Ominent Toolbar

Ominent Toolbar Description

The Ominent Toolbar is a browser toolbar that has been linked to questionable tactics and potential intrusions on victims' privacy. The Ominent Toolbar may be installed without the computer user's knowledge. In general, the Ominent Toolbar and similar toolbars may be bundled with free software, with the option to opt out of installing the Ominent Toolbar hidden from the computer user. Security researchers strongly advise against installing Web browser extensions like the Ominent Toolbar. These typically cause numerous problems on the affected Web browsers and may compromise the victims' privacy. The Ominent Toolbar is a Web browser plug-in for the most popular Web browsers, that may include Google Chrome, Internet Explorer and Mozilla Firefox, and will typically affect Web browsers that run on the Windows operating system. Because of the many undesirable effects of the Ominent Toolbar on an effected Web browser, security researchers strongly advise against installing this PUP (Potentially Unwanted Program). If the Ominent Toolbar is already installed on a computer, the Ominent Toolbar should be removed immediately with the aid of a reliable anti-malware program.

Common Problems that Have Been Linked to the Ominent Toolbar

There are numerous issues that have been associated with the Ominent Toolbar. Listed below are common problems that affect computers afflicted by this PUP:

  • When installed, the Ominent Toolbar may make changes to the affected computer's settings that allow the Ominent Toolbar to run automatically, reinstall itself after the Ominent Toolbar has been removed and have unauthorized access to the victim's files and memory processes.
  • The Ominent Toolbar may cause Web browser redirects, causing the affected Web browser to visit websites associated with the Ominent Toolbar repeatedly.
  • The Ominent Toolbar has been linked to pop-up advertisements.
  • The Ominent Toolbar contains components that may compromise your security by keeping track of your online activity and online searches. The Ominent Toolbar uses this information to redirect your Web browser, display advertisements and carry out marketing research.
  • Generally, the Ominent Toolbar is similar to numerous other, similar threats. These seldom attack alone. The presence of the Ominent Toolbar on a computer typically indicates that other PUPs or even more harmful threats are already present on the affected computer.

Infected with Ominent Toolbar? Scan Your PC for Free

Download SpyHunter’s Spyware Scanner
to Detect Ominent Toolbar

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in 'Safe Mode with Networking' and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

File System Details

Ominent Toolbar creates the following file(s):
# File Name Size MD5 Detection Count
1 %PROGRAMFILES%\weDownload Ltd\ominent\1.8.26.12\bh\ominent.dll 302,488 8e762d4a1be4d7c40f55ed9f57f41b66 163
2 %PROGRAMFILES%\WEDOWNLOAD LTD\OMINENT\1.8.25.6\ominentsrv.exe 378,776 34b3fe448d3787a2f0b3c09c3f09dfa3 83
3 %TEMP%\ominent_1.8.25.6.exe 2,294,504 d164e9d8bfac745cce71cc53210a075e 81
4 %PROGRAMFILES%\Ominent\Ominent-chromeinstaller.exe 484,864 85556353db9752a80d25eb45011f3019 79
5 %PROGRAMFILES%\Ominent\Ominent-codedownloader.exe 487,424 d322e432e435e15128511fb7e35d33f9 68
6 %TEMP%\mt_ffx\weDownload Ltd\ominent 51
7 %PROGRAMFILES%\Ominent\Ominent-enabler.exe 343,552 c6aadf6498562109b07ccf25395b5a44 48
8 %TEMP%\weDownload Ltd\ominent\1.8.26.12\ominent4ffx.exe 369,216 106a6c0fa28d77da3601d5f2ac3a5d01 34
9 %PROGRAMFILES%\Ominent\Ominent-bho.dll 748,032 9ba424b70a0eeb386a5a54847cf92b0f 14
10 %UserProfile%\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pfbeipanohfeidpadabjjooclppdoghg 13
11 %LocalAppData%\Google\Chrome\User Data\Default\Extensions\pfbeipanohfeidpadabjjooclppdoghg 12
12 %ProgramFiles%\weDownload Ltd\ominent 11
13 %PROGRAMFILES(x86)%\Ominent\Ominent-bho64.dll 940,544 4f6e6893a4dd0234eb33b007dd2d9aba 11
14 %ProgramFiles(x86)%\weDownload Ltd\ominent 10
15 %TEMP%\1381919518_ominent_1.8.26.12.exe 2,382,160 d423687604a0afee5a913dc2ccc57d4f 2

