Mobile/PDA About Us Advertise here
User User name Password  
  Not registered yet? Register here.
Lost your password? Click here. 		 
  Home   News   Guides   Downloads   Glossary   Hardware   Profiles   Forums   v4  
 Advertise at AfterDawn.com     Link to us!     Private messages     Compose a private message     List of all updated threads     Threads without replies     Search messages
Saturday 23.11.2024 / 19:42
Search AfterDawn Forums:        In English   Suomeksi   På svenska
afterdawn.com > forums > software, operating systems and more > windows - general discussion > babylon toolbar registry key
Show topics
 
Forums
Forums
babylon toolbar registry key
  Jump to:
 
Posted Message
Page:12Next >
Mickoz74
Senior Member
_ 		14. October 2012 @ 20:18 _ Link to this message    Send private message to this user   
i have windows 7 64 bit pc got stuck with stupid babylon toolbar got rid of it all but spybot up to date newest version says i got a registry key and i cant sort it.

HKEY_USERS\S-1-5-21-3940473093-4060525308-1183659428-1000\SOFTWARE\\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{988889811-442D-49DD-99D7-DC866BE87DBC} Registry key.

Spybot cannot get rid of it in admin mode while booted into the pc or on a restart.
please help thanks in advance

this key s apparently the last this attached to babylon toolbar
[ + quote]
Magic Memory Stick Made Easy http://forums.afterdawn.com/t.cfm/f-149/psp_1000_to_2000_mms_files_here-841641/ POPSLOADER 5.50 GEN(ALL VERSIONS) http://dl.qj.net/Popsloader-5.50GEN/pg/49/fid/27247/catid/151 PSP ERROR CODES http://forums.afterdawn.com/t.cfm/f-149/list_of_psp_error_codes-784423/
5.50 gen CFW UPDATES http://forums.afterdawn.com/t.cfm/f-149/psp_gen_custom_firmware_links-812290/

This message has been edited since posting. Last time this message was edited on 14. October 2012 @ 20:20
Advertisement
_ 		__
ddp
Moderator
_ 		14. October 2012 @ 20:20 _ Link to this message    Send private message to this user   
do a system restore to before you got that toolbar.
[ + quote]
Mickoz74
Senior Member
_ 		14. October 2012 @ 20:29 _ Link to this message    Send private message to this user   
got full report of spybot s & D
Babylon.Toolbar: [SBI $E02AA723] Settings (Registry key, nothing done)
HKEY_USERS\S-1-5-21-3940473093-4060525308-1183659428-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}


--- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---

2009-01-26 blindman.exe (1.0.0.8)
2009-01-26 SDFiles.exe (1.6.1.7)
2009-01-26 SDMain.exe (1.0.0.6)
2009-01-26 SDShred.exe (1.0.2.5)
2009-01-26 SDUpdate.exe (1.6.0.12)
2009-01-26 SDWinSec.exe (1.0.0.12)
2009-01-26 SpybotSD.exe (1.6.2.46)
2009-03-05 TeaTimer.exe (1.6.6.32)
2012-09-09 unins000.exe (51.49.0.0)
2009-01-26 Update.exe (1.6.0.7)
2009-11-04 advcheck.dll (1.6.5.20)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2009-01-26 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2009-01-26 Tools.dll (2.1.6.10)
2009-01-16 UninsSrv.dll (1.0.0.0)
2012-04-04 Includes\Adware.sbi (*)
2012-10-09 Includes\AdwareC.sbi (*)
2010-08-13 Includes\Cookies.sbi (*)
2010-12-14 Includes\Dialer.sbi (*)
2012-09-26 Includes\DialerC.sbi (*)
2012-01-31 Includes\HeavyDuty.sbi (*)
2012-06-19 Includes\Hijackers.sbi (*)
2012-09-25 Includes\HijackersC.sbi (*)
2010-09-15 Includes\iPhone.sbi (*)
2012-03-13 Includes\Keyloggers.sbi (*)
2012-03-13 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2012-08-28 Includes\Malware.sbi (*)
2012-09-25 Includes\MalwareC.sbi (*)
2011-02-24 Includes\PUPS.sbi (*)
2012-10-09 Includes\PUPSC.sbi (*)
2010-01-25 Includes\Revision.sbi (*)
2012-06-19 Includes\Security.sbi (*)
2011-12-13 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2012-09-05 Includes\Spyware.sbi (*)
2012-09-04 Includes\SpywareC.sbi (*)
2010-03-08 Includes\Tracks.uti
2011-09-28 Includes\Trojans.sbi (*)
2012-10-10 Includes\TrojansC-02.sbi (*)
2012-09-20 Includes\TrojansC-03.sbi (*)
2012-10-09 Includes\TrojansC-04.sbi (*)
2012-08-31 Includes\TrojansC-05.sbi (*)
2012-09-07 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll
[ + quote]
Magic Memory Stick Made Easy http://forums.afterdawn.com/t.cfm/f-149/psp_1000_to_2000_mms_files_here-841641/ POPSLOADER 5.50 GEN(ALL VERSIONS) http://dl.qj.net/Popsloader-5.50GEN/pg/49/fid/27247/catid/151 PSP ERROR CODES http://forums.afterdawn.com/t.cfm/f-149/list_of_psp_error_codes-784423/
5.50 gen CFW UPDATES http://forums.afterdawn.com/t.cfm/f-149/psp_gen_custom_firmware_links-812290/
Mickoz74
Senior Member
_ 		14. October 2012 @ 20:42 _ Link to this message    Send private message to this user   
no joy i must have had it a fair while
malwaerbytes anti malware couldnt find anything

