{"id":5165,"date":"2012-06-16T08:22:19","date_gmt":"2012-06-16T05:22:19","guid":{"rendered":"http:\/\/regrunreanimator.com\/research\/?p=5165"},"modified":"2012-06-16T08:22:19","modified_gmt":"2012-06-16T05:22:19","slug":"socialsay","status":"publish","type":"post","link":"https:\/\/regrunreanimator.com\/research\/browser-extensions\/socialsay\/socialsay.htm","title":{"rendered":"SocialSay"},"content":{"rendered":"

SocialSay<\/h1>\n

http:\/\/www.socialsay.me\/index.html<\/a><\/p>\n

Express Your Social Self
\nMake your facebook status and comments funny and smart!
\nAdd smileys and funny sentences with a click!
\nShare your smart statuses with your friends!<\/p>\n

This software does not change the Windows boot time.<\/strong><\/p>\n

\"\"<\/a><\/p>\n

BABYLONTOOLBAR.DLL<\/strong>
\nDescription: Babylon BHO Babylon Toolbar 1.4.35.0<\/strong>
\nMD5= C471B1EEF9DF1C55B5261006CE04E11F<\/strong>
\nFile is signed<\/strong> and the signature was verified<\/strong>.
\nFile size= 270960<\/strong>
\nRelated registry changes:<\/strong>
\nHKLM\\SOFTWARE\\CLASSES\\CLSID\\{2EECD738-5844-4A99-B4B6-146BF802613B}\\INPROCSERVER32\\: “%PROGRAM FILES%\\BABYLONTOOLBAR\\BABYLONTOOLBAR\\1.5.3.17\\BH\\BABYLONTOOLBAR.DLL<\/strong>”
\nHKLM\\SOFTWARE\\CLASSES\\CLSID\\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}\\INPROCSERVER32\\: “%PROGRAM FILES%\\BABYLONTOOLBAR\\BABYLONTOOLBAR\\1.5.3.17\\BH\\BABYLONTOOLBAR.DLL<\/strong>”
\nHKLM\\SOFTWARE\\CLASSES\\CLSID\\{E46C8196-B634-44A1-AF6E-957C64278AB1}\\INPROCSERVER32\\: “%PROGRAM FILES%\\BABYLONTOOLBAR\\BABYLONTOOLBAR\\1.5.3.17\\BH\\BABYLONTOOLBAR.DLL<\/strong>“<\/div>\n
EXTENSION32.DLL<\/strong>
\nDescription: 2.0.0.410<\/strong>
\nMD5= 79A10EBC95CCFB58D8BAFDC98F0218C6<\/strong>
\nFile is not signed<\/strong>.
\nFile size= 138240<\/strong>
\nRelated registry changes:<\/strong>
\nHKLM\\SOFTWARE\\CLASSES\\CLSID\\{A6629839-6636-4998-95D6-2B0F52141861}\\INPROCSERVER32\\: “%PROGRAM FILES%\\EXPRESSO\\EXTENSION32.DLL<\/strong>”
\nHKLM\\SOFTWARE\\CLASSES\\TYPELIB\\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}\\1.0\\0\\WIN32\\: “%PROGRAM FILES%\\EXPRESSO\\EXTENSION32.DLL<\/strong>“<\/div>\n
BABYLONTOOLBARTLBR.DLL<\/strong>
\nDescription: Babylon Ltd. Babylon Toolbar 1.4.35.0<\/strong>
\nMD5= 034C197E79D7233BD04BFAC1710CB988<\/strong>
\nFile is signed<\/strong> and the signature was verified<\/strong>.
\nFile size= 237680<\/strong>
\nRelated registry changes:<\/strong>
\nHKLM\\SOFTWARE\\CLASSES\\CLSID\\{98889811-442D-49DD-99D7-DC866BE87DBC}\\INPROCSERVER32\\: “%PROGRAM FILES%\\BABYLONTOOLBAR\\BABYLONTOOLBAR\\1.5.3.17\\BABYLONTOOLBARTLBR.DLL<\/strong>”
\nHKLM\\SOFTWARE\\CLASSES\\TYPELIB\\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}\\1.0\\0\\WIN32\\: “%PROGRAM FILES%\\BABYLONTOOLBAR\\BABYLONTOOLBAR\\1.5.3.17\\BABYLONTOOLBARTLBR.DLL<\/strong>“<\/div>\n
EXTENSIONUPDATERSERVICE.EXE<\/strong>
\nDescription: Service Expresso Updater Start Type: loaded automatically by Server Manager<\/strong>
\nMD5= 9B1657512D4487EA648252441F1699C5<\/strong>
\nFile is not signed<\/strong>.
\nFile size= 183296<\/strong>
\nRelated registry changes:<\/strong>
\nHKLM\\SYSTEM\\CURRENTCONTROLSET\\SERVICES\\EXPRESSO UPDATER\\IMAGEPATH: “%PROGRAM FILES%\\EXPRESSO\\EXTENSIONUPDATERSERVICE.EXE<\/strong>“<\/div>\n

