CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

spacer spacer

The CLSID / BHO List / Toolbar Master List

Currently 54019 entries and growing...

This is the Master BHO and Toolbar list copyrighted by Tony Klein and CastleCops. For expert assistance, please post here. The information is collected across the Internet by the CastleCops Team. Usage: please leave feedback requesting permission if you are interested in using this data beyond the approved channels.

BHOList - ToolbarList

KEY:
  • "X" - Certified spyware/foistware, or other malware
  • "L" - Legitimate items
  • "O" - Open to debate
  • "?" - Unknown Status
  • "BHO" - Browser Helper Object
  • "TB" - Toolbar
  • "SH" - R3 URL SearchHook
  • "EB" - IE Explorer Bar

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z

    Random sampling...
    OBJECT NAMEGUIDSTATUSFILENAMEDESCRIPTION
    G-Buster Browser Defense Real{C41A1C0E-EA6C-11D4-B1B8-444553540007}L BHO gbiehabn.dll "G-Buster_Browser_Defense" - Brazilian e-commerce and e-banking transaction protection software
    TBSB02387 {312B91E4-39D2-4780-8400-7E4E87E3BB67}O BHO googlonymous.dll Googlonymous.com Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Your choice.
    GoVista Toolbar{31D3C51D-4678-4743-823E-D5074F800F43}O TB govista.dll GoVista_Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Your choice.
    GC Com Toolbar{A4E1E477-8FEA-4896-AD03-1F85747A0971}O TB gc_com_co.,_ldt.dll, GC_COM~1.DLL GC_Com Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Some of the toolbars are fine to have, so every case is different. Your choice.
    GooglePreviewIE Toolbar{AEC32322-9D72-4C55-A108-33875F07BC03}L TB GooglePreviewIE_Toolbar.dll GooglePreviewIE
    Microsoft SearchWord{79369D5C-2903-4b7a-ADE2-D5E0DEE14D24}X BHO GoogleMS.dll, Word10.dll CoolWebSearch parasite variant - also see here
    Banco do Brasil S.A{FCAAAC14-BC46-40CA-9CB2-CBB12C6739EB}X BHO gbiehbsb.dll, gbiehdst.dllPassword stealer aka Banker trojan of Brazilian origin, detected by AntiVir as TR/Spy.Banker.758784.1
    GD band helper{A21EEBFE-85AC-4226-8AB2-A11DCB558B9E}L BHO GoogleDesktopDeskbar2.dllGoogle Desktop Search
    Gilly Messenger Toolbar Helper{6119C634-3BFE-4085-92DE-AFAD6BCE3430}O BHO Gilly_Messenger_Toolbar.dllGilly Messenger
    Googlonymous Toolbar{F2DA2602-86BA-490E-87E8-4943196D5046}O TB googlonymous.dll Googlonymous.com Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Your choice.
    GuleSider Toolbar{F275EF20-1E52-47B8-98D3-0537A2EB8223}O TB gulesider.dll, GULESI~1.DLL GuleSider_Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Remove unless you trust it.
    ineb Helper{FBAA0B9E-A059-43E4-9699-76EB0AEB975B}X BHO Gws.dll i-Lookup adware variant
    XBTP08578{61D49CA5-2743-4139-BD2E-028C99F14C2E}O BHO Guia_Facil_Toolbar.dll, GUIA_F~1.DLL GuiaFacilnet.com.br toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this.
    GoldPoll Toolbar{79043293-F03A-4ed3-9E0E-D0D97AB4D937}L TB GoldPoll.dllGoldPoll Toolbar
    Guruji {A6790AA5-C6C7-4BCF-A46D-0FDAC4EA90EB}O TB GurujiToolbar.dll Guruji_Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Your choice.
    XBTP09888 Class{4B63C1DF-F1A6-411f-B218-4EB07EDD3C2B}O BHO GREATD~1.DLLUnidentified Softomate Toolbar - should you have any information about this application, such as its homepage, its exact purpose and whether you did or did not install it wittingly, do email us - if you actually have a copy of the file, please attach it to your email for analysis. Thanks!
