CastleCops® Network
--------------------
About CastleCops
Become Premium
Our Sponsors
--------------------
CastleCops
CastleCops Blog
CastleCops Deutsch
CastleCops Hashes
CastleCops Mirrors
CastleCops Wiki
PIRT Squad
--------------------
Malware Removal & Prevention
How did I get infected?
Unknown file uploads
UDRP
--------------------
R3 URL SearchHook
O2/O3 BHOs/Toolbars
O4 Startups
O9 Internet Explorer Buttons
O10 LSPs
O16 ActiveX
O18 Protocol Hijackers
O20 AppInit_DLLs
O21 ShellServiceObjectDelayLoad
O22 Shared Task Scheduler
O23 XP/NT Services
--------------------
Need help
? Click
here
to register for free!
Absolutely zero advertisements on this site
!
ActiveX Objects (Downloaded Program Files) aka O16
Currently 1652 activex entries and growing...
Last updated on 2008-06-26 13:28:20 Eastern.
CastleCops ActiveX List AKA O16 List. Gargantuan thanks to Daemon for letting us insert 1,097 of his entries on 24 Jul 2005.
KEY:
"L" - Legitimate
"O" - Open to debate
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown
ABC List:
A
-
B
-
C
-
D
-
E
-
F
-
G
-
H
-
I
-
J
-
K
-
L
-
M
-
N
-
O
-
P
-
Q
-
R
-
S
-
T
-
U
-
V
-
W
-
X
-
Y
-
Z
Select ActiveX Range
--------------------
[
0-24
]
0-24
[
25-49
]
25-49
[
50-74
]
50-74
[
75-99
]
75-99
[
100-124
]
100-124
[
125-149
]
125-149
[
150-174
]
150-174
[
175-199
]
175-199
[
200-224
]
200-224
[
225-249
]
225-249
[
250-274
]
250-274
[
275-299
]
275-299
[
300-324
]
300-324
[
325-349
]
325-349
[
350-374
]
350-374
[
375-399
]
375-399
[
400-424
]
400-424
[
425-449
]
425-449
[
450-474
]
450-474
[
475-499
]
475-499
[
500-524
]
500-524
[
525-549
]
525-549
[
550-574
]
550-574
[
575-599
]
575-599
[
600-624
]
600-624
[
625-649
]
625-649
[
650-674
]
650-674
[
675-699
]
675-699
[
700-724
]
700-724
[
725-749
]
725-749
[
750-774
]
750-774
[
775-799
]
775-799
[
800-824
]
800-824
[
825-849
]
825-849
[
850-874
]
850-874
[
875-899
]
875-899
[
900-924
]
900-924
[
925-949
]
925-949
[
950-974
]
950-974
[
975-999
]
975-999
[
1000-1024
]
1000-1024
[
1025-1049
]
1025-1049
[
1050-1074
]
1050-1074
[
1075-1099
]
1075-1099
[
1100-1124
]
1100-1124
[
1125-1149
]
1125-1149
[
1150-1174
]
1150-1174
[
1175-1199
]
1175-1199
[
1200-1224
]
1200-1224
[
1225-1249
]
1225-1249
[
1250-1274
]
1250-1274
[
1275-1299
]
1275-1299
[
1300-1324
]
1300-1324
[
1325-1349
]
1325-1349
[
1350-1374
]
1350-1374
[
1375-1399
]
1375-1399
[
1400-1424
]
1400-1424
[
1425-1449
]
1425-1449
[
1450-1474
]
1450-1474
[
1475-1499
]
1475-1499
[
1500-1524
]
1500-1524
[
1525-1549
]
1525-1549
[
1550-1574
]
1550-1574
[
1575-1599
]
1575-1599
[
1600-1624
]
1600-1624
[
1625-1649
]
1625-1649
[
1650-1674
]
1650-1674
Name
Status
CLSID
Filename
Description
IAIEPlay Module
L
2042B57E-6336-459E-B7CE-2A0F6C9E6AF8
http://player.interactual.com/default.asp?code=home
IASRunner Class
L
76E5AF9D-2B3E-4FEB-A31F-A9E63A27FA29
AcpIR.cab
Related to IBM
IBM Utility
L
74FFE28D-2378-11D5-990C-006094235084
http://www.ibm.com/software
IBM Utility
L
E598AC61-4C6F-4F4D-877F-FAC49CA91FA3
http://www.ibm.com/software
ICanNews
X
4208FB4D-4E53-4F5A-BF7A-3E047DDB5281
http://research.sunbelt-software.com/threat_display.cfm?name=ICanNews&threatid=40047
ICQ Games
L
8FA9D107-547B-4DBC-9D88-FABD891EDB0A
http://arcade.icq.com
ICS Scanner
L
2359626E-7524-4F87-B04E-22CD38A0C88C
http://www.zonelabs.com
ICSScanner Class
U
7F8C8173-AD80-4807-AA75-5672F22B4582
ICSScanner37240.cab
Related to Zone Alarm Spyware Scanner, may be safely removed.