[ + quote]
Magic Memory Stick Made Easy http://forums.afterdawn.com/t.cfm/f-149/psp_1000_to_2000_mms_files_here-841641/ POPSLOADER 5.50 GEN(ALL VERSIONS) http://dl.qj.net/Popsloader-5.50GEN/pg/49/fid/27247/catid/151 PSP ERROR CODES http://forums.afterdawn.com/t.cfm/f-149/list_of_psp_error_codes-784423/
5.50 gen CFW UPDATES http://forums.afterdawn.com/t.cfm/f-149/psp_gen_custom_firmware_links-812290/

This message has been edited since posting. Last time this message was edited on 14. October 2012 @ 20:44
JST1946
Senior Member
_ 		14. October 2012 @ 22:01 _ Link to this message    Send private message to this user   
Try SuperAntiSpyware free edition.Make sure you do an update first before doing a scan.It works a lot better than all the other programs.

http://superantispyware.com/
[ + quote]
20 Year U.S.Army Veteran.Vietnam 1969-1972 101st Abn.Div.

This message has been edited since posting. Last time this message was edited on 14. October 2012 @ 22:04
Mickoz74
Senior Member
_ 		15. October 2012 @ 04:42 _ Link to this message    Send private message to this user   
Originally posted by JST1946:
 Try SuperAntiSpyware free edition.Make sure you do an update first before doing a scan.It works a lot better than all the other programs.

http://superantispyware.com/

registry detected 0 with that program

only spybot finds it which was installed at same time as babylon attack, UN-installed and reinstalled same finding, although the registry key is now reporting it as settings

[ + quote]
Magic Memory Stick Made Easy http://forums.afterdawn.com/t.cfm/f-149/psp_1000_to_2000_mms_files_here-841641/ POPSLOADER 5.50 GEN(ALL VERSIONS) http://dl.qj.net/Popsloader-5.50GEN/pg/49/fid/27247/catid/151 PSP ERROR CODES http://forums.afterdawn.com/t.cfm/f-149/list_of_psp_error_codes-784423/
5.50 gen CFW UPDATES http://forums.afterdawn.com/t.cfm/f-149/psp_gen_custom_firmware_links-812290/

