CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

spacer spacer

The CLSID / BHO List / Toolbar Master List

Currently 54019 entries and growing...

This is the Master BHO and Toolbar list copyrighted by Tony Klein and CastleCops. For expert assistance, please post here. The information is collected across the Internet by the CastleCops Team. Usage: please leave feedback requesting permission if you are interested in using this data beyond the approved channels.

BHOList - ToolbarList

KEY:
  • "X" - Certified spyware/foistware, or other malware
  • "L" - Legitimate items
  • "O" - Open to debate
  • "?" - Unknown Status
  • "BHO" - Browser Helper Object
  • "TB" - Toolbar
  • "SH" - R3 URL SearchHook
  • "EB" - IE Explorer Bar

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z

    Random sampling...
    OBJECT NAMEGUIDSTATUSFILENAMEDESCRIPTION
    XBTP06823{A109FB38-7D77-413d-B749-19FA58890832}X BHO cab.in.work.temp.dll, CABINW~*.DLLBaladin Toolbar, a Softomate Toolbar variant detected as Adware.MyTool
    Class{FDD011A5-21BD-FFB2-0D81-6407C016E0AB}X BHO CR**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{5D6A3BD2-5130-D545-3C6B-C451324102A6}X BHO CR**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{2563929E-316C-F72B-8239-387401B74A15}X BHO CR**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{B13C0965-868F-283A-5E4E-C1B07A643E7A}X BHO CR**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    CK PopUp Killer BHO{49E0E0F0-5C30-11D4-945D-000000000000}L BHO ckHelper.dllCK PopUp Killer
    Class{2D229398-D50B-5B26-E228-1CD29115EA18}X BHO CR**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{91C80FA0-3DED-18C9-D536-2CDF84CEBB33}X BHO CR**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    CyberScrub KeyChain{88DE6D22-4F4D-4D83-95A2-8E9A4BB166BF}L TB CyberScrubToolbar.dllCyberScrub KeyChain
    Class{F46D19B6-EC6A-542A-EAE7-755BFEC2E2D6}X BHO CR**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{ACBD86D2-3428-4089-04FA-49FAF324E149}X BHO CR**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{9E4541ED-63F5-D073-4882-E3A16C989A97}X BHO CR**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    [random]{62BEDE96-60B5-42d2-8C85-C6475E6BDCA0}X BHO CRYPTDLL.DLL SearchingAll adware variant (the file is located in the system32\drivers folder, and must not be confused with the legitimate Microsoft file of the same name!)
    Class{B94F6FD5-B30D-F460-D7A0-35F03A166BF6}X BHO CR**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{68DC4F81-2625-CE5C-2BEE-8B36BFA3C7FB}X BHO CR**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    coalicionspugny Toolbar{51EEBB00-DDBC-4567-A2E6-BD277A7B0FAA}O TB coalicionspugny.dllCoalicionspugny Toolbar, - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Your choice.
    Class{E2157285-80E2-5E41-66C6-A683E585E5A0}X BHO CR**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{5DFBC97C-DABD-760C-0037-AD9AADC9957B}X BHO CR**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{4A5E1225-C88F-F348-8D05-D1BEE47DB10C}X BHO CR**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    {82DF1118-9B92-45d8-B78F-1737A69A06E1}L BHO CheckIt86.dllCheckIT 86
    Class{544A7589-5400-1824-CC3E-C70559FA38C6}X BHO CR**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    CodeS-SourceS{98166A42-BBB9-48ED-9768-147787A2CBE8}L BHO CSBar.dll codes-sources.com toolbar
    Acrobat Helper{06846E6F-C8D7-4D56-B87D-784B7D6BE083}X BHO ctlsdlg.dllBackdoor trojan, detected by Kaspersky antivirus as Trojan-Spy.Win32.Agent.ir
    (no name){F491AD49-E7E0-4FE3-BFFC-7EDC89A3B81A}X BHO compstuig.dll, g********.dll (* = random digit)Variant of the Win32.Delf.gen trojan downloader - a member of the CoolWebSearch parasite family