IEAccess
X
1D2DCA0D-B30F-40AD-9690-087105F214EC
ieaccess2.cab
Dialer - more
here
IEAccess
X
2ABE804B-4D3A-41BF-A172-304627874B45
EGDHTML_XP.cab
Dialer - more
here
IEAccess
X
94742E3F-D9A1-4780-9A87-2FFA43655DA2
EGDHTML_pack_XP.cab
Dialer - more
here
IEDial
X
946B0485-8F8C-4C35-A6E7-D2115E3B0B4F
identified by SpywareBlaster
IEFeatures
X
2CAB81F6-1CBB-49FD-809E-B2D37D0CFFED
http://www.spywareguide.com/product_show.php?id=949
IEHelperObject
X
C68AE9C0-0909-4DDC-B661-C1AFB9F5AE5
avicodex.ocx
Detected as Dial/260 by F-Prot
IELoader
X
00000000-5555-0704-0B53-2C8830E9FAEC
http://research.sunbelt-software.com/threat_display.cfm?name=IELoader&threatid=39158&search=IELoader
IELoader
X
00000000-CDDC-0704-0B53-2C8830E9FAEC
http://research.sunbelt-software.com/threat_display.cfm?name=IELoader&threatid=39158&search=IELoader
IELoader
X
67B15B0B-160C-4579-95AF-858169659092
http://research.sunbelt-software.com/threat_display.cfm?name=IELoader&threatid=39158&search=IELoader
IEPlugin
X
556DDE35-E955-11D0-A707-000000521958
http://www.spywareguide.com/product_show.php?id=482
IEPlugin
X
586DDE35-E955-11D0-A707-000000521958
http://www.spywareguide.com/product_show.php?id=482
IEPlugin
X
666DDE35-E955-11D0-A707-000000521958
http://www.spywareguide.com/product_show.php?id=482
IEPlugin
X
666E4D35-E955-11D0-A707-000000521958
http://www.spywareguide.com/product_show.php?id=482
IEPlugin
X
886DDE35-E955-11D0-A707-000000521958
http://www.spywareguide.com/product_show.php?id=482
IEPlugin
X
986DDE35-E955-11D0-A707-000000521958
http://www.spywareguide.com/product_show.php?id=482
IEPlugin
X
9C691A33-7DDA-4C2F-BE4C-C176083F35CF
http://www.spywareguide.com/product_show.php?id=482
IEUpdateOSR2 Control
L
7183CF29-F63C-11D2-923F-00600854D3CE
IEUpdateOSR2.ocx
Related to NTL internet
iGetNet
X
60E78CAC-E9A7-4302-B9EE-8582EDE22FBF
http://www.spywareguide.com/product_show.php?id=422
iGetNet
X
730F2451-A3FE-4A72-938C-FC8A74F15978
http://www.spywareguide.com/product_show.php?id=422
iii.tv
X
61EB380A-E49A-4367-B870-1FD4B5CEC44B
IESPYADS Restricted Site
iii.tv
X
A424AD33-B192-4B0F-8D46-A90543F8C535
IESPYADS Restricted Site
ijjiPlugin2 Class
U
5F5F9FB8-878E-4455-95E0-F64B2314288A
HGPlugin11USA.cab
Related to online games
Ikonic Interactive Utility
L
F5131C24-E56D-11CF-B78A-444553540000
http://www.internetnews.com/bus-news/article.php/20181
ILookup
X
07E9CDF4-20D2-46B1-B681-663968F527CE
http://www.doxdesk.com/parasite/ILookup.html
ILookup
X
372DC06F-87DD-48D7-BCED-A815965C0164
http://www.doxdesk.com/parasite/ILookup.html
ILookup
X
4C759EC6-96BD-4551-A320-E61A1D68437F
http://www.doxdesk.com/parasite/ILookup.html
ILookup
X
5DA6A3EB-DEAA-45AD-B303-64A474879FA0
http://www.doxdesk.com/parasite/ILookup.html
ILookup
