CastleCops® - CLSID BHOList ToolbarList

Need help? Click here to register for free! Absolutely zero advertisements on this site!

The CLSID / BHO List / Toolbar Master List

Currently 54019 entries and growing...

This is the Master BHO and Toolbar list copyrighted by Tony Klein and CastleCops. For expert assistance, please post here. The information is collected across the Internet by the CastleCops Team. Usage: please leave feedback requesting permission if you are interested in using this data beyond the approved channels.

BHOList - ToolbarList

KEY:

"X" - Certified spyware/foistware, or other malware

"L" - Legitimate items

"O" - Open to debate

"?" - Unknown Status

"BHO" - Browser Helper Object

"TB" - Toolbar

"SH" - R3 URL SearchHook

"EB" - IE Explorer Bar

ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z

Random sampling...

OBJECT NAME	GUID	STATUS	FILENAME	DESCRIPTION
Class	{C74F8C59-7B4A-EAD1-B9DA-0FD02ABAE0E2}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{B3CE5C0B-8CA4-F1D5-F9A7-7FAE4C8B1E8D}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{A455DF6A-761C-84AC-C452-CF3486D353ED}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Pinch	{96F8931D-BB55-41DE-9AF7-257A7EB43D2A}	X `BHO`	nydo32r.dll, pako99p.dll, donet32d.dll, koapi99g.dll, similar semi-random filenames	Parasite redirecting to fake security sites, member of the FakeAlert aka SmitFraud malware family - produces IEDefender , FilesSecure , MalwareBell or similar popups - also see here
Class	{82592D9C-E8A7-DA3B-8BEE-BCAEAF5128CD}	X `BHO`	NT*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{C43477DF-1979-8DFC-4F3C-C3BE66A775D8}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{687AC456-1035-75C7-80E8-89C12FBF6A9A}	X `BHO`	NT*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{3A175F49-DC7D-1EB8-1D10-25AE988C35B9}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
QXK Olive	{2FAD2D0E-8EDC-42D5-99DD-CF65D2D89B22}	X `BHO`	nfavxwdbbfk.dll	Adware downloader causing false spyware warnings and connecting to rogue "security sites", a member of the Trojan-Downloader.Zlob.Media-Codec aka NewMediaCodec malware family
Class	{BE6757F4-4409-E139-5868-5BABA3CA3DFA}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{5E630464-072E-81C3-A96F-C0B35174042A}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
CWebSpy Object	{34E044D4-14DF-4E9C-9638-758127EB80CE}	? `BHO`	nellson6.dll	Reportedly related to Nelson database software - should you have any further information about this application, such as its exact purpose, do email us. Thanks!
Class	{84507C15-8AA3-D30D-38C4-E22B27ABD6E9}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
(no name)	{C0690CA5-C80B-4F09-8DAA-31C0924AE1B9}	X `BHO`	netfilter.dll, NETFIL~1.DLL	WinAntivirusPro - rogue "security software" using false positives as goad to purchase. A member of the SmitFraud malware family
Class	{EE98672B-7D9D-F231-0897-7E70ADEF2793}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Ad Nuker	{459CAF0F-CA9F-4d69-A1A9-B0699D07AB8A}	L `BHO` `TB`	NukerBand.dll, NUKERB~1.DLL	AdNuker
Class	{45C4DF45-D20F-D4D5-D3FE-D4BFBEA8D64F}	X `BHO`	NT*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{CF232D74-CDF6-1F51-0B3F-86CC4034374C}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{A227DA9C-DBB1-94CC-8C2E-003E29BEC0DF}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{E98A7374-955F-341F-318D-6BA73211958A}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{A2E2EDE4-E2D3-F3DF-1F23-8C3BEE10E0AA}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
NetXfer	{C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A}	L `TB`	NXToolBar.dll	Net Transport (NetXfer)
Class	{4DB4D232-21D3-B48E-0E2B-7988EC771215}	X `BHO`	NT*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{3BBF9D69-8520-786A-D563-1D33D5BCDF9C}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{279FA3F4-149C-770E-BA6D-38711653AF79}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{9B10095C-6823-60CD-8FAB-33DEE8B29FC4}	X `BHO`	NT*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{81A3899D-FFB0-430E-7E09-58CBB4E1392B}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{BCF0F99E-6ABF-F983-2E19-BF8289ADC738}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{10FBCA27-0D52-8242-4F03-CA89ABDCC47C}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{5FFCDEE9-901B-22A9-1E8A-80C150D6A16B}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{5DB1BA72-4A97-1A1C-288E-54D259130FC5}	X `BHO`	NT*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{589CFC41-24D4-3151-64B3-9FD57739B7BB}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{81EDCC5B-FEB9-6F3B-4CB7-4D767A1A3655}	X `BHO`	NT*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{35A8962C-B542-0E29-1D1F-D78F72B66E93}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
nqgpedlr	{CAE4B16A-4FF4-44D9-8D85-39A4F7E576FA}	X `TB`	nqgpedlr.dll	Parasite causing false spyware warnings and connecting to fake "security sites" - member of the FakeAlert aka SmitFraud malware family
Class	{FEAF00B8-398A-9E71-81CD-EE13C80FA3DF}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{EF3DA427-88BA-69AC-D4EE-CE669ADD36B2}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{FFCEB9DB-D1D3-4EFC-B337-149BF69C3F37}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{5F15F26C-81EE-4FFA-8B9A-39913016CD37}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{B2783BA6-EC2F-89E2-CF53-7102F27AC213}	X `BHO`	NT*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{B4D6D604-7027-8569-0205-60E088EDCC69}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{D4936788-DBB1-DCDF-063D-C367BA962AF7}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{CEBCC184-B5B9-0AE9-15DC-FE93113A20FA}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{2230DCC6-46EB-01F6-9873-1CBC0DB10CD8}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{B5675BAA-EB63-B482-CDA6-95404D00AF4A}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
TBSB00808 Class	{425E30F0-CCC6-4E24-BBEB-BCBD31720B37}	O `BHO`	ns.dll	NS_Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Your choice.
Class	{26C59368-BDAA-521F-6A9A-ADFB1DC8D1E0}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{6B07124F-A19B-E91E-3E36-E139591C802F}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{EB61BCEC-B087-FF9D-2125-EF1B13DEF033}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{818CBD9F-9B01-D3E5-E0A1-32259AB7C457}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{741F449C-9060-015F-109F-D04403FDE843}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{0BAD285E-8964-1B8F-72C4-AF4E359F9A5A}	X `BHO`	NT*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{CBB1FE7C-9F6B-F993-8009-0A9B6D27D447}	X `BHO`	NET*32.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{0433F90A-51A5-C0B7-EA01-CB822AD032EE}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component
Class	{239C22C4-39AD-0E05-069E-10E1F47570B7}	X `BHO`	NET*.DLL ( = random char)	CoolWebSearch/HomeSearch adware component


	2002-2008 � Computer Cops LLC dba CastleCops®. All rights reserved. Acceptable Use Policy. Use signifies your agreement. 169ppm 0.238s (0.082s) Making cybercriminals unhappy since 2002*