SystemLookup - O18 List

List Information

Started by: FBJ, CastleCops Team

Maintained by: Metallica, myrti, Gammo

O18 List

The O18 list catalogues extra protocols and protocol hijackers.

These can extend functionality legitimately, but may also be used to hijack various Internet protocols.

Status Key:
X = Malware, spyware, adware, or other potentially unwanted items
L = Legitimate items
O = Open to debate
? = Currently unknown status

Filename

CLSID

Name

Searching: Over 284 items

Search Results
(displaying 13 results)

CLSID	Name	Filename	Description	Status
{CD00020A-8B95-11D1-82DB-00C04FB1625D}	cdo	%ProgramFiles%\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL	Microsoft SharePoint Portal Server Object Model Note: Item taken from whitelist of HijackThis	L `Protocol`
{E1D2BF40-A96B-11d1-9C6B-0000F875AC61}	http\oledb, https\oledb, msdaipp\oledb	%ProgramFiles%\Common Files\SYSTEM\OLE DB\msdaipp.dll	Microsoft Data Access Component Internet Publishing Provider Note: item whitelisted by HijackThis	L `Protocol`
{4D25FB7A-8902-4291-960E-9ADA051CFBBF}	tbr	%Program Files%\Crawler\ctbr.dll	Adware-CTBar	O `Protocol`
{99FEA1B2-7881-11D1-A9E2-00403320FCF2}	text/html	%Program Files%\Desktop Armor\GeekSuperheroX.dll	Desktop_Armor	L `Filter`
{994D478A-45D0-4DB4-AE27-738B1E346E99}	text/html	Program Files\Batty\Batty.dll	Adware.Batty	X `Filter`
{807563E5-5146-11D5-A672-00B0D022E945}	text/xml	MSOXMLMF.DLL	Microsoft Office XML Filter	L `Filter hijack`
{807553E5-5146-11D5-A672-00B0D022E945}	text/xml	MSOXMLMF.DLL	Microsoft Office InfoPath	L `Filter`
{807573E5-5146-11D5-A672-00B0D022E945}	text/xml	MSOXMLMF.DLL	Microsoft Office XML MIME filter. Normally located in %programfiles%\Common Files\Microsoft Shared\OFFICE14.	L `Filter hijack`
{******----**********}	text/html	\microsoft\internet explorer\V0.39.dat	Infostealer.Lineage	X `Filter`
{d7b95390-b1c5-11d0-b111-0080c712fe82}	mctp	%ProgramFiles%\Microsoft ActiveSync\aatp.dll	Mobile Channel Transport Protocol	L `Protocol`
{0215258F-F0A8-49DE-BF1B-0FF02EDA8807}	x-owacid	%ProgramFiles%\Microsoft\Outlook Web Access SMIME Client\mimectl.dll	MIME Edit binary behaviour	L `Protocol`
{******----**********}	bw+*** [* random character or number]	Logitech\Desktop Messenger\8876480\Program\BWPlugPro tocol-8876480.dll	Logitech® Desktop Messenger Note: Has a tendency to conflict and keep adding new entries	O `Protocol`
{******----**********}	offline-8876480	Logitech\Desktop Messenger\8876480\Program\BWPlugPro tocol-8876480.dll	BackWeb	O `Protocol`