X
99802379-7362-40E2-9D28-8A3B9AF880B7
http://www.doxdesk.com/parasite/ILookup.html
ILookup
X
BD419ACD-B41C-49D9-8ADF-CCA159052515
http://www.doxdesk.com/parasite/ILookup.html
ILookup
X
D35A69A7-7A34-4C67-814A-3F508C0BF371
http://www.doxdesk.com/parasite/ILookup.html
ILookup
X
F97FBDDD-0BC9-42EF-9F6D-469179EB409F
http://www.doxdesk.com/parasite/ILookup.html
ILookup
X
FE1A240F-B247-4E06-A600-30E28F5AF3A0
http://www.doxdesk.com/parasite/ILookup.html
Image Uploader 3.0 Control
L
BF6BBE9A-0656-4598-A0CD-32DAC03959B5
opcuploader.cab
Related to digital photo printing services from tescophoto.com
Image Uploader Control
L
6E5E167B-1566-4316-B27F-0DDAB3484CF7
ImageUploader4.cab
Related to an image uploading tool for a digital photo printing site
Image Uploader Control
L
AE6C4705-0F11-4ACB-BDD4-37F138BEF289
LPUploader45.cab
Related to the photo printing site ritzpix.com
ImageShack Toolbar
L
6932D140-ABC4-4073-A44C-D4A541665E35
ImageShackToolbar.cab
Related to
ImageShack's
Toolbar.
ImageStation Batch Downloader
L
5E943D9C-F8DC-4258-8E3F-A61BB3405A33
http://www.imagestation.com
ImgXDialog6.ImgXDialog
L
45EEDB84-57BC-4FBD-8065-7AB8E971B545
ImgXDialog61.cab
Related to Farmer Insurance
Agent_Research
ImgXTwain6.ImgXTwain
L
354D91A8-E3C9-491F-BB89-0FB27DEEED86
ImgXTwain61.cab
Related to Farmer Insurance
Agent_Research
imlUCID Class
U
7DFDB8FD-B498-4958-B930-38021B94351D
ImlCID.cab
Related to an online video chat site
IncrediMail
L
F00F4763-7355-4725-82F7-0DA94A256D46
http://www.incredimail.com/english/sp2/splash_if.html
InetSpeak
X
4CF5275B-CDBC-11D3-A8AF-0090279A5978
http://www.spywareguide.com/product_show.php?id=486
InetSpeak
X
D6862A22-1DD6-11D3-BB7C-444553540000
http://www.spywareguide.com/product_show.php?id=486
Infocrawler.com Hijacker
X
C3069D58-FD25-49AE-B3D6-10AF42913098
IESPYADS Restricted Site
InfoDialer3000
X
DF7A9F1F-E06B-4BE7-A27E-1BE7EA5AFC1C
http://www.infodialer3000.com/perfiles2/infosistemas3000.cab
InforbitHelper Class
U
36E4E9BC-4D0C-41B4-90C9-37AFDBFAAD3C
ifhelper.cab
Related to a calendar application from infotriever.com
Infotel srl
X
FFFF0003-0001-101A-A3C9-08002B2F49FB
http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453076209
InPop Installer
X
532217E3-860C-4EEE-8BBD-3F342DCD9AE9
http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453079108
InstaFred
L
C6637286-300D-11D4-AE0A-0010830243BD
InstFred.ocx
Local Autocad files
Install Class
L
6BEA1C48-1850-486C-8F58-C7354BA3165E
pinstall.cab
Related to
Picasa_update
Install From The Web Client
L
4E330863-6A11-11D0-BFD8-006097237877
http://www.installshield.com
InstallCtl Class
X
FF0C042C-98E9-4C36-B2EC-E21FDFDCEF75
rssoft.cab
Reported by various Anti-Virus companies as Adware.RedSwoosh.