    Class{0CAEDEE2-8F3E-F86F-35DC-CDEAAE346249}X BHO CR**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{ECCCE4E0-5367-3965-8A39-03589F292C7D}X BHO CR**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{6D5FED85-B4E1-2286-4413-8A0B46D78444}X BHO CR**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{6F235F27-0E1D-FEE2-4C60-2B6EB902B546}X BHO CR**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{E64FD3C3-33C4-CF1D-86D6-2F9C13C5E679}X BHO CR**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{E033EB3C-B87C-A38A-91EC-993432056782}X BHO CR**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{F4B54125-9907-FCC6-6FEF-F0D83DB0716E}X BHO CR**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{4F2D4CB9-2DB3-B787-EA23-144A8197C0D8}X BHO CR**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{FD4A74BF-5712-24E2-4DA7-6711D4FD291B}X BHO CR**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    {C82B55F0-60E0-478C-BC55-E4E22F11301D}X BHO Chgrgs.dll i-Lookup adware variant
    Class{A22E6A97-F49C-9323-2A8B-996883ED2B4B}X BHO CR**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Editor plugin{ECBA18CA-FF22-464c-A963-70BEC79D2485}X BHO cukert.dll, masyan.dllVariant of the Infostealer.Banker.D trojan
    StubDwnld Class{E4318CD9-4E03-4998-9574-D37195A12597}X BHO CSSTUB.DLL Comet_Cursor adware component - also see here
    {B9ADBF45-B136-4FC5-8582-48C2A22600CE}X BHO cashsaverbho.dllCashSaver spyware
    Class{7680E416-7D05-25A0-B061-94CA15C1484C}X BHO CR**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{4553C375-6F7A-0E1D-E0A7-CAEB757E4497}X BHO CR**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Visolve{01C692BF-FF95-4583-91B6-23F8568749B7}L TB controlbar.dll Visolve Toolbar
    Class{168C6A71-7C47-EBD7-39B4-A3D02B3F4A99}X BHO CR**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{CB56D83A-0657-077A-CDB2-1CDF60341BB3}X BHO CR**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{F8254D4D-78D5-68D0-643E-BC89D9755ADE}X BHO CR**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    cjmgr Class, cj helper{F10587E9-0E47-4CBE-84AE-7DD20B8684BB}X BHO cj.v2.dll, cj.v4.dll, cj.v5.dllParasite, a member of the FakeAlert aka SmitFraud malware family - also see here
    Class{97177131-EFE0-4F5C-0A80-67A88AF1EDB3}X BHO CR**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{A8D4B1C3-E455-C463-9A68-674D56A5CE31}X BHO CR**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{9F72DDA9-92C8-7963-92B5-CC229A714587}X BHO CR**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    XBTBPos00{72A7F654-0DF2-4E24-8CC7-C32CABCBE3E7}X BHO Cab301b48.dll, CAB301~1.DLLParasite - a Besttoolbars/Softomate adware variant of Chinese origin - also see here
    Class{20AE913C-B7BC-4E3B-1426-1036784261AF}X BHO CR**.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    Class{8828A8F5-7154-C521-D0FA-7AC2B1BA6978}X BHO CR**32.DLL (* = random char) CoolWebSearch/HomeSearch adware component
    (no name){********-****-****-****-************}X BHO crypt3.dllDownloader, detected by AntiVir as TR/Spy.BZub.btx.47
    ToolBarCI{BFB5F154-9212-46F3-B547-AC6106030A54}O TB CI.dll CarrefourInternet_Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Installer detected by Kaspersky antivirus as AdWare.Win32.Mostofate.ah and by Bitdefender as Spyware.Cnsearchbar_DLL
    XBTP04910{C36E543B-FD54-4506-A742-C1D98B172BD6}O BHO congoo.dll Congoo_NetPass - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Remove unless you both trust it and expressly meant to install it.
    Class{1E7DA401-98CA-2570-AFDC-942CF0C87678}X BHO CR**.DLL (* = random char) CoolWebSearch/HomeSearch adware component

    spacer spacer