWS%]systemcheckurl.dll
HKEY_CLASSES_ROOTclsid {a9eef0d7-5695-45ba-8943-ed3b95a50bd2}
HKEY_CLASSES_ROOTsoftwaremicrosoftwindowscurrentversionexplorerbrowser helper objects {a9eef0d7-5695-45ba-8943-ed3b95a50bd2}
HKEY_LOCAL_MACHINEsoftwareclassesclsid {a9eef0d7-5695-45ba-8943-ed3b95a50bd2}
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorerbrowser helper objects {a9eef0d7-5695-45ba-8943-ed3b95a50bd2}