Installer Class
X
E055C02E-6258-40FF-80A7-3BDA52FACAD7
speedtest2.dll
Trojan-Downloader.Matcash
Installer Class
L
8AA1AE9E-9FB0-41B3-8911-89A1068A7FD1
SyncInstall.cab
Related to
Wireless_Sync
Customer Portal from Verizon Wireless.
Instant Access
X
093F9CF8-0DE1-491C-95D5-5EC257BD4CA3
dtc32_EN.cab
Dialer - more
here
Instant Access
X
1EB17D1C-141D-4D9D-91CB-24D99215851D
netia32_EN.cab
Dialer - more
here
Instant Access
X
26D73573-F1B3-48C9-A989-E6CE071957A1
EGDACCESS_1057_XP.cab
Dialer - more
here
Instant Access
X
31DDC1FD-CEA3-4837-A6DC-87E67015ADC9
svcsysnet32_EN_XP.cab
Dialer - more
here
Instant Access
X
469C7080-8EC8-43A6-AD97-45848113743C
nethv32_EN_XP.cab
Dialer - more
here
Instant Access
X
486E48B5-ABF2-42BB-A327-2679DF3FB822
ia_XP.cab
Dialer - more
here
Instant Access
X
EEECA057-AD0F-44A7-8BE5-8634CEDBDBD1
netpe32_EN.cab
Dialer - more
here
Instant Access
X
F72BC3F0-6C20-4793-9DDA-258589D8A907
netslv32_EN_XP.cab
Dialer - more
here
Instant Access
X
E3943A24-2F83-4505-9AE5-F705E81B50CB
EGDACCESS_1055.cab
Dialer - more
here
Instant Access
X
3446598E-00E4-4B5E-99A6-87ECCA8324A2
EGDACCESS_1056_XP.cab
Dialer - more
here
Instant Access
X
BFC9677B-8006-4336-9D49-2C797AEFCB9E
EGDACCESS_1058_XP.cab
Dialer - more
here
Instant Access
X
1CD49DC9-FD88-41FA-B892-47E037267D45
EGDACCESS_1059_XP.cab
Dialer - more
here
Instant Access
X
1604DF98-D1A5-44FE-844A-98D6FD0518D0
EGDACCESS_1060_XP.cab
Dialer - more
here
Instant Access
X
FA83E942-B796-46DE-9155-1632ECC5473B
EGDACCESS_1061_XP.cab
Dialer - more
here
Instant Access
X
C6760A07-A574-4705-B113-7856315922C3
sysnetsvc32_ES_XP.cab
Dialer - more
here
Instant Access
X
EF4DCD99-D26B-44A4-BA77-CFDCC97E7291
EGDACCESS_1062_XP.cab
Dialer - more
here
Instant Access
X
01BE5BD7-B2DD-48B3-A759-59265A91E787
EGDACCESS_1064_XP.cab
Dialer - more
here
Instant Access
X
B2B0AEDF-7CDF-4792-BB67-7654AD1E1B13
sysinetsvc32_EN_XP.cab
Dialer - more
here
Instant Access
X
BA749BC1-143E-430D-B1DA-1D2AF67A3658
EGDACCESS_1069_XP.cab
Dialer - more
here
Instant Access
X
E7AE1661-EBEB-492B-AE0D-860DF24174C6
EGDACCESS_1064_ASPIV4_XP.cab
Dialer - more
here
Instant Access
X
07C9CFC7-DE33-4A0C-9FFB-CDFBA843B157
EGDACCESS_1063_XP.cab
Dialer - more
here
Instant Access
X
15D0E439-4E58-45E1-A9C1-0B1B16749A3C
netcmp32_EN_XP.cab
Dialer - more
here
Instant Access
X
624321F1-0581-49D8-99BD-2E952C2DF31B
EGDACCESS_1063_ASPIV4_XP.cab
Dialer - more
here
Instant Access
X
A1C392A2-B274-46DB-89BE-1FBD476B9C93
EGDACCESS_1065_XP.cab
Dialer - more
here
Instant Access
X