    SideBar Class{F58AE064-4C51-47db-9501-B9BDB8461A18}X BHO GCashSB.DLLParasite of Korean origin detected as Win32.Adware.GCashBack
    guenstiger.de Toolbar{E3CA7AE1-8733-4F54-A49E-03AF024CED01}L TB gt_toolbar.dll guenstiger.de Toolbar
    ohb{C1AA87B1-FE12-4937-A09C-1B7B869D913B}X BHO gwss.dll, tb22.dll Begin2Search adware variant connecting to gophersearch.com or Ewebadserver.com
    gxvpsafm {8205021C-E7BC-4D51-AB19-A4C500F01720}X TB gxvpsafm.dllParasite causing false spyware warnings and connecting to fake "security sites" - member of the FakeAlert aka SmitFraud malware family
    GetGo Toolbar{075BBE29-FEC0-404a-A459-FF58713616FA}L TB GGToolBand.dll GetGo
    Gacela BHO{3DE5B243-50A1-4BFE-9F71-D0A819719A3B}? BHO Gacela.dll Unidentified browser plugin - should you have any information about this application, such as its exact purpose and whether you did or did not install it wittingly, do email us - if you actually have a copy of the file, please attach it to your email for analysis. Thanks!
    Googletrans {79C83803-4EA6-11D5-9C81-000102657B27}L TB Googletrans.dll GoogleTrans
    Google Accelerator!{********-****-****-****-************}X BHO googlech.dll, googlecb.dll, googleci.dll, googlecd.dll, googlec*.dll, googledw.dll Password stealer, detected by Kaspersky antivirus as Trojan-PSW.Win32.YahooPass.bi
    Google Toolbar Helper{AA58ED58-01DD-4d91-8333-CF10577473F7}L BHO googletoolbar.dll, googletoolbar*.dll, googlenav.dll, googletoolbar_en_*.**-big.dll, googletoolbar_en_*.*.**-deleon.dllGoogle Toolbar
    G-Buster Browser Defense Unibanco{C41A1C0E-EA6C-11D4-B1B8-444553540008}L BHO gbiehuni.dll "G-Buster_Browser_Defense" - Brazilian e-commerce and e-banking transaction protection software
    GigagetIEHelper{111CAA23-6F4F-42AC-8555-B48C1D87BBAB}L BHO gigagetbho_v10.dll Gigaget
    GuardedID{CB7DC2DA-D8C9-4004-8548-1E24AA7D46DE}L TB GIDTB.dllGuardedID
    TBSB05224{026F1918-1A40-4A21-8125-0541A71BB91F}O BHO großräschener_orchideen.dllGroßräschener Orchideen Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Some of the toolbars are fine to have, so every case is different. Your choice.
    TBSB04261{596A2EBC-0239-44F0-AE40-3DE9821367C9}O BHO gamenet.dll Gamenet_Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Installer detected by Kaspersky antivirus as AdWare.Win32.Mostofate.ab and by Bitdefender as Adware.Activesearch.BC
    &Groowe 2 {D52EE69D-ADC2-4AE7-BC19-4AEEC1890C76}L TB GrooweToolbar2.dll, GROOWE~*.DLL Groowe Search Toolbar
    IEHlprObj Class{CD4C3CF0-4B15-11D1-ABED-709549C10000}X BHO Goiehlp.dll GoZilla
    Mail Class{54A32557-F504-46C2-9D56-D38AC687873D}? BHO GCMail.dllUnidentified browser plugin - should you have any information about this application, do email us - if you actually have a copy of the file, please attach it to your email for analysis. Thanks!
    AntiVirus Toolbar{34650ADE-B14D-486d-AA6E-3D4453A59158}X TB gtb.dll PCSecureSystem , AVSystemCare and other rogue "security software" using false positives as goad to purchase - members of the SmitFraud malware family
    Banco do Brasil S.A.{C41A1C0E-EA6C-11D4-B1B8-444553540000}X BHO gbiehaabn.dll, GBIEHA~1.DLLPassword stealer aka Banker trojan of Brazilian origin
    GcExt1 Class {47906380-0DDC-46f4-98B4-DB9107C2CA01}X BHO gc_auc.dllParasite of Korean origin, a GCIE, aka Gcbank or GCback adware variant
    gPhotoShow Toolbar Helper{D6D45128-E25E-4036-90D1-F43872902148}X BHO gPhotoShow_Toolbar.dll gPhotoShow Toolbar - the toolbar itself is an adware component, but one can opt out of its install during setup - see here
