Ominent Toolbar

Ominent Toolbar Description

The Ominent Toolbar is a browser toolbar that has been linked to questionable tactics and potential intrusions on victims' privacy. The Ominent Toolbar may be installed without the computer user's knowledge. In general, the Ominent Toolbar and similar toolbars may be bundled with free software, with the option to opt out of installing the Ominent Toolbar hidden from the computer user. Security researchers strongly advise against installing Web browser extensions like the Ominent Toolbar. These typically cause numerous problems on the affected Web browsers and may compromise the victims' privacy. The Ominent Toolbar is a Web browser plug-in for the most popular Web browsers, that may include Google Chrome, Internet Explorer and Mozilla Firefox, and will typically affect Web browsers that run on the Windows operating system. Because of the many undesirable effects of the Ominent Toolbar on an effected Web browser, security researchers strongly advise against installing this PUP (Potentially Unwanted Program). If the Ominent Toolbar is already installed on a computer, the Ominent Toolbar should be removed immediately with the aid of a reliable anti-malware program.

Common Problems that Have Been Linked to the Ominent Toolbar


There are numerous issues that have been associated with the Ominent Toolbar. Listed below are common problems that affect computers afflicted by this PUP:
  • When installed, the Ominent Toolbar may make changes to the affected computer's settings that allow the Ominent Toolbar to run automatically, reinstall itself after the Ominent Toolbar has been removed and have unauthorized access to the victim's files and memory processes.
  • The Ominent Toolbar may cause Web browser redirects, causing the affected Web browser to visit websites associated with the Ominent Toolbar repeatedly.
  • The Ominent Toolbar has been linked to pop-up advertisements.
  • The Ominent Toolbar contains components that may compromise your security by keeping track of your online activity and online searches. The Ominent Toolbar uses this information to redirect your Web browser, display advertisements and carry out marketing research.
  • Generally, the Ominent Toolbar is similar to numerous other, similar threats. These seldom attack alone. The presence of the Ominent Toolbar on a computer typically indicates that other PUPs or even more harmful threats are already present on the affected computer.

Infected with Ominent Toolbar? Scan Your PC for Free

Download SpyHunter’s Spyware Scanner
to Detect Ominent Toolbar

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in 'Safe Mode with Networking' and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

Infection Statistics


Our MalwareTracker shows malware activity across the world. Explore real-time data of Ominent Toolbar outbreaks and other threats from global to local level.

File System Details

Ominent Toolbar creates the following file(s):
# File Name Size MD5 Detection Count
1 %PROGRAMFILES%\weDownload Ltd\ominent\1.8.26.12\bh\ominent.dll 302,488 8e762d4a1be4d7c40f55ed9f57f41b66 163
2 %PROGRAMFILES%\WEDOWNLOAD LTD\OMINENT\1.8.25.6\ominentsrv.exe 378,776 34b3fe448d3787a2f0b3c09c3f09dfa3 83
3 %TEMP%\ominent_1.8.25.6.exe 2,294,504 d164e9d8bfac745cce71cc53210a075e 81
4 %PROGRAMFILES%\Ominent\Ominent-chromeinstaller.exe 484,864 85556353db9752a80d25eb45011f3019 79
5 %PROGRAMFILES%\Ominent\Ominent-codedownloader.exe 487,424 d322e432e435e15128511fb7e35d33f9 68
6 %TEMP%\mt_ffx\weDownload Ltd\ominent 51
7 %PROGRAMFILES%\Ominent\Ominent-enabler.exe 343,552 c6aadf6498562109b07ccf25395b5a44 48
8 %TEMP%\weDownload Ltd\ominent\1.8.26.12\ominent4ffx.exe 369,216 106a6c0fa28d77da3601d5f2ac3a5d01 34
9 %PROGRAMFILES%\Ominent\Ominent-bho.dll 748,032 9ba424b70a0eeb386a5a54847cf92b0f 14
10 %UserProfile%\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pfbeipanohfeidpadabjjooclppdoghg 13
11 %LocalAppData%\Google\Chrome\User Data\Default\Extensions\pfbeipanohfeidpadabjjooclppdoghg 12
12 %ProgramFiles%\weDownload Ltd\ominent 11
13 %PROGRAMFILES(x86)%\Ominent\Ominent-bho64.dll 940,544 4f6e6893a4dd0234eb33b007dd2d9aba 11
14 %ProgramFiles(x86)%\weDownload Ltd\ominent 10
15 %TEMP%\1381919518_ominent_1.8.26.12.exe 2,382,160 d423687604a0afee5a913dc2ccc57d4f 2

More files

Registry Details

Ominent Toolbar creates the following registry entry or registry entries:
HKEY..\..\..\..{RegistryKeys}
SOFTWARE\Wow6432Node\weDownload Ltd\ominent
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ominent
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E4C0BD90-D03A-42AC-B401-3C0B1F5F3C46}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E4C0BD90-D03A-42AC-B401-3C0B1F5F3C46}
SOFTWARE\Google\chrome\Extensions\pfbeipanohfeidpadabjjooclppdoghg
SOFTWARE\Wow6432Node\Google\chrome\Extensions\pfbeipanohfeidpadabjjooclppdoghg
Software\weDownload Ltd\ominent
Software\ominent
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{817F6EB1-1780-46C5-9225-6832A54AE708}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
Software\Microsoft\Internet Explorer\Approved Extensions, value: {271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
Software\Microsoft\Internet Explorer\Approved Extensions, value: {817F6EB1-1780-46C5-9225-6832A54AE708}
SOFTWARE\Classes\ominent.ominentHlpr.1
SOFTWARE\Classes\ominent.ominentHlpr
SOFTWARE\Classes\ominent.ominentdskBnd.1
esrv.ominentESrvc
esrv.ominentESrvc.1
ominent.ominentappCore
ominent.ominentdskBnd.1
ominent.ominentHlpr
ominent.ominentHlpr.1
SOFTWARE\Classes\esrv.ominentESrvc
SOFTWARE\Classes\esrv.ominentESrvc.1
SOFTWARE\Classes\ominent.ominentappCore
SOFTWARE\Classes\ominent.ominentappCore.1
SOFTWARE\Classes\ominent.ominentdskBnd
HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}
ominent
The following CLSID's were found:
HKEY..\..\{CLSID Path}
{025566FC-07B2-4912-8DCD-FE2CD241C14F}
{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
{3A0DA31B-5223-4D15-8365-B6D19E883D21}
{5AA5AED7-F651-42D0-A2C2-3A0826F3FFC6}
{5AC6E6A9-286F-48AC-BAA4-AF9F572874B7}
{683C409F-0F9A-4190-B35B-5016F09A42CC}
{73A2011F-62EE-4C2D-9262-D3AD6634077F}
{83943129-C72F-44A0-AAB5-391A578715D0}
{95B7F786-3E4D-4A85-B687-7D3F4DCC52E5}
{9A246976-806F-4B2E-B3B9-A9A58F5685AA}
{BA9CC100-5D52-45A2-A866-F2B68C9C2989}
{C6B531A9-67DB-4E22-9EFF-1AEA67A3B63A}
{CEA3B088-98EF-4652-B9E9-B8F381F97EA2}
{E24727C0-4029-4891-851A-3F02E90F0724}
{E50700E4-FC19-4A33-BD05-DF1CEF647BE9}
{E85FBE61-F4D4-4339-A591-C328F5715CBC}
{EE2AEE76-7581-4D5D-8DA9-513747AAB142}

Site Disclaimer

Leave a Reply

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as-is:
What is 14 + 10 ?