E19AB99F-AEC4-4B40-A5CA-F69D22522D77
EGDACCESS_1065_ASPIV4_XP.cab
Dialer - more
here
Instant Access
X
FA605711-8E72-46B2-AE49-BED11B2E729D
EGDACCESS_1063_ASPIV4_XP.cab
Dialer - more
here
Instant Access
X
E114CD5B-17CE-4807-890E-7B1EDF9F2E5E
EGDACCESS_1066.cab
Dialer - more
here
Instant Access
X
17BFC8DA-B4D6-4DB9-AA40-1CD32EDA9845
EGDACCESS_1066_ASPIV4.cab
Dialer - more
here
Instant Access
X
201D3DA8-B495-4A3B-BEE8-6D8DDCCC5762
EGDACCESS_1067_ASPIV4.cab
Dialer - more
here
Instant Access
X
E24E8472-89B7-479F-8AD8-BBD7206A6A02
EGDACCESS_1067.cab
Dialer - more
here
Instant Access
X
0DA910BC-6919-489E-B584-D9A4AAC7B8DE
EGDACCESS_1068_ASPIV4_XP.cab
Dialer - more
here
Instant Access
X
95460ABD-946A-46FF-9F56-268718323EEE
EGDACCESS_1068_XP.cab
Dialer - more
here
Instant Access
X
0D1011B3-89C8-4F8E-8693-BB970E2E81E0
EGDACCESS_1069_ASPIV4_XP.cab
Dialer - more
here
Instant Access
X
3DAD912E-D2B9-4323-B7C9-7F2C5CC0C57B
EGDACCESS_1070_XP.cab
Dialer - more
here
Instant Access
X
C2481ED1-9896-4D49-AE90-69858DFDE446
EGDACCESS_1073_XP.cab
Dialer - more
here
Instant Access
X
EFB23983-5803-4914-ADA3-C0EA2CFBDC37
EGDACCESS_1072_XP.cab
Dialer - more
here
Instant Access
X
04CCFF26-7D52-4E42-BF6A-F8ECE0896EB7
EGDACCESS_1071_XP.cab
Dialer - more
here
Instant Access
X
3616F4B5-F6AD-4E67-966A-C218673648A0
EGDACCESS_0_ASPIV4_XP.cab
Dialer - more
here
Instant Access
X
78F584DF-BBF5-4296-839C-31DE60914DBC
EGDACCESS_1_ASPIV4_XP.cab
Dialer - more
here
Instant Access
X
54579C3D-A58D-4623-B5B5-465552BDA45B
EGDACCESS_2_ASPIV4_XP.cab
Dialer - more
here
Instant Access
X
7504F0D5-644A-4103-9D02-95488B6CB9A1
EGDACCESS_3_ASPIV4_XP.cab
Dialer - more
here
Instant Service Utility
L
8E28B3A9-FE83-45D1-B657-D5426B81A121
http://instantservice.com
Intel Web Outfitter
L
08464310-9825-11D2-BFA5-00A0C9AAFC5D
http://www.intel.com/home
Interealty MultiSelect
U
4989312D-58CF-11D5-A7D7-00E02911103E
MultiSelectComboBox.cab
Appears to be related to a property website
Interfun Dialer
X
15C3C7A4-9676-11D3-9799-0060087190B9
identified by SpywareBlaster
Internet Enhancement PAK
X
68E53982-CCCE-48C2-89B9-C3C97638F9B4
identified by SpywareBlaster
Internet Enhancement PAK
X
BAB3E70B-A847-4A88-ACFC-778FCCC00287
identified by SpywareBlaster
InternetWasherPro
X
421A63BA-4632-43E0-A942-3B4AB645BE51
internetwasherpro.cab
Malware - more
here
Intuit
L
9184D21C-9835-42C5-A883-EA8BE7FC048D
http://www.shopintuit.com
iolo.AV.OnlineVirusScanner
L
819F8533-D935-4183-B692-587F8D56AC3C
AVCheckUp.ocx
Related to
iolo_AntiVirus
System Shield software.
