CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

The CLSID / BHO List / Toolbar Master List

Currently 54019 entries and growing...

This is the Master BHO and Toolbar list copyrighted by Tony Klein and CastleCops. For expert assistance, please post here. The information is collected across the Internet by the CastleCops Team. Usage: please leave feedback requesting permission if you are interested in using this data beyond the approved channels.

BHOList - ToolbarList

KEY:
  • "X" - Certified spyware/foistware, or other malware
  • "L" - Legitimate items
  • "O" - Open to debate
  • "?" - Unknown Status
  • "BHO" - Browser Helper Object
  • "TB" - Toolbar
  • "SH" - R3 URL SearchHook
  • "EB" - IE Explorer Bar

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z

    Random sampling...
    OBJECT NAMEGUIDSTATUSFILENAMEDESCRIPTION
    (no name){EA2F9B93-1CB9-4AD3-8FCF-5879F2049A2B}L BHO pwgieac.dllSydatec Password Guard
    PayPal Toolbar{C8390328-1270-436B-A76F-D85B0E8F3F34}L TB PPBar.dllPayPal webassist
    PrivateIEBHO.CPrivateIEBHO{BD0D4420-5E4C-4FCC-AFC0-EEA69B608E75}L BHO Privateiebho.dllSecure IE
    PagesConso Toolbar{34F459B8-1D37-4FF2-9EFA-192D8E3ABA6F}O TB pagesconso_toolbar.dll, PAGESC~1.DLLPagesConso.com toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Your choice.
    PayPal Virtual Debit Card{DC0F2F93-27FA-4f84-ACAA-9416F90B9511}L TB PayPalHelper.dll, OToolbar.dll PayPal Virtual_Debit_Card software
    {7E82235C-F31E-46CB-AF9F-1ADD94C585FF}L TB pstopper.dllPanicware Popup Stopper
    Samurai Popup Blocker{75784982-2697-4fb9-890F-44F30E50CF4D}? BHO PopupBlocker.dllUnidentified browser plugin - should you have any information about this application, such as its exact purpose and whether you did or did not install it wittingly, do email us - if you actually have a copy of the file, please attach it to your email for analysis. Thanks!
    Super Popup Blocker{F1C0FAF2-E52F-4370-BC75-2C828C027B9E}L BHO popkill.dllSagasoft Super_Popup_Blocker
    MuhasebeTR Araç Çubuğu{A5138628-55C5-11DB-8707-000347DF02FC}O TB proje.dllMuhasebeTR _Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Your choice.
    BHO{9125F250-EB4F-49FE-AE17-C17665873A5C}X BHO plugin.dll, plugin1.dllTopbrowsing.com adware, see here
    PointUrlX Class{8E488DDC-C9AE-4FBD-AF98-1AFD874B0D71}X BHO pointurl.dllParasite of Korean origin identified as W-32/Adware.BHO.PointUrl.B
    TBSB04395{0B885318-A50C-4A38-9D47-5B55B09378CA}O BHO petitepage.dll PetitePage.com_Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Installer detected by Kaspersky antivirus as AdWare.Win32.Mostofate.ah and by Bitdefender as Adware.Softmate.F
    PEDEV_IEListener Class{E1412445-4FF8-410e-8D24-F2CF86B171A4}X BHO PeDev.dllDelfin_Promulgate adware variant
    XBTP08998 Class{B8FC7AE4-FD8B-477c-B1BD-DE14280DECAF}X BHO pcworldtoolbar.dll, PCWORL~1.DLLPcWorld Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality - also see here
    pwn plugin{7E24E909-FB8A-4837-9DF7-05E7587CB26C}X BHO pwnbho.dllDownloader trojan, member of the FakeAlert aka SmitFraud malware family - produces IEDefender popups - also see here
    3{83A6AADF-6045-434a-939F-48E5760C600C}X BHO pupm.dll, pusha.dllUnidentified parasite - should you have any information about this application, do email us - if you actually have a copy of the file, please attach it to your email for analysis. Thanks!
