Ominent Toolbar

Ominent Toolbar Description

The Ominent Toolbar is a browser toolbar that has been linked to questionable tactics and potential intrusions on victims' privacy. The Ominent Toolbar may be installed without the computer user's knowledge. In general, the Ominent Toolbar and similar toolbars may be bundled with free software, with the option to opt out of installing the Ominent Toolbar hidden from the computer user. Security researchers strongly advise against installing Web browser extensions like the Ominent Toolbar. These typically cause numerous problems on the affected Web browsers and may compromise the victims' privacy. The Ominent Toolbar is a Web browser plug-in for the most popular Web browsers, that may include Google Chrome, Internet Explorer and Mozilla Firefox, and will typically affect Web browsers that run on the Windows operating system. Because of the many undesirable effects of the Ominent Toolbar on an effected Web browser, security researchers strongly advise against installing this PUP (Potentially Unwanted Program). If the Ominent Toolbar is already installed on a computer, the Ominent Toolbar should be removed immediately with the aid of a reliable anti-malware program.

Common Problems that Have Been Linked to the Ominent Toolbar

There are numerous issues that have been associated with the Ominent Toolbar. Listed below are common problems that affect computers afflicted by this PUP:

  • When installed, the Ominent Toolbar may make changes to the affected computer's settings that allow the Ominent Toolbar to run automatically, reinstall itself after the Ominent Toolbar has been removed and have unauthorized access to the victim's files and memory processes.
  • The Ominent Toolbar may cause Web browser redirects, causing the affected Web browser to visit websites associated with the Ominent Toolbar repeatedly.
  • The Ominent Toolbar has been linked to pop-up advertisements.
  • The Ominent Toolbar contains components that may compromise your security by keeping track of your online activity and online searches. The Ominent Toolbar uses this information to redirect your Web browser, display advertisements and carry out marketing research.
  • Generally, the Ominent Toolbar is similar to numerous other, similar threats. These seldom attack alone. The presence of the Ominent Toolbar on a computer typically indicates that other PUPs or even more harmful threats are already present on the affected computer.

Technical Information

File System Details

Ominent Toolbar creates the following file(s):
# File Name Size MD5 Detection Count
1 %PROGRAMFILES%\Ominent\Ominent-firefoxinstaller.exe 722,944 f3f53ab8870116d13d4e199e15b0d865 70
2 %PROGRAMFILES%\Ominent\Ominent-codedownloader.exe 487,424 d322e432e435e15128511fb7e35d33f9 68
3 %PROGRAMFILES%\Ominent\Ominent-enabler.exe 343,552 c6aadf6498562109b07ccf25395b5a44 48
4 %PROGRAMFILES%\Ominent\Ominent-bho.dll 748,032 9ba424b70a0eeb386a5a54847cf92b0f 14
5 %PROGRAMFILES(x86)%\Ominent\Ominent-bho64.dll 940,544 4f6e6893a4dd0234eb33b007dd2d9aba 11
6 %PROGRAMFILES%\ominent\ominent-bg.exe 738,304 b3e8b175298c5b97f542ceb904809c50 2
More files

Registry Details

Ominent Toolbar creates the following registry entry or registry entries:
Directory
%ProgramFiles%\weDownload Ltd\ominent
%ProgramFiles(x86)%\weDownload Ltd\ominent
%TEMP%\mt_ffx\weDownload Ltd\ominent
Registry key
SOFTWARE\Classes\esrv.ominentESrvc
SOFTWARE\Classes\esrv.ominentESrvc.1
SOFTWARE\Classes\ominent.ominentappCore
SOFTWARE\Classes\ominent.ominentappCore.1
SOFTWARE\Classes\ominent.ominentdskBnd
SOFTWARE\Classes\ominent.ominentdskBnd.1
SOFTWARE\Classes\ominent.ominentHlpr
SOFTWARE\Classes\ominent.ominentHlpr.1
Software\Microsoft\Internet Explorer\Approved Extensions\{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
Software\Microsoft\Internet Explorer\Approved Extensions\{817F6EB1-1780-46C5-9225-6832A54AE708}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E4C0BD90-D03A-42AC-B401-3C0B1F5F3C46}
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{817F6EB1-1780-46C5-9225-6832A54AE708}
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{817F6EB1-1780-46C5-9225-6832A54AE708}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{817F6EB1-1780-46C5-9225-6832A54AE708}
Software\ominent
Software\weDownload Ltd\ominent
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E4C0BD90-D03A-42AC-B401-3C0B1F5F3C46}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{817F6EB1-1780-46C5-9225-6832A54AE708}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
SOFTWARE\Wow6432Node\weDownload Ltd\ominent
Uninstaller
ominent
CLSID
{025566FC-07B2-4912-8DCD-FE2CD241C14F}
{0D4331BC-59A3-4107-ACCB-D3C731232163}
{1DB92674-AE51-4674-A3E4-3490B2711355}
{271FF4A7-3AA1-4DA8-B272-B10D2025C9D6}
{377F57B2-15DF-4E81-9C96-191F4221AC12}
{3A0DA31B-5223-4D15-8365-B6D19E883D21}
{5AA5AED7-F651-42D0-A2C2-3A0826F3FFC6}
{5AC6E6A9-286F-48AC-BAA4-AF9F572874B7}
{683C409F-0F9A-4190-B35B-5016F09A42CC}
{73A2011F-62EE-4C2D-9262-D3AD6634077F}
{817F6EB1-1780-46C5-9225-6832A54AE708}
{83943129-C72F-44A0-AAB5-391A578715D0}
{95B7F786-3E4D-4A85-B687-7D3F4DCC52E5}
{9A246976-806F-4B2E-B3B9-A9A58F5685AA}
{BA9CC100-5D52-45A2-A866-F2B68C9C2989}
{C6B531A9-67DB-4E22-9EFF-1AEA67A3B63A}
{CEA3B088-98EF-4652-B9E9-B8F381F97EA2}
{E24727C0-4029-4891-851A-3F02E90F0724}
{E50700E4-FC19-4A33-BD05-DF1CEF647BE9}
{E85FBE61-F4D4-4339-A591-C328F5715CBC}
{EE2AEE76-7581-4D5D-8DA9-513747AAB142}
{FDEF39BF-4CB2-4774-B374-9FEA297BB5EB}

Site Disclaimer

Enigmasoftware.com is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.


HTML is not allowed.