iPIX ActiveX Control
L
11260943-421B-11D0-8EAC-0000C07D88CF
http://infomedia.ipix.com/support/download/viewer.shtml
iPIX ActiveX Control
L
F7A05BAC-9778-410A-9CDE-BFBD4D5D2B7F
http://infomedia.ipix.com/support/download/viewer.shtml
IRCWwwPrint Class
L
7A7537FC-5988-11D3-8B33-00104B9E5A4A
IRCWebPrint.cab
Appears to be related to a property website
ISearch Toolbar
X
1C78AB3F-A857-482E-80C0-3A1E5238A565
http://www.spywareguide.com/product_show.php?id=732
isInstalled Class
L
5852F5ED-8BF4-11D4-A245-0080C6F74284
jinstall-1_5_0_11-windows-i586.cab
Related to Sun Java
ISTBar
X
018B7EC3-EECA-11D3-8E71-0000E82C6C0D
0006.cab
Browser hijacker, more
here
ISTBar
X
12398DD6-40AA-4C40-A4EC-A42CFC0DE797
0006_regular.cab
Browser hijacker, more
here
ISTBar
X
386A771C-E96A-421F-8BA7-32F1B706892F
0006_adult.cab
Browser hijacker, more
here
ISTBar
X
42F2C9BA-614F-47C0-B3E3-ECFD34EED658
ysb_1002952.cab
Browser hijacker, more
here
ISTBar
X
771A1334-6B08-4A6B-AEDC-CF994BA2CEBE
ysb_regular.cab
Browser hijacker, more
here
ISTBar
X
D18B7EC3-EECA-11D3-8E71-0000E82C6C0D
ist_remove.cab
Browser hijacker, more
here
ISTBar
X
EF86873F-04C2-4A95-A373-5703C08EFC7B
0006_cracks.cab
Browser hijacker, more
here
ISTBAR
X
42F2C9BA-614F-47C0-B3E3-ECFD34EED658
nesuned.mht!
Added by the Win32.istbar.fa reported by HijackThis Helper.
iTunes
L
D719897A-B07A-4C0C-AEA9-9B663A28DFCB
http://www.apple.com/itunes
iTunes Installer
L
41F17733-B041-4099-A042-B518BB6A408C
http://www.apple.com/itunes
iVillage
L
17D72920-7A15-11D4-921E-0080C8DA7A5E
http://www.ivillage.com/
IWinAmpActiveX Class
L
FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6
ampx_en_dl.cab
Related to media streaming from AOL
IWinAmpActiveX Class
L
B49C4597-8721-4789-9250-315DFBD9F525
ampx2.6.1.11_en_dl.cab
Related to AOL Radio.
IWSystemchecks Control
L
11865A2A-649F-4FA1-8B99-B97DF8070B7C
IWsystemchecks.cab
Related to
eTeacher
from MxWeb products.
Ranges
[
0
] [
25
] [
50
] [
75
] [
100
] [
125
] [
150
] [
175
] [
200
] [
225
] [
250
] [
275
] [
300
] [
325
] [
350
] [
375
] [
400
] [
425
] [
450
] [
475
] [
500
] [
525
] [
550
] [
575
] [
600
] [
625
] [
650
] [
675
] [
700
] [
725
] [
750
] [
775
] [
800
] [
825
] [
850
] [
875
] [
900
] [
925
] [
950
] [
975
] [
1000
] [
1025
] [
1050
] [
1075
] [
1100
] [
1125
] [
1150
] [
1175
] [
1200
] [
1225
] [
1250
] [
1275
] [
1300
] [
1325
] [
1350
] [
1375
] [
1400
] [
1425
] [
1450
] [
1475
] [
1500
] [
1525
] [
1550
] [
1575
] [
1600
] [
1625
] [
1650
]
2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved.
Acceptable Use Policy
. Use signifies your agreement.
116ppm 0.081s (0.004s)
Making cybercriminals unhappy since 2002
*