Allin1Convert Toolbar

Allin1Convert Toolbar Description

The Allin1Convert Toolbar is a browser hijacker or PUP (Potentially Unwanted Program). The Allin1Convert Toolbar will usually enter a PC after the computer user downloads a freeware application from an unreliable source. These kinds of programs are often bundled with these types of components in order to generate advertisement revenue. Once the Allin1Convert Toolbar is installed, the Allin1Convert Toolbar may change the affected Web browser's homepage to home.tb.ask.com and its default search engine to the Search.tb.ask.com website. These types of changes to your Web browser settings are typical of these types of infections and are designed to boost the traffic to these and other low-quality search engines. The increased traffic translates directly into advertising and affiliate marketing revenue.

The Allin1Convert Toolbar has been associated with pop-up advertisements and links inserted into your online search results. Allin1Convert Toolbar may also collect information about you online searches and activities. This data may be sold to marketers or used to display other advertisements on your computer. Although Allin1Convert Toolbar is not exactly malicious, the Allin1Convert Toolbar has many features that are usually associated with other threats. This is why the Allin1Convert Toolbar and similar browser components are commonly referred to as PUPs.

Typically, the Allin1Convert Toolbar is bundled with freeware software. Common programs used to distribute the Allin1Convert Toolbar include media players, file conversion utilities and download managers. These may include the option to opt out of installing Allin1Convert Toolbar, but computer users may be unaware of its presence. It is also more likely that the Allin1Convert Toolbar will be bundled with software you download from a third party website than from a program obtained directly from the manufacturer.

Technical Information

File System Details

Allin1Convert Toolbar creates the following file(s):
# File Name Size MD5 Detection Count
1 %PROGRAMFILES%\Allin1Convert_8h\bar\1.bin\8hSrchMn.exe 122,608 fd378242d7a4f1022da634df215d5730 5
2 %PROGRAMFILES%\Allin1Convert_8h\bar\1.bin\8hbarsvc.exe 116,232 1f9a501cf85b666570116bb0e8b713b8 5
3 %PROGRAMFILES%\Allin1Convert_8h\bar\1.bin\8hbrmon.exe 30,096 7b4fe991079d3d086b39a37f948f9be7 3
More files