    gktxaspm{10B9E92F-421E-44B2-A093-9DE0F3FAB2BC}X TB gktxaspm.dllParasite causing false spyware warnings and connecting to fake "security sites" - member of the FakeAlert aka SmitFraud malware family
    GfK Internet-Monitor{78A0EA08-3D2D-4e4c-A2C3-B4FFF62FAD5A}L BHO gfkmon.dllGfK Internet-Monitor - internet access and usage survey software, see here
    Google Gears Helper{E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53}L BHO gears.dllGoogle Gears
    G-Buster Browser Defense Sicredi{C41A1C0E-EA6C-11D4-B1B8-444553540011}L BHO gbiehScd.dll GAS "G-Buster Browser Defense" - Brazilian e-commerce and e-banking transaction protection software
    Google Bar{12365484-96A1-6974-3269-123555124655}X BHO GoogleBar.dllAdware downloader of Chinese origin hailing from www.ishowbao.com and detected as Trojan.Caiijing - also see here
    GlotBar{58308D8A-FA3F-4ce7-AAFE-0B97A103B491}L TB glotbar.dllGlotbar provided by Interglot.com
    DVA First{F2FB4BB4-4C80-4AEE-8B59-F146B08F6193}X BHO gndarmblldk.dllAdware downloader causing false spyware warnings and connecting to rogue "security sites", a member of the Trojan-Downloader.Zlob.Media-Codec aka NewMediaCodec malware family
    gxvpsafm{5EFBB043-CFEC-4A57-BFE7-38FDC518108F}X TB gxvpsafm.dllParasite causing false spyware warnings and connecting to fake "security sites" - member of the FakeAlert aka SmitFraud malware family
    gktxaspm{0983040A-984F-4BEF-BEBE-D3D3342D3954}X TB gktxaspm.dllParasite causing false spyware warnings and connecting to fake "security sites" - member of the FakeAlert aka SmitFraud malware family
    GN Ad Blocker{12B2281A-9E7C-46a1-962C-0ADC94821D8D}L BHO gnblock.dllGN Ad Blocker
    gFlash Class{F156768E-81EF-470C-9057-481BA8380DBA}L BHO getflash.dll FlashGet download manager
    QXK Olive{D01A8B68-D46E-42C1-B967-9043543B6E0D}X BHO gfetqaxsdtf.dllAdware downloader causing false spyware warnings and connecting to rogue "security sites", a member of the Trojan-Downloader.Zlob.Media-Codec aka NewMediaCodec malware family
    GoodSearch Toolbar{4E7BD74F-2B8D-469E-95BA-ED6DB186BE32}L BHO TB Goodsearch.dll, GOODSE~1.DLL GoodSearch
    GWS Class{DD27742D-14D0-4E89-98EB-BB6DAFAEF1D7}? BHO GwMon.dllUnidentified browser plugin, file located in a "Program Files\GWSS" folder - should you have any information about this application, such as its homepage or the site where it was downloaded or installed, its exact purpose and whether you did or did not install it wittingly, do email us - if you actually have a copy of the file, please attach it to your email for analysis. Thanks!
    Google Update Class{ADD57508-1A52-4FAA-A7B3-A3ADE8FAEFEC}O BHO GoopdateBho.dllRelated to the Google Update Service, and part of a Google_Gears install package
    gold-factory Toolbar{81CFC095-AC7A-4B6C-9EBF-9B353A7A7EE2}O TB gold-factory.dll, GOLD-F~1.DLLgold-factory Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Some of the toolbars are fine to have, so every case is different. Your choice.
    Yahoo! Messenger{********-****-****-****-************}X BHO googleed.dll, googleem.dll, googlee*.dll (* = random char)Infostealer trojan of Chinese origin, detected by Kaspersky antivirus as Trojan-PSW.Win32.YahooPass
    gktxaspm{C9A66198-D585-4160-A963-A889176926B0}X TB gktxaspm.dllParasite causing false spyware warnings and connecting to fake "security sites" - member of the FakeAlert aka SmitFraud malware family

    spacer spacer