More files

Registry Details

Ominent Toolbar creates the following registry entry or registry entries:
HKEY..\..\..\..{RegistryKeys}
SOFTWARE\Wow6432Node\weDownload Ltd\ominent
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ominent
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E4C0BD90-D03A-42AC-B401-3C0B1F5F3C46}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E4C0BD90-D03A-42AC-B401-3C0B1F5F3C46}
SOFTWARE\Google\chrome\Extensions\pfbeipanohfeidpadabjjooclppdoghg
SOFTWARE\Wow6432Node\Google\chrome\Extensions\pfbeipanohfeidpadabjjooclppdoghg
Software\weDownload Ltd\ominent
Software\ominent
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{817F6EB1-1780-46C5-9225-6832A54AE708}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
Software\Microsoft\Internet Explorer\Approved Extensions, value: {271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
Software\Microsoft\Internet Explorer\Approved Extensions, value: {817F6EB1-1780-46C5-9225-6832A54AE708}
SOFTWARE\Classes\ominent.ominentHlpr.1
SOFTWARE\Classes\ominent.ominentHlpr
SOFTWARE\Classes\ominent.ominentdskBnd.1
esrv.ominentESrvc
esrv.ominentESrvc.1
ominent.ominentappCore
ominent.ominentdskBnd.1
ominent.ominentHlpr
ominent.ominentHlpr.1
SOFTWARE\Classes\esrv.ominentESrvc
SOFTWARE\Classes\esrv.ominentESrvc.1
SOFTWARE\Classes\ominent.ominentappCore
SOFTWARE\Classes\ominent.ominentappCore.1
SOFTWARE\Classes\ominent.ominentdskBnd
HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}
ominent
The following CLSID's were found:
HKEY..\..\{CLSID Path}
{025566FC-07B2-4912-8DCD-FE2CD241C14F}
{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
{3A0DA31B-5223-4D15-8365-B6D19E883D21}
{5AA5AED7-F651-42D0-A2C2-3A0826F3FFC6}
{5AC6E6A9-286F-48AC-BAA4-AF9F572874B7}
{683C409F-0F9A-4190-B35B-5016F09A42CC}
{73A2011F-62EE-4C2D-9262-D3AD6634077F}
{83943129-C72F-44A0-AAB5-391A578715D0}
{95B7F786-3E4D-4A85-B687-7D3F4DCC52E5}
{9A246976-806F-4B2E-B3B9-A9A58F5685AA}
{BA9CC100-5D52-45A2-A866-F2B68C9C2989}
{C6B531A9-67DB-4E22-9EFF-1AEA67A3B63A}
{CEA3B088-98EF-4652-B9E9-B8F381F97EA2}
{E24727C0-4029-4891-851A-3F02E90F0724}
{E50700E4-FC19-4A33-BD05-DF1CEF647BE9}
{E85FBE61-F4D4-4339-A591-C328F5715CBC}
{EE2AEE76-7581-4D5D-8DA9-513747AAB142}

Site Disclaimer

By Domesticus in Malicious Toolbars
Share:
Threat Scorecard
?
The ESG Threat Scorecard is an assessment report that is given to every malware threat that has been collected and analyzed through our Malware Research Center. The ESG Threat Scorecard evaluates and ranks each threat by using several metrics such as trends, incidents and severity over time.

In addition to the effective scoring for each threat, we are able to interpret anonymous geographic data to list the top three countries infected with a particular threat. The data used for the ESG Threat Scorecard is updated daily and displayed based on trends for a 30-day period. The ESG Threat Scorecard is a useful tool for a wide array of computer users from end users seeking a solution to remove a particular threat or security experts pursuing analysis and research data on emerging threats.

Each of the fields listed on the ESG Threat Scorecard, containing a specific value, are as follows:

Ranking: The current ranking of a particular threat among all the other threats found on our malware research database.

Threat Level: The level of threat a particular PC threat could have on an infected computer. The threat level is based on a particular threat's behavior and other risk factors. We rate the threat level as low, medium or high. The different threat levels are discussed in the SpyHunter Risk Assessment Model.

Infected PCs: The number of confirmed and suspected cases of a particular threat detected on infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter's Spyware Scanner.

% Change: The daily percent change in the frequency of infected PCs of a specific threat. The formula for percent changes results from current trends of a specific threat. An increase in the rankings of a specific threat yields a recalculation of the percentage of its recent gain. When a specific threat's ranking decreases, the percentage rate reflects its recent decline. For a specific threat remaining unchanged, the percent change remains in its current state. The % Change data is calculated and displayed in three different date ranges, in the last 24 hours, 7 days and 30 days. Next to the percentage change is the trend movement a specific malware threat does, either upward or downward, in the rankings. Each level of movement is color coded: a green up-arrow (∧) indicates a rise, a red down-arrow (∨) indicates a decline, and a brown equal symbol (=) indicates no change or plateaued.

Top 3 Countries Infected: Lists the top three countries a particular threat has targeted the most over the past month. This data allows PC users to track the geographic distribution of a particular threat throughout the world.
Ranking: 745
Threat Level: 5
Infected PCs: 7,979
% Change 30 Days:
-0%
7 Days:
-0%
1 Day:
-29%

Leave a Reply

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as-is:
What is 4 + 6 ?