<\/p>\n

Modified during installation:<\/strong><\/div>\n

~+ [INTERNET EXPLORER] [CURRENT HOME PAGE] :HKCU START PAGE=HTTP:\/\/SEARCH.BABYLON.COM\/?AF=100815&BABSRC=HP_SS&MNTRID=0F1467FE000000000000000C2982064B
\n~- [INTERNET EXPLORER] [CURRENT HOME PAGE] :HKCU START PAGE=HTTP:\/\/WWW.GOOGLE.COM\/
\n~+ [INTERNET EXPLORER] [ABOUTURLS] :HKLM TABS=HTTP:\/\/SEARCH.BABYLON.COM\/?AF=100815&BABSRC=NT_SS&MNTRID=0F1467FE000000000000000C2982064B
\n~- [INTERNET EXPLORER] [ABOUTURLS] :HKLM TABS=RES:\/\/IEFRAME.DLL\/TABSWELCOME.HTM<\/p>\n

<\/div>\n

FILES ADDED:154<\/strong><\/p>\n

%APPDATA%\\MACROMEDIA\\FLASH PLAYER\\#SHAREDOBJECTS\\DX3TJUNF\\D13QXIF00WCUFP.CLOUDFRONT.NET\\ITEMS\\E6A00\\STORAGE.SWF\\GPL.SOL
\n%APPDATA%\\MACROMEDIA\\FLASH PLAYER\\MACROMEDIA.COM\\SUPPORT\\FLASHPLAYER\\SYS\\#D13QXIF00WCUFP.CLOUDFRONT.NET\\SETTINGS.SOL
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\BOOKMARKBACKUPS\\BOOKMARKS-2012-06-16.JSON
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\ADDONS.SQLITE
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\DOWNLOADS.SQLITE
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CHROME.MANIFEST
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\COMPONENTS\\ACPLUS-AUTOCOMPLETE.JS
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\BABYLON.CSS
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\BABYLON.XUL
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\ARWDWN.GIF
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\BBYLN.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\AE.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\BG.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\CH.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\CN.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\CZ.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\DE.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\EG.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\EN.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\ES.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\FR.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\GR.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\HE.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\IL.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\IT.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\JA.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\JP.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\NL.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\NO.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\PL.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\PT.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\RO.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\RU.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\SA.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\SE.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\SV.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\THUMBS.DB
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\TR.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\UA.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS\\US.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\HELP_16.GIF
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\HOME.GIF
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\LOGO.PNG
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\PRIVECY_16_HOT.GIF
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\TELLAFRIEND.GIF
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\VSSVER.SCC
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\MTSTART.JS
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\SERVER.JS
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\TMPLT.JS
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\DEFAULTS\\PREFERENCES\\INSTLPREF.JS