    CIEIntegrator Object{2178F3FB-2560-458F-BDEE-631E2FE0DFE4}X BHO pbd.dllPCVirusless - rogue "security software" using false positives as goad to purchase.
    Video On-line{7D8BD0D7-8FD8-48CB-A0B5-472F68B92BC4}X BHO PowerVideo.dllDownloader trojan, member of the FakeAlert aka SmitFraud malware family - produces IEDefender popups - also see here
    pvnsmfor{E738884B-E75D-4AC3-B03F-62F7E7DD853E}X TB pvnsmfor.dllParasite causing false spyware warnings and connecting to fake "security sites"- member of the FakeAlert aka SmitFraud malware family
    MSVPS System{23649336-4FC4-411C-84EE-6A2B51CE5E23}X BHO pssmart.dll, iesup.dll MyGeek/Cpvfeed.com adware variant, detected by Kaspersky antivirus as AdWare.Win32.Agent.bn - logs search engine queries to a %Windir%\search_res.txt file. Also see here
    SIPAKBHO Class, AdsCleaner Helper{40FB69E1-9B7B-453F-B238-37D8E9528929}L BHO PAKIEPlugins.dllWebfilter as used by AdsCleaner
    PPGou BHO{00000000-0000-0000-0000-C4CA9A05F1E2}L BHO ppgiecom*.dll, PPGIEC~*.DLL, PPG2IE~1.DLL PPGou p2p client and download accelerator
    PopupSentry Class{00000000-6C30-11D8-9363-000AE6309657}L BHO PSBHO.DLLPop-Up Sentry
    Purdue Tool Bar{48FAC4EB-5608-40C7-99F1-DA184FBEE328}O TB PU-bar.dll Purdue_ToolBar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Some of the toolbars are fine to have, so every case is different. Your choice.
    PBlockadeHelper Class{4115122B-85FF-4DD3-9515-F075BEDE5EB5}X BHO pbhelper.dll Marsfind.PopupBlockade adware
    IE PopUpKiller DownloadManager ; Neikeisoft{49E0E0F0-5C30-11D4-945D-000000000009}L BHO PopUp.dllPearl.de "Simon-Tools" Anti-Spam
    TBSB04039{20700F87-8AC3-4207-B9CF-EA4FD94AE0B2}X BHO porntubeviewer.dllPornTubeViewer - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs.
    Everclear Toolbar{4E7BD74F-2B8D-469E-B9DC-CF39F0D3F960}O BHO TB prodegetoolbar***.dll, PRODEG~*.DLL Everclear Toolbar - a Prodege_Toolbar by Visicom Media
    PE_IE_Helper Class{0941C58F-E461-4E03-BD7D-44C27392ADE1}L BHO PEhelper.dllIBM Workplace Forms
    (no name){FCADDC14-BD46-408A-9842-CDBE1C6D37EB}X BHO prflbmsgp32.dllMalware - detected by Kaspersky antivirus as Trojan-Downloader.Win32.Delf.vt
    PynixObj Class{00000000-DD60-0064-6EC2-6E0100000000}X BHO Pynix.dll Transponder aka BetterInternet adware variant
    Translator, Übersetzer{FF284F5C-7CF9-4682-8701-D467C1DBB99F}L TB prmtie.dll, prmtienet.dll PROMT translation software
    e404 helper{F10587E9-0E47-4CBE-84AE-7DD20B8684CC}X BHO prolooker.dll, powerwebfind.dll, superfinderusa.dll, prosearchsite.dll, webfindsite.dll, freesearchclub.dll, bigsearchonline.dll, yourprosearch.dll, mattsearch.dll, superfindout.dll, usafindsite.dll, lookerlive.dll, mastersearchsite.dll FakeAlert related browser hijacker, detected by Kaspersky antivirus as AdWare.Win32.BHO.je or Trojan.Win32.BHO.adh - also see here or here
    {5F6293C0-8686-11d5-9C62-000102117FC3}L TB palz3003.dllmini eresMas toolbar
    (no name){6487E006-6968-6016-1999-ca3230262a11}X BHO ppp_db.sys, ppp_db.sys, ppp_mmcs.bpl, ppp_nt.ax, ras_help.acm, ras_s.cpx, ras_z.rc1, man_help.scr, man_help.acm, etceteraTrojan Dropper, detected as TrojanDropper:Win32/Jevafus.A