This message has been edited since posting. Last time this message was edited on 15. October 2012 @ 06:41
ddp
Moderator
_ 		15. October 2012 @ 10:57 _ Link to this message    Send private message to this user   
did you do a system restore?
[ + quote]
Ripper
AfterDawn Addict
_ 		15. October 2012 @ 19:29 _ Link to this message    Send private message to this user   
Have you tried manually deleting the registry entry? Presumably this is an artifact of a previously installed toolbar?
[ + quote]
JST1946
Senior Member
_ 		15. October 2012 @ 19:37 _ Link to this message    Send private message to this user   
Use Hijack This and try to remove it.
[ + quote]
20 Year U.S.Army Veteran.Vietnam 1969-1972 101st Abn.Div.
fandr78
Member
_ 		15. October 2012 @ 21:42 _ Link to this message    Send private message to this user   
I had the same problem with a laptop from a client of mine. SUPERAntispyware worked for me. Make sure you update first and do a "full scan". Also try scanning in safe mode first. Hope this helps.
[ + quote]
Franco
aldan
Senior Member
_ 		16. October 2012 @ 01:01 _ Link to this message    Send private message to this user   
run hijack this and post a log.i wouldnt fix anything just yet unless you are positive you have the right entry.
[ + quote]
xboxdvl2
Senior Member
_ 		16. October 2012 @ 06:05 _ Link to this message    Send private message to this user   
i had a virus in the registry a while back i even posted on here for help.ended up getting rid of it using a scanner to find the path then running regedit to find it and delete it.
[ + quote]
custom built gaming pc from early 2010,ps2 with 15 games all original,ps3 500gbs with 5 games all original,yamaha amp and 5.1channel surround sound speakers,46inch sony lcd smart tv.
Mickoz74
Senior Member
_ 		16. October 2012 @ 10:18 _ Link to this message    Send private message to this user   
can't shift it spybot is the only one reporting it still
[ + quote]
Mickoz74
Senior Member
_ 		16. October 2012 @ 12:58 _ Link to this message    Send private message to this user   
Originally posted by Ripper:
 Have you tried manually deleting the registry entry? Presumably this is an artifact of a previously installed toolbar?
wont let me
[ + quote]
Magic Memory Stick Made Easy http://forums.afterdawn.com/t.cfm/f-149/psp_1000_to_2000_mms_files_here-841641/ POPSLOADER 5.50 GEN(ALL VERSIONS) http://dl.qj.net/Popsloader-5.50GEN/pg/49/fid/27247/catid/151 PSP ERROR CODES http://forums.afterdawn.com/t.cfm/f-149/list_of_psp_error_codes-784423/
5.50 gen CFW UPDATES http://forums.afterdawn.com/t.cfm/f-149/psp_gen_custom_firmware_links-812290/
Mickoz74
Senior Member
_ 		16. October 2012 @ 13:05 _ Link to this message    Send private message to this user   
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:05:18, on 16/10/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16450)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe
C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe
C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
C:\Program Files (x86)\MagicDVDRipper\MagicDVDRipper.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
C:\Windows\SysWOW64\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
O4 - HKLM\..\Run: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
O4 - HKLM\..\Run: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
O4 - HKLM\..\Run: [OOTag] C:\Program Files (x86)\Acer\OOBEOffer\OOTag.exe
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [ArcadeMovieService] "C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe"
O4 - HKLM\..\Run: [Hotkey Utility] C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-18\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user')
O4 - Global Startup: ImageBrowser EX Agent.lnk = C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ZoneAlarm LTD Toolbar IswSvc (IswSvc) - Check Point Software Technologies - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: USBS3S4Detection - Unknown owner - C:\OEM\USBDECTION\USBS3S4Detection.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 13290 bytes
[ + quote]
Magic Memory Stick Made Easy http://forums.afterdawn.com/t.cfm/f-149/psp_1000_to_2000_mms_files_here-841641/ POPSLOADER 5.50 GEN(ALL VERSIONS) http://dl.qj.net/Popsloader-5.50GEN/pg/49/fid/27247/catid/151 PSP ERROR CODES http://forums.afterdawn.com/t.cfm/f-149/list_of_psp_error_codes-784423/
5.50 gen CFW UPDATES http://forums.afterdawn.com/t.cfm/f-149/psp_gen_custom_firmware_links-812290/
Mickoz74
Senior Member
_ 		16. October 2012 @ 13:09 _ Link to this message    Send private message to this user   
Originally posted by xboxdvl2:
 i had a virus in the registry a while back i even posted on here for help.ended up getting rid of it using a scanner to find the path then running regedit to find it and delete it.
which one did you use to find it?

thanks everyone for trying
[ + quote]
Magic Memory Stick Made Easy http://forums.afterdawn.com/t.cfm/f-149/psp_1000_to_2000_mms_files_here-841641/ POPSLOADER 5.50 GEN(ALL VERSIONS) http://dl.qj.net/Popsloader-5.50GEN/pg/49/fid/27247/catid/151 PSP ERROR CODES http://forums.afterdawn.com/t.cfm/f-149/list_of_psp_error_codes-784423/
5.50 gen CFW UPDATES http://forums.afterdawn.com/t.cfm/f-149/psp_gen_custom_firmware_links-812290/
aldan
Senior Member
_ 		16. October 2012 @ 13:20 _ Link to this message    Send private message to this user   
run hjt again and check fix on the following.

O2 - BHO: (no name) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - (no file)

O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file

i dont really see a direct reference to babylon in your log but these two should go at any rate.if this doesnt do it post back as i have one more idea.
[ + quote]
Mickoz74
Senior Member
_ 		16. October 2012 @ 13:51 _ Link to this message    Send private message to this user   
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file
the above one comes back the other one has gone, spybot still reports the babylon toolbar registry key
[ + quote]
Magic Memory Stick Made Easy http://forums.afterdawn.com/t.cfm/f-149/psp_1000_to_2000_mms_files_here-841641/ POPSLOADER 5.50 GEN(ALL VERSIONS) http://dl.qj.net/Popsloader-5.50GEN/pg/49/fid/27247/catid/151 PSP ERROR CODES http://forums.afterdawn.com/t.cfm/f-149/list_of_psp_error_codes-784423/
5.50 gen CFW UPDATES http://forums.afterdawn.com/t.cfm/f-149/psp_gen_custom_firmware_links-812290/

This message has been edited since posting. Last time this message was edited on 16. October 2012 @ 14:00
JST1946
Senior Member
_ 		16. October 2012 @ 15:01 _ Link to this message    Send private message to this user   
Dump Spybot and use SuperAntiSpyware instead.They have a new update to version 5.6 by the way.
http://superantispyware.com/
[ + quote]
20 Year U.S.Army Veteran.Vietnam 1969-1972 101st Abn.Div.

