CastleCops® - CLSID BHOList ToolbarList

Need help? Click here to register for free! Absolutely zero advertisements on this site!

**$9736.22 of $21422.68**

Help CastleCops serve the community on new servers, Donate Here to reach our goal.

The CLSID / BHO List / Toolbar Master List

Currently 53509 entries and growing...

This is the Master BHO and Toolbar list copyrighted by Tony Klein and CastleCops. For expert assistance, please post here. The information is collected across the Internet by the CastleCops Team. Usage: please leave feedback requesting permission if you are interested in using this data beyond the approved channels.

BHOList - ToolbarList

KEY:

"X" - Certified spyware/foistware, or other malware

"L" - Legitimate items

"O" - Open to debate

"?" - Unknown Status

"BHO" - Browser Helper Object

"TB" - Toolbar

"SH" - R3 URL SearchHook

"EB" - IE Explorer Bar

ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z

Random sampling...

OBJECT NAME	GUID	STATUS	FILENAME	DESCRIPTION
Class	{7FCBB2BF-0927-3935-B0E0-2B4C992D8F3B}	X `BHO`	CR*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{EE2B61D5-8A38-A986-36BF-9653744FA650}	X `BHO`	CR*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{8A173A54-5646-15FF-EA3F-C5FDF8E65961}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{6C4EB55C-5151-DA83-39AB-64E124FC992E}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{BF461BFA-61C9-0499-764F-BCDD7A00B876}	X `BHO`	CR*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Editor plugin	{7728276A-4CBB-4ffa-982D-0CA20547BB49}	X `BHO`	coreduo.dll	Variant of the Infostealer.Banker.D trojan
Class	{EAE9436C-2B4B-9FC6-630F-32F8F5F0E655}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{DA483EF2-6D1B-AF1A-0542-7AC8A2FA805F}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
(no name)	{8F500FAC-6A31-40B7-BD3E-791AA0DCB8B6}	X `BHO`	comctl64.dll	Downloader, detected by AntiVir antivirus as TR/Nabload.VH
Class	{5FEFF6CD-2088-1D07-9E5C-7B605C429291}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{6C8F7573-241B-140E-BD82-5F4CB7C3930C}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{7342B529-CD28-C151-1F6B-543301755A02}	X `BHO`	CR*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{485375E7-E407-CD9A-2D9F-D52037394BD4}	X `BHO`	CR*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{CC66C745-C937-6C6A-B24C-66F86F75A963}	X `BHO`	CR*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
CashBarre	{BFB5F154-9212-46F3-B547-AC6106030A54}	O `TB`	CashBarre.dll	Cashbarre.net toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Remove unless you both trust it and expressly meant to install it.
Class	{D557E11B-41A0-22B3-4E19-E4D33C1540D5}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{E1732A5F-EB56-3C72-B2B2-173489E5DCB4}	X `BHO`	CR*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
[random]	{B3EDAF49-217B-4d56-A017-BC722E5E0F06}	X `BHO`	cdmodem.dll	SearchingAll adware variant (the file is located in the system32\drivers folder, and must not be confused with the legitimate Microsoft file of the same name!)
InternetExplorer Class	{D1E45498-D865-4E91-A579-D0AAD8D3B5A4}	L `BHO`	Clue Addin.dll	Clue_elektroniske_ordboker browser plugin
Class	{A9291FE8-7893-0153-C2CD-B5645FD0D608}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{79FC5F6C-346E-38A3-3388-C4292F100252}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{4A7432E2-42B1-CA0C-E2E2-B9E7426EE6A6}	X `BHO`	CR*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{85A8D85F-2DD8-DE08-A0B2-F759605E60DA}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{D9E13F4B-C96F-A18D-A3A2-1424A8ADCA0E}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{6FA9B61A-6006-1F8E-1B04-89DA8BB5A021}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{092C89DA-6FB1-13BA-404C-464FC926BA68}	X `BHO`	CR*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{C5B47958-9347-7057-16BF-6102C0E72DB3}	X `BHO`	CR*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{1F225369-7AA5-B038-7715-1A0FBA6C875B}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{B095621C-F02F-F5FF-DF76-58A0B105B619}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{11762563-B790-AC99-735F-1EA21A0E2E42}	X `BHO`	CR*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{589C2260-26D5-FF39-DD1D-9A4F791A1C96}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{427AEE96-C35B-9EDB-F194-BFD657FECF4C}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
CookieHlprObj Class	{4DF1DB24-A57C-11d3-A180-00A0C90AE44B}	L `BHO`	Cookiehlpr.dll	CookieCop
Class	{84538E9F-F854-AA83-69CD-8EBA72EFD01D}	X `BHO`	CR*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{3A24E091-3060-2EF1-1AB6-DD85FAE4D565}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{63C3B90C-CAE8-913A-DBA5-AC8E0D0896D0}	X `BHO`	cr*32.dll ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{9E709407-AB82-41D3-DA7F-267AB6FA41A2}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{7D97C460-3EA1-3C33-6F8A-16A4C1720941}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
cash-backmoll	{C88714E7-403B-483B-B2A9-E2CA9CF2928C}	X `EB`	cashbackmollbar.dll	Parasite of Korean origin haling from cash-backmoll.com and detected as Adware.CashbackMoll
Class	{8F734786-651F-6066-E682-CAAE4F954ECE}	X `BHO`	CR*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
tscgm Class	{D11D0862-0390-4884-A95C-4702D0D4C11A}	X `BHO`	coredrv32.dll	Hijacker of Chinese origin, resets homepage to www.ggddmm.com - detected by Kaspersky antivirus as Trojan-Downloader.Win32.Agent.axa
Class	{F8B9848E-DD4B-7336-C734-7E561B0875DB}	X `BHO`	CR*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
ChipmarkBar	{313375BC-2314-6E4D-8CDF-B2C329AF562B}	L `TB`	ChipmarkBar.dll	Chipmark_Toolbar
Class	{74EDB343-0CEA-2557-78E0-56CC2C95DD49}	X `BHO`	CR*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{600CF1D3-3D02-C22D-D2B6-A94BD0FDF46C}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{433D13E5-D237-61BE-5B79-27175A21BD80}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{FCB9041E-2D86-4562-7DE2-6ECFD4FFCDEC}	X `BHO`	CR*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{22D7C78D-FF49-98BD-D9A9-741F319D802B}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{1225411D-3B77-6602-C5E7-A8F3FDF486D1}	X `BHO`	CR*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{C3678D25-D9D6-5E2A-DB00-F69BB636E16E}	X `BHO`	CR*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
CnBho Class	{1CE35DBA-0DEC-4FC9-AF83-4B12642E9EC9}	X `BHO`	cnbho.dll	Parasite of Chinese origin, a CDN aka CNNIC adware component
Class	{9283BCBC-BD4E-7085-A522-15DA21F5680D}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
FLW Viewer	{8D820860-2FA8-49A8-8809-B450ED80D3BB}	X `BHO`	cndr32a.dll	Downloader trojan, member of the FakeAlert aka SmitFraud malware family - produces IEDefender or similar popups - also see here
H	{BD995DE5-2A73-4b82-A161-327DD0ECB3A3}	X `BHO`	coq.dll, crim.dll	Variant of the Infostealer.Banker.D trojan
Class	{3F1BB4CB-FD6D-A0D8-C38F-183CE033C2DA}	X `BHO`	CR*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component


	2002-2008 � Computer Cops LLC dba CastleCops®. All rights reserved. Acceptable Use Policy. Use signifies your agreement. 79ppm 1.366s (0.085s) Making cybercriminals unhappy since 2002*