Ominent Toolbar

Ominent Toolbar Description

The Ominent Toolbar is a browser toolbar that has been linked to questionable tactics and potential intrusions on victims' privacy. The Ominent Toolbar may be installed without the computer user's knowledge. In general, the Ominent Toolbar and similar toolbars may be bundled with free software, with the option to opt out of installing the Ominent Toolbar hidden from the computer user. Security researchers strongly advise against installing Web browser extensions like the Ominent Toolbar. These typically cause numerous problems on the affected Web browsers and may compromise the victims' privacy. The Ominent Toolbar is a Web browser plug-in for the most popular Web browsers, that may include Google Chrome, Internet Explorer and Mozilla Firefox, and will typically affect Web browsers that run on the Windows operating system. Because of the many undesirable effects of the Ominent Toolbar on an effected Web browser, security researchers strongly advise against installing this PUP (Potentially Unwanted Program). If the Ominent Toolbar is already installed on a computer, the Ominent Toolbar should be removed immediately with the aid of a reliable anti-malware program.

Common Problems that Have Been Linked to the Ominent Toolbar

There are numerous issues that have been associated with the Ominent Toolbar. Listed below are common problems that affect computers afflicted by this PUP:

  • When installed, the Ominent Toolbar may make changes to the affected computer's settings that allow the Ominent Toolbar to run automatically, reinstall itself after the Ominent Toolbar has been removed and have unauthorized access to the victim's files and memory processes.
  • The Ominent Toolbar may cause Web browser redirects, causing the affected Web browser to visit websites associated with the Ominent Toolbar repeatedly.
  • The Ominent Toolbar has been linked to pop-up advertisements.
  • The Ominent Toolbar contains components that may compromise your security by keeping track of your online activity and online searches. The Ominent Toolbar uses this information to redirect your Web browser, display advertisements and carry out marketing research.
  • Generally, the Ominent Toolbar is similar to numerous other, similar threats. These seldom attack alone. The presence of the Ominent Toolbar on a computer typically indicates that other PUPs or even more harmful threats are already present on the affected computer.

Technical Information

File System Details

Ominent Toolbar creates the following file(s):
# File Name Size MD5 Detection Count
1 %PROGRAMFILES%\Ominent\Ominent-firefoxinstaller.exe 722,944 f3f53ab8870116d13d4e199e15b0d865 70
2 %PROGRAMFILES%\Ominent\Ominent-codedownloader.exe 487,424 d322e432e435e15128511fb7e35d33f9 68
3 %PROGRAMFILES%\Ominent\Ominent-enabler.exe 343,552 c6aadf6498562109b07ccf25395b5a44 48
4 %PROGRAMFILES%\Ominent\Ominent-bho.dll 748,032 9ba424b70a0eeb386a5a54847cf92b0f 14
5 %PROGRAMFILES(x86)%\Ominent\Ominent-bho64.dll 940,544 4f6e6893a4dd0234eb33b007dd2d9aba 11
6 %PROGRAMFILES%\ominent\ominent-bg.exe 738,304 b3e8b175298c5b97f542ceb904809c50 2
More files