This message has been edited since posting. Last time this message was edited on 16. October 2012 @ 15:10
chefdamo
Junior Member
_ 		16. October 2012 @ 15:55 _ Link to this message    Send private message to this user   
Best thing to do is to download combofix. most of the time no programs can remove thinks like this because the string is running as a process and it can hide. So the best thing to do is run combofix and i say this because combofix runs in dos while windows is still runing and it does it by the command prompt same as if you type cmd and see the black dos box. this will remove anything like what you have even if they are running in your system. if combofix dont find it it's a false from spybot.

http://www.bleepingcomputer.com/combofix/how-to-use-combofix
[ + quote]
aldan
Senior Member
_ 		16. October 2012 @ 18:54 _ Link to this message    Send private message to this user   
i agree and spybot has a record of false positives.download combofix and let it update.before running disable all backround programs and any antivirus.let it run its course without interference.dont even drag the mouse across it.post the log when finished.
[ + quote]
xboxdvl2
Senior Member
_ 		17. October 2012 @ 03:33 _ Link to this message    Send private message to this user   
Originally posted by Mickoz74:
Originally posted by xboxdvl2:
 i had a virus in the registry a while back i even posted on here for help.ended up getting rid of it using a scanner to find the path then running regedit to find it and delete it.
which one did you use to find it?

thanks everyone for trying
i used an online pandascan to find the path,unfortunately pandascan doesnt work with the latest browsers or last time i checked it didnt.based on past experience pandascan always find virus's (if you have any) and gives you the exact file path but it wont remove the virus unless you pay a fee.once you have the file path you can actually remove it quite easily yourself.
[ + quote]
custom built gaming pc from early 2010,ps2 with 15 games all original,ps3 500gbs with 5 games all original,yamaha amp and 5.1channel surround sound speakers,46inch sony lcd smart tv.
Mickoz74
Senior Member
_ 		17. October 2012 @ 16:28 _ Link to this message    Send private message to this user   
Originally posted by chefdamo:
 Best thing to do is to download combofix. most of the time no programs can remove thinks like this because the string is running as a process and it can hide. So the best thing to do is run combofix and i say this because combofix runs in dos while windows is still runing and it does it by the command prompt same as if you type cmd and see the black dos box. this will remove anything like what you have even if they are running in your system. if combofix dont find it it's a false from spybot.

http://www.bleepingcomputer.com/combofix/how-to-use-combofix
cool will try this and report back
[ + quote]
aldan
Senior Member
_ 		18. October 2012 @ 00:39 _ Link to this message    Send private message to this user   
trend micro also has a bho remover that works well.cant remember the name but you can find it on their website.
[ + quote]
Advertisement
_ 		__
 
_
Mickoz74
Senior Member
_ 		19. October 2012 @ 10:32 _ Link to this message    Send private message to this user   
Originally posted by Mickoz74:
Originally posted by chefdamo:
 Best thing to do is to download combofix. most of the time no programs can remove thinks like this because the string is running as a process and it can hide. So the best thing to do is run combofix and i say this because combofix runs in dos while windows is still runing and it does it by the command prompt same as if you type cmd and see the black dos box. this will remove anything like what you have even if they are running in your system. if combofix dont find it it's a false from spybot.

http://www.bleepingcomputer.com/combofix/how-to-use-combofix
cool will try this and report back
dont think it likes my 64 bit as it fails on last bit of reinstall
[ + quote]
 
Page:12Next >
afterdawn.com > forums > software, operating systems and more > windows - general discussion > babylon toolbar registry key
 

Digital video: AfterDawn.com | AfterDawn Forums
Music: MP3Lizard.com
Gaming: Blasteroids.com | Blasteroids Forums | Compare game prices
Software: Software downloads
Blogs: User profile pages
RSS feeds: AfterDawn.com News | Software updates | AfterDawn Forums
International: AfterDawn in Finnish | AfterDawn in Swedish | AfterDawn in Norwegian | download.fi
Navigate: Search | Site map
About us: About AfterDawn Ltd | Advertise on our sites | Rules, Restrictions, Legal disclaimer & Privacy policy
Contact us: Send feedback | Contact our media sales team
 
  © 1999-2024 by AfterDawn Ltd.

  IDG TechNetwork