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\INSTALL.RDF
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULTEXTENSIONS.INI
\n%APPDATA%\\BABYLON\\LOG_FILE.TXT
\n%LOCAL APPDATA%\\MICROSOFT\\INTERNET EXPLORER\\RECOVERY\\LAST ACTIVE\\{E5EB9ACE-B770-11E1-BBE7-000C2982064B}.DAT
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\CACHE\\0\\9E\\BD0E5D01
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\CACHE\\1\\51\\C8311D01
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\CACHE\\5\\83\\E422AD01
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\CACHE\\9\\17\\DAD6BD01
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\CACHE\\9\\6E\\551F9D01
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\CACHE\\B\\E2\\919E5D01
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\CACHE\\D\\2E\\3473BD01
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\CACHE\\F\\54\\E76A4D01
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\BAB033.TBINST.DAT
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\BAB091.NORECOVERICON.DAT
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\BABYLON.DAT
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\BEXTERNAL-9.0.3.34.ZPB
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\BEXTERNAL.DLL<\/strong>
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\HTMLSCREENS\\CMBX.PNG
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\HTMLSCREENS\\COMMON.JS
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\HTMLSCREENS\\EULA.HTML
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\HTMLSCREENS\\LNGS.PNG
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\HTMLSCREENS\\PAGE1.CSS
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\HTMLSCREENS\\PAGE1.HTML
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\HTMLSCREENS\\PAGE1.JS
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\HTMLSCREENS\\PAGE1LRG.CSS
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\HTMLSCREENS\\PAGE2.CSS
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\HTMLSCREENS\\PAGE2.HTML
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\HTMLSCREENS\\PAGE2.JS
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\HTMLSCREENS\\PAGE2LRG.CSS
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\HTMLSCREENS\\PAGE9.HTML
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\HTMLSCREENS\\PBAR.GIF
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\HTMLSCREENS\\TITLE1.PNG
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\HTMLSCREENS\\TITLE2.PNG
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\HTMLSCREENS\\TOOLBAR.JPG
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\HTMLSCREENS\\VICN.PNG
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\IECOOKIELOW.DLL<\/strong>
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\SETUP-TBMNTR903-9.0.3.34.ZPB
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\SETUP.EXE<\/strong>
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\SETUPSTRINGS.DAT
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\SQLITE3.DLL<\/strong>
\n%TEMP%\\1.TMP
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\BAB033.TBINST.DAT
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\BAB091.NORECOVERICON.DAT
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\BABYLON.DAT
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\BABYLONTB.XPI
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\BEXTERNAL-9.0.3.34.ZPB
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\BEXTERNAL.DLL<\/strong>
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\HTMLSCREENS\\CMBX.PNG
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\HTMLSCREENS\\COMMON.JS
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\HTMLSCREENS\\EULA.HTML
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\HTMLSCREENS\\LNGS.PNG
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\HTMLSCREENS\\PAGE1.CSS