Registry Details

Ominent Toolbar creates the following registry entry or registry entries:
Directory
%ProgramFiles%\weDownload Ltd\ominent
%ProgramFiles(x86)%\weDownload Ltd\ominent
%TEMP%\mt_ffx\weDownload Ltd\ominent
Registry key
SOFTWARE\Classes\esrv.ominentESrvc
SOFTWARE\Classes\esrv.ominentESrvc.1
SOFTWARE\Classes\ominent.ominentappCore
SOFTWARE\Classes\ominent.ominentappCore.1
SOFTWARE\Classes\ominent.ominentdskBnd
SOFTWARE\Classes\ominent.ominentdskBnd.1
SOFTWARE\Classes\ominent.ominentHlpr
SOFTWARE\Classes\ominent.ominentHlpr.1
Software\Microsoft\Internet Explorer\Approved Extensions\{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
Software\Microsoft\Internet Explorer\Approved Extensions\{817F6EB1-1780-46C5-9225-6832A54AE708}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E4C0BD90-D03A-42AC-B401-3C0B1F5F3C46}
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{817F6EB1-1780-46C5-9225-6832A54AE708}
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{817F6EB1-1780-46C5-9225-6832A54AE708}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{817F6EB1-1780-46C5-9225-6832A54AE708}
Software\ominent
Software\weDownload Ltd\ominent
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E4C0BD90-D03A-42AC-B401-3C0B1F5F3C46}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{817F6EB1-1780-46C5-9225-6832A54AE708}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
SOFTWARE\Wow6432Node\weDownload Ltd\ominent
Uninstaller
ominent
CLSID
{025566FC-07B2-4912-8DCD-FE2CD241C14F}
{0D4331BC-59A3-4107-ACCB-D3C731232163}
{1DB92674-AE51-4674-A3E4-3490B2711355}
{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
{377F57B2-15DF-4E81-9C96-191F4221AC12}
{3A0DA31B-5223-4D15-8365-B6D19E883D21}
{5AA5AED7-F651-42D0-A2C2-3A0826F3FFC6}
{5AC6E6A9-286F-48AC-BAA4-AF9F572874B7}
{683C409F-0F9A-4190-B35B-5016F09A42CC}
{73A2011F-62EE-4C2D-9262-D3AD6634077F}
{817F6EB1-1780-46C5-9225-6832A54AE708}
{83943129-C72F-44A0-AAB5-391A578715D0}
{95B7F786-3E4D-4A85-B687-7D3F4DCC52E5}
{9A246976-806F-4B2E-B3B9-A9A58F5685AA}
{BA9CC100-5D52-45A2-A866-F2B68C9C2989}
{C6B531A9-67DB-4E22-9EFF-1AEA67A3B63A}
{CEA3B088-98EF-4652-B9E9-B8F381F97EA2}
{E24727C0-4029-4891-851A-3F02E90F0724}
{E50700E4-FC19-4A33-BD05-DF1CEF647BE9}
{E85FBE61-F4D4-4339-A591-C328F5715CBC}
{EE2AEE76-7581-4D5D-8DA9-513747AAB142}
{FDEF39BF-4CB2-4774-B374-9FEA297BB5EB}

Site Disclaimer

Enigmasoftware.com is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.


HTML is not allowed.

By Domesticus in Malicious Toolbars
Threat Scorecard
?
The ESL Threat Scorecard is an assessment report that is given to every malware threat that has been collected and analyzed through our Malware Research Center. The ESL Threat Scorecard evaluates and ranks each threat by using several metrics such as trends, incidents and severity over time.

In addition to the effective scoring for each threat, we are able to interpret anonymous geographic data to list the top three countries infected with a particular threat. The data used for the ESL Threat Scorecard is updated daily and displayed based on trends for a 30-day period. The ESL Threat Scorecard is a useful tool for a wide array of computer users from end users seeking a solution to remove a particular threat or security experts pursuing analysis and research data on emerging threats.

Each of the fields listed on the ESL Threat Scorecard, containing a specific value, are as follows:

Ranking: The current ranking of a particular threat among all the other threats found on our malware research database.

Threat Level: The level of threat a particular computer threat could have on an infected computer. The threat level is based on a particular threat's behavior and other risk factors. We rate the threat level as low, medium or high. The different threat levels are discussed in the SpyHunter Risk Assessment Model.

Infected Computer: The number of confirmed and suspected cases of a particular threat detected on infected computers retrieved from diagnostic and scan log reports generated by SpyHunter's Spyware Scanner.

% Change: The daily percent change in the frequency of infected computers of a specific threat. The formula for percent changes results from current trends of a specific threat. An increase in the rankings of a specific threat yields a recalculation of the percentage of its recent gain. When a specific threat's ranking decreases, the percentage rate reflects its recent decline. For a specific threat remaining unchanged, the percent change remains in its current state. The % Change data is calculated and displayed in three different date ranges, in the last 24 hours, 7 days and 30 days. Next to the percentage change is the trend movement a specific malware threat does, either upward or downward, in the rankings. Each level of movement is color coded: a green up-arrow (∧) indicates a rise, a red down-arrow (∨) indicates a decline, and a brown equal symbol (=) indicates no change or plateaued.

Top 3 Countries Infected: Lists the top three countries a particular threat has targeted the most over the past month. This data allows computer users to track the geographic distribution of a particular threat throughout the world.
Ranking: N/A
Threat Level: 5
Infected Computers: 1,651