CastleCops® - CLSID BHOList ToolbarList

Need help? Click here to register for free! Absolutely zero advertisements on this site!

The CLSID / BHO List / Toolbar Master List

Currently 54019 entries and growing...

This is the Master BHO and Toolbar list copyrighted by Tony Klein and CastleCops. For expert assistance, please post here. The information is collected across the Internet by the CastleCops Team. Usage: please leave feedback requesting permission if you are interested in using this data beyond the approved channels.

BHOList - ToolbarList

KEY:

"X" - Certified spyware/foistware, or other malware

"L" - Legitimate items

"O" - Open to debate

"?" - Unknown Status

"BHO" - Browser Helper Object

"TB" - Toolbar

"SH" - R3 URL SearchHook

"EB" - IE Explorer Bar

ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z

Random sampling...

OBJECT NAME	GUID	STATUS	FILENAME	DESCRIPTION
Class	{2C9FB350-1F61-9DFE-1F19-BA68037F1E85}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
PCTools	{F9C6EC65-2988-4896-976F-6EA66FAD9844}	X `BHO`	nydo32r.dll, pako99p.dll, donet32d.dll, koapi99g.dll, other semi-random filenames	Parasite redirecting to fake security sites, member of the FakeAlert aka SmitFraud malware family - produces IEDefender , FilesSecure , MalwareBell or similar popups - also see here
Class	{A4AD3539-0968-3993-50E7-E0C21F34AD58}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{B6C595C3-3BD8-E281-13C6-522B288C7737}	X `BHO`	NT*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{389AC733-601B-3D02-177D-935C2D7CD68D}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{F8C5C8E9-52C1-06A7-3A16-9AAC146F3F6D}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{07AEE7F2-1978-9E11-ECC0-B7E565673770}	X `BHO`	nt*.dll ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{53C71F43-09FE-80CC-E720-4A2FFA8F445F}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{315E94F6-2FD0-7E2B-374F-0A7E3DF3D341}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{A757209F-1F9F-F6A7-A30C-E09315CE6233}	X `BHO`	NT*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{A2657079-4EF2-11BC-5C35-0C0AC5086A17}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{DE46E7A9-F48D-E464-507B-0C15E654FA74}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{E29BF509-239C-4103-CBB7-DCF199E4F8F6}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{E95B9B27-DFB1-83B7-AE66-09442D9B27C4}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{C75AEB7B-18DF-27AF-DBA3-059058EDCC2F}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{4FA500AA-6D17-65FB-338B-0E37CC3C72DE}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{A388AF4A-536C-B4B4-92EF-E3A6D86E0A26}	X `BHO`	NT*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{CE625DD3-CBD8-8AF1-9FFB-1F765070A92A}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{D1AFDF66-EA87-1A5E-5A0D-C8705937971A}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{10E75D9A-AF57-F581-EC15-93E69DC0D484}	X `BHO`	NT*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{C22788EC-4F79-DD02-1F55-6D9D3E866CC7}	X `BHO`	NT*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Advance Helper, NT32 Layer DLL	{8E25AC4A-B129-451B-BEE2-3B510BB751DA}	X `BHO`	NTDLL32.dll	Parasite of Chinese origin, detected by Kaspersky antivirus as AdWare.Win32.Agent.bc - also see here
Class	{2878B282-5123-FE7A-3B85-3F52E15DB39A}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{1004EF4A-5928-6765-729C-054E9FC8E238}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{5147DCF6-5BA6-86BB-18A0-32322B005A96}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
adzgalore	{******----********** }	X `BHO`	ns**.dll, ns*.dll, ns**.dll, ns****.dll ( = random char or digit)	AdRotator/IconAds related, a TrafficSector adware variant
Class	{DF7F705B-C5DA-6EA0-6F48-F1712FA19BAA}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{CF3EF571-43E7-5C38-FDC9-6E168AF22B5A}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{CD7284B3-8EE8-BD60-D1B9-0AE988FE60F0}	X `BHO`	NT*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{644853C5-6F66-EAC8-4FD6-390432061D1E}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{1C686F83-760E-DEF1-08B0-C5DCF3B6C68E}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{F78A49D8-1758-E0F2-CDE0-8BD0FD4FE086}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{BE6757F4-4409-E139-5868-5BABA3CA3DFA}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{4D2882F7-39B7-6D53-99F2-426F99D6D7DC}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{D04BC625-1970-1931-C619-C589E5F4CAEB}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{1AF18045-4D83-E152-D7A2-959F8F68F521}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{0FF6C88F-1926-6A8F-A09F-584499CEA259}	X `BHO`	NT*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{4802E183-DEF3-6A72-E278-B25371232062}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{EF0D6CC5-BD7A-7645-9AD2-491794D22499}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{FD6F5241-CBCE-03A2-5699-B1BFD29DAD56}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{DF949D09-A16D-0027-1992-09026ED9B7AA}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{E9056821-E93F-5C07-397E-4CAF2636D6F7}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{AF0A8010-005A-BEE0-BFC9-FB125961C374}	X `BHO`	NT*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{E3394C70-FCAF-52D8-D7BC-D6A3A175F490}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
SideBar Class	{E00FFFBF-EF6D-4eff-B9F7-98736BFBBFB3}	? `BHO`	netsurfing.dll	Unidentified browser plugin, file located in a "Program Files\Netsurfing" folder - should you have any information about this application, such as its exact purpose and whether you did or did not install it wittingly, do email us - if you actually have a copy of the file, please attach it to your email for analysis. Thanks!
Class	{0E5F2482-16C5-35FF-C41E-6FBD60CC094F}	X `BHO`	NT*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{62AB7A00-B062-7905-299C-E427F25A318B}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
QXK Olive	{5A979B6A-1ABE-4B63-A24F-7A0B72AEC7D5}	X `BHO`	nogxfvblxsk.dll	Adware downloader causing false spyware warnings and connecting to rogue "security sites", a member of the Trojan-Downloader.Zlob.Media-Codec aka NewMediaCodec malware family
Class	{59708803-B475-5C15-39AD-7A1D62317282}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
dcads	{3996f47b-7907-d94b-1727-9b3c3eb3de21}	X `BHO`	ns.dll, ns.dll ( = random char or digit)	AdRotator/IconAds related, a TrafficSector adware variant
Class	{DF83AF54-BF99-8F86-68F5-C2FA5ABA986A}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{C2E0AF7A-CBB2-7DA4-0428-800B55DEE8EF}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{6B07124F-A19B-E91E-3E36-E139591C802F}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{13F9E2C9-49E8-7E7F-AF23-5431BFDF3BAA}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{A55143DE-9DE4-7647-B658-4E210D54619C}	X `BHO`	NT*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component


	2002-2008 � Computer Cops LLC dba CastleCops®. All rights reserved. Acceptable Use Policy. Use signifies your agreement. 130ppm 0.242s (0.043s) Making cybercriminals unhappy since 2002*