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\HTMLSCREENS\\PAGE1.HTML
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\HTMLSCREENS\\PAGE1.JS
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\HTMLSCREENS\\PAGE1LRG.CSS
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\HTMLSCREENS\\PAGE2.CSS
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\HTMLSCREENS\\PAGE2.HTML
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\HTMLSCREENS\\PAGE2.JS
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\HTMLSCREENS\\PAGE2LRG.CSS
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\HTMLSCREENS\\PAGE9.HTML
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\HTMLSCREENS\\PBAR.GIF
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\HTMLSCREENS\\TITLE1.PNG
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\HTMLSCREENS\\TITLE2.PNG
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\HTMLSCREENS\\TOOLBAR.JPG
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\HTMLSCREENS\\VICN.PNG
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\IECOOKIELOW.DLL<\/strong>
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\MYBABYLONTB.EXE<\/strong>
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\SETUP-TBMNTR903-9.0.3.34.ZPB
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\SETUP.EXE<\/strong>
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\SETUPSTRINGS.DAT
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\SQLITE3.DLL<\/strong>
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\TBCONFIG.INF
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\WELCOME.HTML
\n%TEMP%\\BABYLONTOOLBAR\\BABYLONTOOLBAR\\1.5.3.17\\BABYLONTOOLBAR4FFX.EXE<\/strong>
\n%TEMP%\\BABYLONTOOLBAR\\BABYLONTOOLBAR\\1.5.3.17\\BABYLONTOOLBAR4IE.EXE<\/strong>
\nC:\\DOCUMENTS AND SETTINGS\\LOCALSERVICE\\LOCAL SETTINGS\\TEMPORARY INTERNET FILES\\CONTENT.IE5\\LUIIOHEM\\DESKTOP.INI
\nC:\\DOCUMENTS AND SETTINGS\\LOCALSERVICE\\LOCAL SETTINGS\\TEMPORARY INTERNET FILES\\CONTENT.IE5\\LUIIOHEM\\VERSION[1].TXT
\nC:\\DOCUMENTS AND SETTINGS\\LOCALSERVICE\\IETLDCACHE\\INDEX.DAT
\n%PROGRAM FILES%\\MOZILLA FIREFOX\\SEARCHPLUGINS\\BABYLON.XML
\n%PROGRAM FILES%\\MOZILLA FIREFOX\\USER.JS
\n%PROGRAM FILES%\\BABYLONTOOLBAR\\BABYLONTOOLBAR\\1.5.3.17\\BABYLONTOOLBARAPP.DLL<\/strong>
\n%PROGRAM FILES%\\BABYLONTOOLBAR\\BABYLONTOOLBAR\\1.5.3.17\\BABYLONTOOLBARENG.DLL<\/strong>
\n%PROGRAM FILES%\\BABYLONTOOLBAR\\BABYLONTOOLBAR\\1.5.3.17\\BABYLONTOOLBARSRV.EXE<\/strong>
\n%PROGRAM FILES%\\BABYLONTOOLBAR\\BABYLONTOOLBAR\\1.5.3.17\\BABYLONTOOLBARTLBR.DLL<\/strong>
\n%PROGRAM FILES%\\BABYLONTOOLBAR\\BABYLONTOOLBAR\\1.5.3.17\\BH\\BABYLONTOOLBAR.DLL<\/strong>
\n%PROGRAM FILES%\\BABYLONTOOLBAR\\BABYLONTOOLBAR\\1.5.3.17\\UNINSTALL.EXE<\/strong>
\n%PROGRAM FILES%\\EXPRESSO\\EXTENSION32.DLL<\/strong>
\n%PROGRAM FILES%\\EXPRESSO\\EXTENSIONUPDATERSERVICE.EXE<\/strong>
\n%PROGRAM FILES%\\EXPRESSO\\FIREFOX\\CHROME\\CONTENT\\LIBRARIES\\DATAEXCHANGESCRIPT.JS
\n%PROGRAM FILES%\\EXPRESSO\\FIREFOX\\CHROME\\CONTENT\\MAIN.JS
\n%PROGRAM FILES%\\EXPRESSO\\FIREFOX\\CHROME\\CONTENT\\MAIN.XUL
\n%PROGRAM FILES%\\EXPRESSO\\FIREFOX\\CHROME\\CONTENT\\RESOURCES\\LOCALSCRIPT.JS
\n%PROGRAM FILES%\\EXPRESSO\\FIREFOX\\CHROME\\LOCALE\\EN-US\\OVERLAY.DTD
\n%PROGRAM FILES%\\EXPRESSO\\FIREFOX\\CHROME\\SKIN\\OVERLAY.CSS
\n%PROGRAM FILES%\\EXPRESSO\\FIREFOX\\CHROME.MANIFEST
\n%PROGRAM FILES%\\EXPRESSO\\FIREFOX\\DEFAULTS\\PREFERENCES\\DEFAULTS.JS
\n%PROGRAM FILES%\\EXPRESSO\\FIREFOX\\INSTALL.RDF
\n%PROGRAM FILES%\\EXPRESSO\\INSTALLERHELPER.DLL<\/strong>
\n%PROGRAM FILES%\\EXPRESSO\\LIBRARIES\\DATAEXCHANGESCRIPT.JS
\n%PROGRAM FILES%\\EXPRESSO\\RESOURCES\\LOCALSCRIPT.JS
\n%PROGRAM FILES%\\EXPRESSO\\SOURCE.CRX
\n%PROGRAM FILES%\\EXPRESSO\\UNINS000.DAT
\n%PROGRAM FILES%\\EXPRESSO\\UNINS000.EXE<\/strong>
\nC:\\USER.JS<\/div>\n
<\/div>\n

