site Search:


 
    All Forums Hot Topics Gallery






how-to block ads


 
Search Topic:
Uniqs:
4598
Share Topic
Posting?
Post a:
Post a:
Links: ·Hijack This logs? ·Panda Free Tools ·Vundo Removal
page: 1 · 2
AuthorAll Replies


antdude
A Ninja Ant
Premium,VIP
join:2001-03-25
United State
kudos:4
Reviews:
·RoadRunner Cable

2 edits

Uninstalling Babylon malware.

I am helping someone remotely who installed a music ripper for his audio CDs, but it came with and installed Babylon. He said it is screwing with his Internet. Norton, Malwarebytes AntiMalware, SuperAntiSpyware, and Spybot S&D did NOT get rid of it. He has Vista.

From what I read, it is just a toolbar search and not really a malware. Am I correct? I am not familiar with this malware.

Thank you in advance.
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer


LoPhatPhuud
Premium,VIP,MVM
join:2002-01-06
Albuquerque, NM
kudos:26
Reviews:
·Comcast

The only Babylon I am familiar with is translation software and it certainly is not malware.

But malware has no conscience about using the same name. My first choice for removal would be MBAM.

From what you stated he ran, it does appears he removed it. Just tell him to keep an eye on the computer for the next week.
--
When angry count four; when very angry, swear.
Microsoft MVP/Consumer Security 2005-2011
Gladiator Security Forum



antdude
A Ninja Ant
Premium,VIP
join:2001-03-25
United State
kudos:4
Reviews:
·RoadRunner Cable

3 edits

said by LoPhatPhuud:

The only Babylon I am familiar with is translation software and it certainly is not malware.

But malware has no conscience about using the same name. My first choice for removal would be MBAM.

From what you stated he ran, it does appears he removed it. Just tell him to keep an eye on the computer for the next week.

Whoops, I missed a key word (NOT) and updated my original post. He said none of them got rid of them. I told him to try »security.symantec.com/nbrt/nbrt.aspx since he has a Norton product installed. Also, he said Facebook doesn't let him log in because of this "malware". He took a screen shot/capture to share: »i.imgur.com/xm1Kr.gif ... He seems to be using Chrome (not familiar with that web browser).


LoPhatPhuud
Premium,VIP,MVM
join:2002-01-06
Albuquerque, NM
kudos:26
Reviews:
·Comcast

1 edit

reply to antdude
If all the security programs fail to detect it, it may be limited to Chrome itself. I would, however, expect some registry entries to be present and should be detectavble.

1. Check with the Toolbar manufacturer for instructions on removing.

2. Uninstall the ripper program, then Chrome itself. Reboot and re-install Chrome.

3. Flatten and repave (and take it as a lesson learned)



LoPhatPhuud
Premium,VIP,MVM
join:2002-01-06
Albuquerque, NM
kudos:26
Reviews:
·Comcast

reply to antdude
Progress!! I found a removal post!@

»www.raymond.cc/blog/babylon-tool···removal/

No guarantee's but it 's worth a try.

PS: Google for babylon adware That will return a lot of entries, including the one above.



antdude
A Ninja Ant
Premium,VIP
join:2001-03-25
United State
kudos:4
Reviews:
·RoadRunner Cable

1 edit

said by LoPhatPhuud:

Progress!! I found a removal post!@

»www.raymond.cc/blog/babylon-tool···removal/

No guarantee's but it 's worth a try.

PS: Google for babylon adware That will return a lot of entries, including the one above.

I will send him this link and this thread to him. I hope he can handle all that technical stuff. Is there not a GUI automated tool?
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer


skj
Welcome to the far side of reality
Premium,Mod
join:2002-04-04
Gone South
Host:
Charter Internet/TV
Earthlink DSL
CenturyLink
ISP b2b etc
Cisco

reply to antdude
Coincidentally, a relative of mine called me yesterday because the Babylon malware had hijacked her Chrome browser. She tried Spybot, which identified the malware, but did not remove it. I was going to have her try the steps mentioned in the article: »www.raymond.cc/blog/babylon-tool···removal/, as it would pertain to the Chrome browser.
--


Reality is the leading cause of stress among those who are in touch with it.--Jane Wagner



LoPhatPhuud
Premium,VIP,MVM
join:2002-01-06
Albuquerque, NM
kudos:26

reply to antdude
That one seems to be going around. Time to check for other solutions although that one is thorough.



Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
kudos:7

1 edit

Click for full size
Interesting...On wife's win7 with the IE9 saw this the other day when searching in the address bar... home page just happens to be google so don't let that throw you off. Did not investigate it yet.
Update:
people are talking about this one here

»answers.microsoft.com/en-us/ie/f···99b31bf5

I will try to find out how/where she got it.