Registry Details

Allin1Convert Toolbar creates the following registry entry or registry entries:
Registry key
SOFTWARE\Allin1Convert
Software\Allin1Convert_8h
Software\AppDataLow\Software\Allin1Convert_8h
Software\Microsoft\Internet Explorer\Approved Extensions\{A4C2FB10-84C3-44EB-9F9E-860FA1D9A797}
Software\Microsoft\Internet Explorer\Approved Extensions\{CD1A63BA-A08C-431B-9A34-F240AADC728D}
Software\Microsoft\Internet Explorer\Approved Extensions\{FBCBC43A-DCA9-4192-A4C8-B57FD0F77D4D}
Software\Microsoft\Internet Explorer\DOMStorage\allin1convert.dl.myway.com
SOFTWARE\Microsoft\Internet Explorer\DOMStorage\allin1convert.dl.tb.ask.com
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{53f6a516-3dcc-48f4-835c-6c670cb39cea}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5e58cda9-3b21-4611-a859-26ee28950e61}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6874fade-02c8-4181-831a-fc7486cf1d74}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6c5561b6-3dd2-46b5-83be-eae744366046}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88e44198-d164-4ec0-b2c0-f679d866c6da}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f671c1b3-9776-426d-a350-55fb2d9b53f7}
SOFTWARE\Microsoft\Internet Explorer\LowRegistry\DOMStorage\allin1convert.dl.myway.com
Software\Microsoft\Internet Explorer\SearchScopes\{75b4241f-171e-44a3-bf44-23613b6e3e03}
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{cd1a63ba-a08c-431b-9a34-f240aadc728d}
SOFTWARE\Microsoft\Tracing\Allin1Convert_RASAPI32
SOFTWARE\Microsoft\Tracing\Allin1Convert_RASMANCS
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{a4c2fb10-84c3-44eb-9f9e-860fa1d9a797}
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d}
SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{27f49273-de3a-4111-90f9-6c474c37aefb}
SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}
SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7EB7381C-FB01-47FC-9C42-ED64122C1B92}
SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{af60f89a-4645-4381-8c7f-b8feab385445}
SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e4ef697f-434b-4dc7-a464-4412462206db}
SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{f9131ea5-c2e2-4bcf-b0f3-b2d7ed6edc76}
SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A4C2FB10-84C3-44EB-9F9E-860FA1D9A797}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CD1A63BA-A08C-431B-9A34-F240AADC728D}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FBCBC43A-DCA9-4192-A4C8-B57FD0F77D4D}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7CAEFAFC-9A1E-4BCC-94DD-BC7D8D52717A}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A4C2FB10-84C3-44EB-9F9E-860FA1D9A797}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CD1A63BA-A08C-431B-9A34-F240AADC728D}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9131EA5-C2E2-4BCF-B0F3-B2D7ED6EDC76}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FBCBC43A-DCA9-4192-A4C8-B57FD0F77D4D}
SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Allin1Convert AppIntegrator 32-bit
SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Allin1Convert Search Scope Monitor
SOFTWARE\MozillaPlugins\@Allin1Convert_8h.com/Plugin
SOFTWARE\Wow6432Node\Allin1Convert_8h
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{53f6a516-3dcc-48f4-835c-6c670cb39cea}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5e58cda9-3b21-4611-a859-26ee28950e61}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6874fade-02c8-4181-831a-fc7486cf1d74}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6c5561b6-3dd2-46b5-83be-eae744366046}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88e44198-d164-4ec0-b2c0-f679d866c6da}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f671c1b3-9776-426d-a350-55fb2d9b53f7}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{75b4241f-171e-44a3-bf44-23613b6e3e03}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{cd1a63ba-a08c-431b-9a34-f240aadc728d}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{a4c2fb10-84c3-44eb-9f9e-860fa1d9a797}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{27f49273-de3a-4111-90f9-6c474c37aefb}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7EB7381C-FB01-47FC-9C42-ED64122C1B92}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{af60f89a-4645-4381-8c7f-b8feab385445}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e4ef697f-434b-4dc7-a464-4412462206db}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{f9131ea5-c2e2-4bcf-b0f3-b2d7ed6edc76}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\Allin1Convert AppIntegrator 32-bit
