CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

The CLSID / BHO List / Toolbar Master List

Currently 53088 entries and growing...

This is the Master BHO and Toolbar list copyrighted by Tony Klein and CastleCops. For expert assistance, please post here. The information is collected across the Internet by the CastleCops Team. Usage: please leave feedback requesting permission if you are interested in using this data beyond the approved channels.

BHOList - ToolbarList

KEY:
  • "X" - Certified spyware/foistware, or other malware
  • "L" - Legitimate items
  • "O" - Open to debate
  • "?" - Unknown Status
  • "BHO" - Browser Helper Object
  • "TB" - Toolbar
  • "SH" - R3 URL SearchHook
  • "EB" - IE Explorer Bar

    •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z

    Random sampling...
    OBJECT NAMEGUIDSTATUSFILENAMEDESCRIPTION
    Class{98707CF5-0CF3-0851-93A3-F6FC873AFD1D}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Web1000 Toolbar {6D53ADB7-6AD5-4A59-BFE4-7B57D2F4AA89}O TB WEB1000.DLL Web1000 toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this.
    Class{25624BFB-63BC-9D3A-463E-ECF159ED6A0C}X BHO WIN**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{49CC0F19-83F2-64E4-F4E2-F352D4537F04}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    StartBHO Class{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}X TB webdlg32.dll Adware-SBSoft - a CoolWebSearch parasite variant
    Class{4CBB035F-C737-C9AB-F3E4-D29F66B1BA99}X BHO WIN**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{5E4E19CF-F766-E9FC-4D30-2E229D9B70DD}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    (no name){85CF4327-68DE-1974-B32E-766E84A9706C}L BHO wcidBHO.dllNorton Confidence Online
    Class{6AA38BCF-874D-EF8C-FA20-292FBD823515}X BHO WIN**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{72853B9D-D035-B821-F3EB-4F849C3DF9E4}X BHO WIN**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    BHObj Class{8F4E5661-F99E-4B3E-8D85-0EA71C0748E4}X BHO Wsem***.dll , (* = digit) DyFuCa/Internet_Optimizer adware variant
    Ipswitch.WsftpBrowserHelper{601ED020-FB6C-11D3-87D8-0050DA59922B}L BHO wsbho2k0.dllWS_FTP
    Class{CE842598-8BD3-7904-8535-E276DDF3D4D2}X BHO WIN**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    WebAllow Class{FBD4C5F8-9F32-4926-9827-0ED9CB13DBB3}O BHO weballow.dll WebAllow parental and access control software
    {9FF528A9-7314-4658-B497-3D1D4597B300}X BHO wingss32.dll iLookup parasite variant
    Class{53774326-3446-0CCE-DB18-60310DE13BD8}X BHO WIN**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{DEABBF72-CBCF-130F-A1A1-D1A289913E85}X BHO WIN**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{737CB629-FF3F-49DE-557E-0963EA966FBF}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{1F2630C3-E654-C8C7-3EB4-CA2402B03CA3}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Arb Cruncher Toolbar{099C2990-E592-49EC-B772-83CFD8BE6E74}L TB WebBarIE.dllArb Cruncher Toolbar
    Class{11BB3F26-B402-8794-B3D9-25C5C21C5AEB}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{F2529D81-E3AD-492D-C89C-FEDCDCEC1551}X BHO WIN**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{87716C8D-8534-BE5D-802D-4FD4A93168DF}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{C899EE69-102E-A91D-F517-30064E1F635F}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{22B1EC47-1EAB-B7A8-630D-99F8D36BEB48}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{BBF6C91B-BC8D-9FD0-A0DA-199E2D773BC9}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    BrowserHelper Class{2D99E8F4-56B7-457B-9A92-61B5D247D263}X BHO WinDefendor.dll DesktopMedia adware component
    Class{12041BCC-E47A-FD55-58A2-4F77EA21C2FA}X BHO WIN**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{01150E67-46D2-BA88-66F7-79E174FC8984}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{50CE913D-6D26-086D-B604-302061B78BFC}X BHO WIN**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    WinSurf{1F91C786-BBA0-41D2-8B3D-B88242677BAC}X BHO winsurf.dllDownloader trojan, member of the FakeAlert aka SmitFraud malware family - produces IEDefender or similar popups - also see here
    Class{7283F7AC-67AF-202A-8F24-767B60E36793}X BHO WIN**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{1E0DD448-50B0-6632-A4F8-EDD3184CC3C2}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{750FF9F1-9D7A-E337-A964-FD57D4914B02}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{BD17FBCC-7402-AF39-F454-83BAA6A0B7B6}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    {1F48AA48-C53A-4E21-85E7-AC7CC6B5FFA8}X BHO win****.dll (* = random character) ToolbarCC adware variant
    TBSB09677{96A6EAE9-94F5-428D-962E-3BD39A690E07}L BHO wikiseek.dll Wikiseek Wikipedia Search plugin
    Class{EE13EB7D-EBCF-F6FC-0596-289AC46D563C}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{395BCDF4-652A-7058-FD1B-061D1F21BA9B}X BHO WIN**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{C01370AF-C47B-0845-5729-1446B085D9AB}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{9FBCC241-DBEC-FD55-1F55-5F52A66E18F3}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{7F97920A-F86E-E377-EB56-8C41D2539602}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Windows Genuine Advantage Logon Validation{********-****-****-****-************}X BHO wgalogin.dll, wgacontrol32.dll, wgasys.dllPassword stealer of Brazilian origin, detected by AntiVir as PHISH/FraudTool.MalWarrior.C
    Class{597C1A81-194B-2343-CC39-9D735457113A}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{F9DA74EF-6237-BB64-F1BB-DD60054C63EC}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{82AEAA16-4EE5-D82E-5AA1-5935B5734481}X BHO WIN**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{2C62254F-D314-9866-4F72-602DCB792912}X BHO WIN**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{0DFBD1CD-D3E2-7D8F-E66F-7CC3DEDD603B}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{097FEAC8-2F66-1ADA-699F-2838B1F22928}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{B1D33F22-DCF6-C4F9-36CA-5E85E6824B01}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{66322FF6-74F9-04B2-72CA-5D742B4B27C2}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{029D849A-5810-1BA5-81C6-B77CF15DA51B}X BHO WIN**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{EE649084-0B83-9087-48EA-AB7709BEABE0}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{5B572B4B-7A0C-3229-575F-2B91F6E454F4}X BHO WIN**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    (no name){E96519A4-81FC-4F52-9A3D-B4275550CE04}X BHO WsHP.dllParasite of Korean origin detected by Ahnlab antivirus as Win-Downloader/ShopCenter.272774
    2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved.
    Acceptable Use Policy. Use signifies your agreement.
    244ppm 0.221s (0.082s)
    Making cybercriminals unhappy since 2002*
    In Memory of Trpm
    spacer spacer