Threat Database Browser Hijackers Babylon Search/Toolbar

Babylon Search/Toolbar

By CagedTech in Browser Hijackers

Threat Scorecard

Popularity Rank: 965
Threat Level: 50 % (Medium)
Infected Computers: 282,511
First Seen: October 6, 2010
Last Seen: February 6, 2026
OS(es) Affected: Windows

Aliases

2 security vendors flagged this file as malicious.

Antivirus Vendor Detection
CAT-QuickHeal (Suspicious) - DNAScan
NOD32 probably a variant of Win32/Toolbar.Babylon

SpyHunter Detects & Remove Babylon Search/Toolbar

File System Details

Babylon Search/Toolbar may create the following file(s):
# File Name MD5 Detections
1. ~BabylonToolbarsrv.exe daa8044dbeb1ed22add5b849b325c41b 2,266
2. Babylon.exe 5c1ba00a9384b30addea45890814ed2a 2,206
3. Setup.exe 66b95612ec087ab7840b3c3b707210b6 2,164
4. A0028596.exe 000a83380536df86efe77d020d812f96 2,047
5. A0005709.exe fd168568d2e6237d9518c1f7c6ba54b5 2,030
6. A0005705.dll 6fa16e1d6e2bd1dcd1186f38fe47cdac 2,025
7. ~BabylonToolbar.dll ddfa1fc5db7adc0c8fa137047e1432eb 1,941
8. BabylonToolbar.dll.vir 15649e30f8fc5cf90d2469a48429ca01 1,780
9. MyBabylonTB.exe ac3129819faa20a776239f48e57d2b35 1,454
10. NTRedirect.dll a934ff2a498261ba8c18a7a5ce06cb05 952
11. BabylonToolbar.exe ddee6f5527ddd4a8b3e143c1f340eace 838
12. BabMaint.exe.vir e7831e33c81eb10a8f7ba3b608383724 556
13. enhancedNT.dll bb829f5bf7b2ac3bb9d21eca9ebf730a 502
14. Updater.exe dea3132c462938caddc91d1fc5857b30 454
15. BabMaint.x 7500b7cdf541616d2d64e83b7f8ec896 189
16. enhancedNT.dll.vir e015a11d6002c3498cd92b2cdff64433 137
17. MSGRRU32.dll 6ca07b1d5b99da831d1a44319734fd7c 85
18. AdSubawareRes.dll 8bc26c11d7a06032158876c5604f1296 40
19. BabMaint.exe 8a036a0c87533284e1a53a54f8a6204e 22
20. cfgNetM.dll 42f9e833a6b2563e2846ab5dbb41a4d4 19
21. AgentBabSolution.exe 5a60826873e342a0f9a1c24ffc2b7a39 6
22. CtrlBabSolution.exe 4664d963f2985799031db2fbfb362989 6
23. StartBabSolution.exe e71f3ae803ef34c7df9bc20450d8799e 6
24. uwauewta.dll 67e32d31f9e7abe4ac7bf1e0038c53df 2
25. wutpcsyu.dll 2b3f62cbaee826a99f115d31230383ce 2
26. frobanue.dll ab23bd030204e97933d4c794a312082d 2
More files

Registry Details

Babylon Search/Toolbar may create the following registry entry or registry entries:
CLSID
{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
{2EECD738-5844-4a99-B4B6-146BF802613B}
{BDB69379-802F-4eaf-B541-F8DE92DD98DB}
Regexp file mask
%APPDATA%\BabMaint.exe
%PROGRAMFILES%\Mozilla Firefox\searchplugins\babylon.xml
%PROGRAMFILES(x86)%\Mozilla Firefox\searchplugins\babylon.xml
SOFTWARE\BabSolution
Software\BabylonToolbar
Software\Microsoft\Internet Explorer\DOMStorage\babylon.com
Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SOFTWARE\Microsoft\Tracing\MyBabylonTB_RASAPI32
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\EPUpdater
Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}
SOFTWARE\Wow6432Node\Babylon
SOFTWARE\Wow6432Node\babylontoolbar
SOFTWARE\Wow6432Node\Microsoft\Tracing\MyBabylonTB_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\MyBabylonTB_RASMANCS
Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}
Run keys
NTRedirect

Directories

Babylon Search/Toolbar may create the following directory or directories:

%APPDATA%\BabSolution
%PROGRAMFILES%\Babylon Toolbar
%PROGRAMFILES%\BabylonToolbar
%PROGRAMFILES(x86)%\Babylon Toolbar
%PROGRAMFILES(x86)%\BabylonToolbar
%TEMP%\mt_ffx\BabylonToolbar
%USERPROFILE%\AppData\LocalLow\BabylonToolbar

URLs

Babylon Search/Toolbar may call the following URLs:

BabylonToolbar
isearch.babylon.com

Trending

Most Viewed

Loading...