BABYLONTOOLBARSRV.EXE
Description: Babylon Ltd. Babylon Toolbar 1.4.19.0
MD5= 000A83380536DF86EFE77D020D812F96
File is not signed.
File size= 286720
Related registry changes:
HKLM\SOFTWARE\CLASSES\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}\LOCALSERVER32\: “”C:\PROGRAM FILES\BABYLONTOOLBAR\BABYLONTOOLBAR\1.4.19.5\BABYLONTOOLBARSRV.EXE“”
HKLM\SOFTWARE\CLASSES\TYPELIB\{6E8BF012-2C85-4834-B10A-1B31AF173D70}\1.0\0\WIN32\: “C:\PROGRAM FILES\BABYLONTOOLBAR\BABYLONTOOLBAR\1.4.19.5\BABYLONTOOLBARSRV.EXE\2″
HKLM\SOFTWARE\CLASSES\TYPELIB\{AD25754E-D76C-42B3-A335-2F81478B722F}\1.0\0\WIN32\: “C:\PROGRAM FILES\BABYLONTOOLBAR\BABYLONTOOLBAR\1.4.19.5\BABYLONTOOLBARSRV.EXE”
HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\${ELV_GUID}\APPNAME: “BABYLONTOOLBARSRV.EXE”
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\BABYLONTOOLBAR: “”C:\PROGRAM FILES\BABYLONTOOLBAR\BABYLONTOOLBAR\1.4.19.5\BABYLONTOOLBARSRV.EXE” /MD I”

BABYLONTOOLBAR.DLL
Description: Babylon BHO Babylon Toolbar 1.4.19.0
MD5= 91BCFFE9095DFE033125ADD31EE7FFC1
File is signed and the signature was verified.
File size= 225720
Related registry changes:
HKLM\SOFTWARE\CLASSES\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}\INPROCSERVER32\: “C:\PROGRAM FILES\BABYLONTOOLBAR\BABYLONTOOLBAR\1.4.19.5\BH\BABYLONTOOLBAR.DLL”
HKLM\SOFTWARE\CLASSES\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}\INPROCSERVER32\: “C:\PROGRAM FILES\BABYLONTOOLBAR\BABYLONTOOLBAR\1.4.19.5\BH\BABYLONTOOLBAR.DLL”
HKLM\SOFTWARE\CLASSES\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}\INPROCSERVER32\: “C:\PROGRAM FILES\BABYLONTOOLBAR\BABYLONTOOLBAR\1.4.19.5\BH\BABYLONTOOLBAR.DLL”
HKLM\SOFTWARE\CLASSES\TYPELIB\{09C554C3-109B-483C-A06B-F14172F1A947}\1.0\0\WIN32\: “C:\PROGRAM FILES\BABYLONTOOLBAR\BABYLONTOOLBAR\1.4.19.5\BH\BABYLONTOOLBAR.DLL“

BABYLONTOOLBARTLBR.DLL
Description: Babylon Ltd. Babylon Toolbar 1.4.19.0
MD5= CF158FAC1864EE97BFE3221285FEC23A
File is signed and the signature was verified.
File size= 184760
Related registry changes:
HKLM\SOFTWARE\CLASSES\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}\INPROCSERVER32\: “C:\PROGRAM FILES\BABYLONTOOLBAR\BABYLONTOOLBAR\1.4.19.5\BABYLONTOOLBARTLBR.DLL”
HKLM\SOFTWARE\CLASSES\TYPELIB\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}\1.0\0\WIN32\: “C:\PROGRAM FILES\BABYLONTOOLBAR\BABYLONTOOLBAR\1.4.19.5\BABYLONTOOLBARTLBR.DLL“

C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\MICROSOFT\PROTECT\S-1-5-21-1659004503-1708537768-1801674531-500\776EFF99-1636-4499-9006-FBB8E6166356
C:\PROGRAM FILES\BABYLONTOOLBAR\BABYLONTOOLBAR\1.4.19.5\BABYLONTOOLBARAPP.DLL
C:\PROGRAM FILES\BABYLONTOOLBAR\BABYLONTOOLBAR\1.4.19.5\BABYLONTOOLBARENG.DLL
C:\PROGRAM FILES\BABYLONTOOLBAR\BABYLONTOOLBAR\1.4.19.5\BABYLONTOOLBARSRV.EXE
C:\PROGRAM FILES\BABYLONTOOLBAR\BABYLONTOOLBAR\1.4.19.5\BABYLONTOOLBARTLBR.DLL
C:\PROGRAM FILES\BABYLONTOOLBAR\BABYLONTOOLBAR\1.4.19.5\BH\BABYLONTOOLBAR.DLL
C:\PROGRAM FILES\BABYLONTOOLBAR\BABYLONTOOLBAR\1.4.19.5\UNINSTALL.EXE

C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\MICROSOFT\PROTECT\S-1-5-21-1659004503-1708537768-1801674531-500\PREFERRED
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\FEEDS CACHE\INDEX.DAT
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS MEDIA\11.0\WMSDKNS.XML
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\CE4CF87733651BF1F44DD1E02FC1A8E8
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\NGEN_SERVICE.LOG

C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\BABYLONTOOLBAR
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\BABYLONTOOLBAR\BABYLONTOOLBAR
C:\PROGRAM FILES\BABYLONTOOLBAR
C:\PROGRAM FILES\BABYLONTOOLBAR\BABYLONTOOLBAR
C:\PROGRAM FILES\BABYLONTOOLBAR\BABYLONTOOLBAR\1.4.19.5
C:\PROGRAM FILES\BABYLONTOOLBAR\BABYLONTOOLBAR\1.4.19.5\BH