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\Allin1Convert Search Scope Monitor
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\Allin1Convert_8h Browser Plugin Loader 64
SOFTWARE\Wow6432Node\MozillaPlugins\@Allin1Convert_8h.com/Plugin
SYSTEM\ControlSet001\services\Allin1Convert_8hService
SYSTEM\ControlSet002\services\Allin1Convert_8hService
SYSTEM\CurrentControlSet\services\Allin1Convert_8hService
File name without path
allin1convert.dl.myway[1].xml
allin1convert.dl.tb.ask[1].xml
http_allin1convert.dl.myway.com_0.localstorage
http_allin1convert.dl.myway.com_0.localstorage-journal
http_allin1convert.dl.tb.ask.com_0.localstorage
http_allin1convert.dl.tb.ask.com_0.localstorage-journal
Directory
%LOCALAPPDATA%\Allin1Convert_8h
%LOCALAPPDATA%\Allin1ConvertTooltab
%PROGRAMFILES%\Allin1Convert_8h
%PROGRAMFILES(x86)%\Allin1Convert_8h
%USERPROFILE%\AppData\LocalLow\Allin1Convert_8h
%USERPROFILE%\Application Data\Allin1Convert_8h
Uninstaller
Allin1Convert_8hbar Uninstall Firefox
Allin1Convert_8hbar Uninstall Internet Explorer
Allin1ConvertTooltab Uninstall Internet Explorer
CLSID
{13B534D0-49F9-48A9-A006-B2F92E1D01CB}
{1604fc43-3a1e-4c6b-850d-70c8a858c61a}
{164993F7-4D6D-40A5-8FA1-37A8F96B4700}
{16976E15-10EA-44FD-804A-6ECBC9EBBFC7}
{1B520A16-E83A-48F9-8802-8F485F24A452}
{1CE5ABBD-42D7-4EEE-BBD6-33E76D912ECD}
{1E6170F4-3856-40E4-A2EB-2D8FB46574A4}
{21B4FA2D-3459-44D1-A855-D8BC0378E9D2}
{248b3e95-17a4-482d-a8a8-6b3df4d05c35}
{250b71cd-97ca-40a5-834f-265719a62caf}
{2561FD25-FE31-4E56-A120-AF7FEAAE3124}
{27f49273-de3a-4111-90f9-6c474c37aefb}
{289211A5-2A74-454B-9F1F-FA9A8D9CD6D8}
{2CFC7EED-36BA-4374-8D29-92895D942F6C}
{39d4f1a1-a94d-4b7d-bf1d-7446308800ed}
{3E698E62-9516-4670-AD6C-DC58181BC9F8}
{43E76D04-EB5C-4D74-A11D-7403BAFE540B}
{443321f7-e46c-42f8-812b-f35e98cbb44f}
{45A28B99-6C20-441D-9D4D-F7EC7C701F6C}
{4BD0FCFF-AD64-4315-9F2C-960EF3C21623}
{4CE34BDA-95CD-431D-AA32-0FF7589C0376}
{4E089F3E-F5E1-4759-AF16-E7EBE24CAA9C}
{507C73BB-FC69-425E-8A49-9204F886B328}
{53F6A516-3DCC-48F4-835C-6C670CB39CEA}
{5bcf818d-78c8-41b8-ba89-65c5fdac4fc4}
{5cde4714-32dc-473c-8194-0645e62c2e96}
{5D076356-28C1-43B2-B29B-1AAE8D518E83}
{5D5D5550-534F-4854-B461-3B40D759EA72}
{5E58CDA9-3B21-4611-A859-26EE28950E61}
{5E59E7F3-87E7-4E0E-8B62-7DE9EA685511}
{628BA19D-7BED-4C54-8210-AFE66BB15D06}
{6C5561B6-3DD2-46B5-83BE-EAE744366046}
{6EC57031-1740-4151-93C5-C465D6063DD2}
{76FC1003-0825-48BD-B59B-3B7A5754972C}
{774BFD7A-2CE7-4785-8957-2D62F7F4A83C}
{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}
{7DBE2E95-6739-4DC4-8BD0-687B5F5A856D}
{7EB7381C-FB01-47FC-9C42-ED64122C1B92}
{8077E854-138D-4396-ABB8-44C39E621705}
{889f49d2-6cea-40be-be5f-7217485f9745}
{8f83d657-5993-4ffa-9aee-da0b20d828a7}
{9B79844F-F67F-4024-B41A-633E0D36B60B}
{9D217B94-6FC9-44FE-94B1-30C711871266}
{a4c2fb10-84c3-44eb-9f9e-860fa1d9a797}
{af60f89a-4645-4381-8c7f-b8feab385445}
{B0602473-26E3-425F-A819-D8651D6D83A8}
{B1339BE3-9E4D-49D4-97F2-E4220530F65C}
{B48AC2CD-9662-47E0-A3C0-3B01BB3F463E}
{B992BF10-B9DF-413D-BFBE-0DAED5BF0ABC}
{BB644C1C-BDFC-4390-8BCF-8E864D1859E6}
{BE698E51-830B-447A-954D-901D6E05DDE2}
{BFCF748F-A56E-451F-AA45-0D7EB699E416}
{c8ef8f70-3807-424a-83f7-da06fd4dacf9}
{cd1a63ba-a08c-431b-9a34-f240aadc728d}
{D09139AB-0ACB-4F22-B9AE-816E6838A814}
{D617CF84-B0BC-441F-9984-B676AFBA1E8D}
{DC86010C-7F30-485D-85D4-0957ECA323DD}
{de0f6787-9d1c-42b7-a0b9-eac630f87902}
{e4ef697f-434b-4dc7-a464-4412462206db}
{EA3743AC-948C-4E65-A61F-10EDA13D79CA}
{ef3f28c8-0330-4d18-b901-d24cb83e5aa1}
{ef5db804-585b-472e-b415-bc63f8f01bf6}
{F11B9E79-0F7B-4C8B-B507-F06982497901}
{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}
{f9131ea5-c2e2-4bcf-b0f3-b2d7ed6edc76}
{f99ddd9a-07d0-47ab-86f1-193533dd2c60}
{fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d}

Site Disclaimer

Enigmasoftware.com is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.


HTML is not allowed.