FILES DELETED:1<\/strong><\/p>\n

%LOCAL APPDATA%\\MICROSOFT\\INTERNET EXPLORER\\RECOVERY\\LAST ACTIVE\\{ED4A9D08-AFD1-11E1-BBE5-000C2982064B}.DAT<\/div>\n
<\/div>\n

FILES[ATTR]MODIFIED:41<\/strong><\/p>\n

%APPDATA%\\MACROMEDIA\\FLASH PLAYER\\MACROMEDIA.COM\\SUPPORT\\FLASHPLAYER\\SYS\\SETTINGS.SOL
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\CERT8.DB
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\COMPATIBILITY.INI
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\COOKIES.SQLITE
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS.INI
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS.SQLITE
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\KEY3.DB
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\LOCALSTORE.RDF
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\PERMISSIONS.SQLITE
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\PLACES.SQLITE
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\PREFS.JS
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\SEARCH.JSON
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\SEARCH.SQLITE
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\SESSIONSTORE.BAK
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\SESSIONSTORE.JS
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\URLCLASSIFIERKEY3.TXT
\n%PROFILE%\\IECOMPATCACHE\\INDEX.DAT
\n%PROFILE%\\IETLDCACHE\\INDEX.DAT
\n%LOCAL APPDATA%\\GOOGLE\\CHROME\\USER DATA\\DEFAULT\\COOKIES
\n%LOCAL APPDATA%\\GOOGLE\\CHROME\\USER DATA\\DEFAULT\\PREFERENCES
\n%LOCAL APPDATA%\\GOOGLE\\CHROME\\USER DATA\\DEFAULT\\WEB DATA
\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS\\FEEDSSTORE.FEEDSDB-MS
\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS\\MICROSOFT FEEDS~\\MICROSOFT AT HOME~.FEED-MS
\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS\\MICROSOFT FEEDS~\\MICROSOFT AT WORK~.FEED-MS
\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\INTERNET EXPLORER SUGGESTED SITES~.FEED-MS
\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WEBSLICES~\\WEB SLICE GALLERY~.FEED-MS
\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS CACHE\\INDEX.DAT
\n%LOCAL APPDATA%\\MICROSOFT\\INTERNET EXPLORER\\RECOVERY\\LAST ACTIVE\\RECOVERYSTORE.{EB98B106-AFD1-11E1-BBE5-000C2982064B}.DAT
\n%LOCAL APPDATA%\\MICROSOFT\\WINDOWS\\USRCLASS.DAT
\n%LOCAL APPDATA%\\MICROSOFT\\WINDOWS MEDIA\\11.0\\WMSDKNS.XML
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\CACHE\\_CACHE_001_
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\CACHE\\_CACHE_002_
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\CACHE\\_CACHE_003_
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\CACHE\\_CACHE_MAP_
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\STARTUPCACHE\\STARTUPCACHE.4.LITTLE
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\URLCLASSIFIER.PSET
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\URLCLASSIFIER3.SQLITE
\n%TEMP%\\CE4CF87733651BF1F44DD1E02FC1A8E8
\n%PROFILE%\\PRIVACIE\\INDEX.DAT
\n%SYSDIR%\\MACROMED\\FLASH\\FLASHINSTALL.LOG
\n%WinDir%\\TASKS\\USER_FEED_SYNCHRONIZATION-{600E3BA8-8EF5-4554-94FE-DB90950D3DEB}.JOB<\/div>\n
<\/div>\n