    Pop-up Blocker{4224FF33-C2EB-4039-B8C8-6EED565B9D96}L BHO PopupBlocker.dll NetZero_DSL PopupBlocker
    PNLoader.IEHelperClass{748A5D0A-68D3-11D4-A67E-00E098823A80}L BHO pnloader.dll PopNot
    pvnsmfor {59EC7E90-81DE-40EC-B1EB-93E3CA3AD395}X TB pvnsmfor.dllParasite causing false spyware warnings and connecting to fake "security sites" - member of the FakeAlert aka SmitFraud malware family
    Video decompressor{FB8BB59E-86A8-46CC-9CB9-7307737E7C46}X BHO pandsf.dllDownloader trojan causing false spyware warnings - member of the FakeAlert aka SmitFraud malware family
    AuthPopupBHO01.cBHO{3C7195F6-D788-4D50-BA72-2EE212EDAC78}L BHO PopupBHO01.dll Authentium_ESP security software browser plugin, used by a number of ISPs, such as Comcast, Cox, TBayTel and so on
    {4E7BD74F-2B8D-469E-D0EE-E86FA787AD2D}X TB pwrscwpb.dllKeenValue PowerSearch adware variant, also see here
    pvnsmfor{DD8FEC5A-8976-438D-B6C9-F10CE205D78F}X TB pvnsmfor.dllParasite causing false spyware warnings and connecting to fake "security sites"- member of the FakeAlert aka SmitFraud malware family
    Open Search{879D3DA1-323B-495f-800B-37BF92550F7E}X TB pbnd.dll OpenSearch adware
    PTL Toolbar{39BBB92C-F7C0-4D31-91B1-DDA25FA26965}O TB ptltb.dll PTL_Toolbar - a Conduit/EffectiveBrand "Free Community" toolbar - modifies the default IE SearchHook. Some Conduit toolbars are reputed to have a certain adware/trackware functionality.
    Video decompressor{FD807848-4DCB-43F8-8D98-BD32382E5CEB}X BHO pandsf.dllDownloader trojan causing false spyware warnings - member of the FakeAlert aka SmitFraud malware family
    Presis{455C3AE7-B91A-4A56-B6ED-638B8EA5AE16}L TB Piki.dll Amebis_Presis Translation Software
    Video On-line{BD907325-42B2-4077-BA63-F636B627C998}X BHO PowerVideo.dllDownloader trojan, member of the FakeAlert aka SmitFraud malware family - produces IEDefender popups - also see here
    Video decompressor{FCE457AD-1CFC-4DC7-98DA-047AF95F8B98}X BHO pandsf.dllDownloader trojan causing false spyware warnings, member of the FakeAlert aka SmitFraud malware family
    Paginas Doradas Toolbar{01E69986-A054-4C52-ABE8-EF63DF1C5211}O TB PAGINA~1.DLL, paginasdoradas.dll Paginas_Doradas_Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Some of the toolbars are fine to have, so every case is different. Your choice.
    TBSB03067{754B68ED-14E8-4776-90F5-88D63FD12D55}O BHO prizetune.dll Prizetune_Autofill_Sweepstakes_Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Some of the toolbars are fine to have, so every case is different. Your choice.
    24T{4E7BD74F-2B8D-469E-C68A-8D2CF4D5FA7D}X BHO TB ppc.dll 24-7-search adware
    Plawan ToolBar{90B19517-212D-47D6-8137-E2071A90F389}O TB plawanbar.dllPlawan ToolBar
    IE BHO PopUp-Killer ; Neikeisoft{49E0E0F0-5C30-11D4-945D-000000000000}L BHO PopUp.dllPearl.de "Simon-Tools" Anti-Spam
    turfbar {9501479D-AA75-4F69-8CA6-59C22ADC1B5B}O TB pronoturf.dll Pronoturf_Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Installer detected by Kaspersky antivirus as AdWare.Win32.Mostofate.ah and by Bitdefender as Spyware.Cnsearchbar_DLL
    pvnsmfor{58A17A05-270C-4762-AB86-431018487CC5}X TB pvnsmfor.dllParasite causing false spyware warnings and connecting to fake "security sites"- member of the FakeAlert aka SmitFraud malware family

    spacer spacer