My first guess would be from a gadget

»Microsoft Recommends Terminating Gadgets


Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
kudos:7

reply to antdude

It appears that is babylon is an affiliate thing where people or companies can make commission on clicks for ads.

some have complained that " it brings up this when I hit new tab search.babylon.com/?affID=1125­55&tt=010712_4&babsrc=NT_ss&mn­trId=409e79f500000000000000266­c8efc7d
CptTaco1

and that is the affiliate ID for someone making $$$ for a user.

Seems people that have IE, Firefox..and a few other browsers are getting whacked with this one..but not seen any with Google Chrome yet.
--
Gladiator Security Forum
»www.gladiator-antivirus.com/


LoPhatPhuud
Premium,VIP,MVM
join:2002-01-06
Albuquerque, NM
kudos:26

reply to antdude
Thanks for the link(s) NameGame!!.

ps: ObiJuan thanks you too.



Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
kudos:7

Here is a video for ObiJuan on putting babyJuan for Chrome to sleep.

»www.youtube.com/watch?v=OfwH8xii···e=relmfu


This one is for the udder bouys

ht tp://www.youtube.com/watch?v=O-zNCtXQ7A0&feature=related
--
Gladiator Security Forum
»www.gladiator-antivirus.com/


Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
kudos:7

reply to LoPhatPhuud

said by LoPhatPhuud:

Thanks for the link(s) NameGame!!.

ps: ObiJuan thanks you too.



welcome..maybe that stuff will help you and antdude find all the piece of this mud pie and put together a better way of cleaning up the mess... good luck guys and have a nice Sunday.
--
Gladiator Security Forum
»www.gladiator-antivirus.com/


skj
Welcome to the far side of reality
Premium,Mod
join:2002-04-04
Gone South
Host:
Charter Internet/TV
Earthlink DSL
CenturyLink
ISP b2b etc
Cisco

reply to Name Game

said by Name Game:

It appears that is babylon is an affiliate thing where people or companies can make commission on clicks for ads.

some have complained that " it brings up this when I hit new tab search.babylon.com/?affID=1125�55&tt=010712_4&babsrc=NT_ss&mn�trId=409e79f500000000000000266�c8efc7d
CptTaco1

and that is the affiliate ID for someone making $$$ for a user.

Seems people that have IE, Firefox..and a few other browsers are getting whacked with this one..but not seen any with Google Chrome yet.

It is getting into Chrome too. As I mentioned above, »Re: Uninstalling Babylon malware.
--


Reality is the leading cause of stress among those who are in touch with it.--Jane Wagner


Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
kudos:7

Yes..that is why posted this video »Re: Uninstalling Babylon malware.



antdude
A Ninja Ant
Premium,VIP
join:2001-03-25
United State
kudos:4
Reviews:
·RoadRunner Cable

reply to Name Game

said by Name Game:

Here is a video for ObiJuan on putting babyJuan for Chrome to sleep.

(youtube clip)
one is for the udder bouys

ht tp://www.youtube.com/watch?v=O-zNCtXQ7A0&feature=related

Wow, long video! Thanks. I will pass this to my friend who has this problem.
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer


skj
Welcome to the far side of reality
Premium,Mod
join:2002-04-04
Gone South
Host:
Charter Internet/TV
Earthlink DSL
CenturyLink
ISP b2b etc
Cisco

reply to Name Game
Watched the video and went through it with a friend. It appears it is gone, but that is one bit of a stubborn piece of malware.
--


Reality is the leading cause of stress among those who are in touch with it.--Jane Wagner



antdude
A Ninja Ant
Premium,VIP
join:2001-03-25
United State
kudos:4
Reviews:
·RoadRunner Cable

2 edits

reply to antdude

Done?

My friend followed up with this reply "... I cleared my cache and cookies and the problem went away. I thought about that since I was getting the error in chrome on facebook and not in IE. Malware pisses me off... I piss myself off when I download that crap!"

Now, he doesn't have the problems anymore. I hope so! And eww for "piss". LOL!


skj
Welcome to the far side of reality
Premium,Mod
join:2002-04-04
Gone South

That's great.

I wonder why the AV programs don't catch this?



antdude
A Ninja Ant
Premium,VIP
join:2001-03-25
United State
kudos:4
Reviews:
·RoadRunner Cable

said by skj:

That's great.

I wonder why the AV programs don't catch this?

Maybe it is not really a malware?

Saturday, 25-May 17:13:45 Terms of Use & Privacy | feedback | contact | Hosting by nac.net - DSL,Hosting & Co-lo
over 13.5 years online © 1999-2013 dslreports.com.
Most commented news this week
Hot Topics