FOLDERS ADDED:53<\/strong><\/p>\n

%APPDATA%\\MACROMEDIA\\FLASH PLAYER\\#SHAREDOBJECTS\\DX3TJUNF\\D13QXIF00WCUFP.CLOUDFRONT.NET
\n%APPDATA%\\MACROMEDIA\\FLASH PLAYER\\#SHAREDOBJECTS\\DX3TJUNF\\D13QXIF00WCUFP.CLOUDFRONT.NET\\ITEMS
\n%APPDATA%\\MACROMEDIA\\FLASH PLAYER\\#SHAREDOBJECTS\\DX3TJUNF\\D13QXIF00WCUFP.CLOUDFRONT.NET\\ITEMS\\E6A00
\n%APPDATA%\\MACROMEDIA\\FLASH PLAYER\\#SHAREDOBJECTS\\DX3TJUNF\\D13QXIF00WCUFP.CLOUDFRONT.NET\\ITEMS\\E6A00\\STORAGE.SWF
\n%APPDATA%\\MACROMEDIA\\FLASH PLAYER\\MACROMEDIA.COM\\SUPPORT\\FLASHPLAYER\\SYS\\#D13QXIF00WCUFP.CLOUDFRONT.NET
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\COMPONENTS
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\CONTENT\\IMGS\\FLGS
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\DEFAULTS
\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\FFXTLBR@BABYLON.COM\\DEFAULTS\\PREFERENCES
\n%APPDATA%\\BABYLON
\n%APPDATA%\\BABYLONTOOLBAR
\n%APPDATA%\\BABYLONTOOLBAR\\BABYLONTOOLBAR
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\CACHE\\0\\9E
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\CACHE\\1\\51
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\CACHE\\5\\83
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\CACHE\\9\\17
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\CACHE\\9\\6E
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\CACHE\\B\\E2
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\CACHE\\D\\2E
\n%LOCAL APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\CACHE\\F\\54
\n%LOCAL APPDATA%\\BABYLON
\n%LOCAL APPDATA%\\BABYLON\\SETUP
\n%LOCAL APPDATA%\\BABYLON\\SETUP\\HTMLSCREENS
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7
\n%TEMP%\\71CD6811-BAB0-7891-98FC-F0A890F8FED7\\HTMLSCREENS
\n%TEMP%\\BABYLONTOOLBAR
\n%TEMP%\\BABYLONTOOLBAR\\BABYLONTOOLBAR
\n%TEMP%\\BABYLONTOOLBAR\\BABYLONTOOLBAR\\1.5.3.17
\n%COMMON APPDATA%\\BABYLON
\nC:\\DOCUMENTS AND SETTINGS\\LOCALSERVICE\\LOCAL SETTINGS\\TEMPORARY INTERNET FILES\\CONTENT.IE5\\LUIIOHEM
\nC:\\DOCUMENTS AND SETTINGS\\LOCALSERVICE\\IETLDCACHE
\n%PROGRAM FILES%\\MOZILLA FIREFOX\\EXTENSIONS\\FFXTLBR@BABYLON.COM
\n%PROGRAM FILES%\\BABYLONTOOLBAR
\n%PROGRAM FILES%\\BABYLONTOOLBAR\\BABYLONTOOLBAR
\n%PROGRAM FILES%\\BABYLONTOOLBAR\\BABYLONTOOLBAR\\1.5.3.17
\n%PROGRAM FILES%\\BABYLONTOOLBAR\\BABYLONTOOLBAR\\1.5.3.17\\BH
\n%PROGRAM FILES%\\EXPRESSO
\n%PROGRAM FILES%\\EXPRESSO\\FIREFOX
\n%PROGRAM FILES%\\EXPRESSO\\FIREFOX\\CHROME
\n%PROGRAM FILES%\\EXPRESSO\\FIREFOX\\CHROME\\CONTENT
\n%PROGRAM FILES%\\EXPRESSO\\FIREFOX\\CHROME\\CONTENT\\LIBRARIES
\n%PROGRAM FILES%\\EXPRESSO\\FIREFOX\\CHROME\\CONTENT\\RESOURCES
\n%PROGRAM FILES%\\EXPRESSO\\FIREFOX\\CHROME\\LOCALE
\n%PROGRAM FILES%\\EXPRESSO\\FIREFOX\\CHROME\\LOCALE\\EN-US
\n%PROGRAM FILES%\\EXPRESSO\\FIREFOX\\CHROME\\SKIN
\n%PROGRAM FILES%\\EXPRESSO\\FIREFOX\\DEFAULTS
\n%PROGRAM FILES%\\EXPRESSO\\FIREFOX\\DEFAULTS\\PREFERENCES
\n%PROGRAM FILES%\\EXPRESSO\\LIBRARIES
\n%PROGRAM FILES%\\EXPRESSO\\RESOURCES<\/div>\n
<\/div>","protected":false},"excerpt":{"rendered":"

SocialSay http:\/\/www.socialsay.me\/index.html Express Your Social Self Make your facebook status and comments funny and smart! Add smileys and funny sentences with a click! Share your smart statuses with your friends! This software does not change the Windows boot time. BABYLONTOOLBAR.DLL Description: Babylon BHO Babylon Toolbar 1.4.35.0 MD5= C471B1EEF9DF1C55B5261006CE04E11F File is signed and the signature was […]
More…<\/u><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[4300],"tags":[4304],"_links":{"self":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/posts\/5165"}],"collection":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/comments?post=5165"}],"version-history":[{"count":0,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/posts\/5165\/revisions"}],"wp:attachment":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/media?parent=5165"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/categories?post=5165"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/tags?post=5165"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}