Home Malware Programs Bad Toolbars Delta Search Toolbar

Delta Search Toolbar

Posted: April 1, 2013

Delta Search Toolbar Screenshot 1The Delta Search Toolbar is another PUP or Potentially Unwanted Program that's installed to your browser by the ignominious Conduit Ltd company. Similar to all of Conduit's other browser add-ons, the Delta Search Toolbar claims to offer web-searching features while Delta Search Toolbar also installs unrelated programs and changes your homepage to one of its own choosing. Although the Delta Search Toolbar is not, by itself, malicious, SpywareRemove.com malware experts generally suggest deleting unwanted PUPs like the Delta Search Toolbar, which often are sources of security and performance issues. While you can, in theory, remove the Delta Search Toolbar by a recommended uninstall method, using anti-malware software to delete the Delta Search Toolbar from your PC should be considered both faster and more likely to remove all of the Delta Search Toolbar's browser changes than a standard uninstall.

Why the Delta Search Toolbar's Not Exactly the Alpha of the Search Engine Pack

Although the Delta Search Toolbar has a new brand name (most likely for the sake of waylaying new victims towards Conduit's search engines), the Delta Search Toolbar is identical to other PUPs created by Conduit, including the FLV Runner Toolbar, the Vuze Toolbar, Adware.2YourFace and the WiseConvert Toolbar. This pack of toolbars, with the Delta Search Toolbar as just another interchangeable member of the group, promotes the search features of Conduit Ltd-affiliated websites – usually by setting your homepage to one of these sites.

In addition to its homepage changes, the Delta Search Toolbar also will install TuneUp Utilities 2013. This program is a second PUP that claims to include Windows-optimizing functions, but actually doesn't appear to provide many, if any, benefits for your computer's performance.

Kicking the Delta Search Toolbar Down Your Totem Pole of Search Engines

Although links promoted through the Delta Search Toolbar's searches shouldn't be considered quite as reputable as results from, for example, Google, the Delta Search Toolbar hasn't been found guilty of intentionally promoting any form of aggressive web content. Nevertheless, SpywareRemove.com malware experts usually consider it commendable to remove PUPs, especially those (like the Delta Search Toolbar) that don't have any obvious advantages for your computer.

Since the Delta Search Toolbar and related PUPs have a tendency to resist typical uninstall techniques, you should use anti-malware tools to delete the Delta Search Toolbar in safety, which will allow you to change your browser's homepage back to a preferable one. SpywareRemove.com malware experts also warn that you should avoid installing freeware programs with a history of being linked to Conduit add-ons like the Delta Search Toolbar; such applications are one of the most common installation methods that are used by Conduit PUPs (not to mention adware, browser hijackers and other types of lesser PC threats).

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Documents and Settings\<username>\Application Data\BabSolution\CR\Delta.crx File name: C:\Documents and Settings\<username>\Application Data\BabSolution\CR\Delta.crx
Mime Type: unknown/crx
C:\Documents and Settings\<username>\Application Data\BabSolution\Shared\BabMaint.exe File name: C:\Documents and Settings\<username>\Application Data\BabSolution\Shared\BabMaint.exe
File type: Executable File
Mime Type: unknown/exe
C:\Documents and Settings\<username>\Application Data\BabSolution\Shared\BUSolution.dll File name: C:\Documents and Settings\<username>\Application Data\BabSolution\Shared\BUSolution.dll
File type: Dynamic link library
Mime Type: unknown/dll
C:\Documents and Settings\<username>\Application Data\BabSolution\Shared\BUSUninstall.exe File name: C:\Documents and Settings\<username>\Application Data\BabSolution\Shared\BUSUninstall.exe
File type: Executable File
Mime Type: unknown/exe
C:\Documents and Settings\<username>\Application Data\BabSolution\Shared\GUninstaller.exe File name: C:\Documents and Settings\<username>\Application Data\BabSolution\Shared\GUninstaller.exe
File type: Executable File
Mime Type: unknown/exe
C:\Documents and Settings\<username>\Local Settings\Temp\426FA64D-BAB0-7891-818B-9FE871D27EE4\BExternal.dll File name: C:\Documents and Settings\<username>\Local Settings\Temp\426FA64D-BAB0-7891-818B-9FE871D27EE4\BExternal.dll
File type: Dynamic link library
Mime Type: unknown/dll
C:\Documents and Settings\<username>\Local Settings\Temp\426FA64D-BAB0-7891-818B-9FE871D27EE4\IEHelper.dll File name: C:\Documents and Settings\<username>\Local Settings\Temp\426FA64D-BAB0-7891-818B-9FE871D27EE4\IEHelper.dll
File type: Dynamic link library
Mime Type: unknown/dll
C:\Documents and Settings\<username>\Local Settings\Temp\426FA64D-BAB0-7891-818B-9FE871D27EE4\Latest\ccp.exe File name: C:\Documents and Settings\<username>\Local Settings\Temp\426FA64D-BAB0-7891-818B-9FE871D27EE4\Latest\ccp.exe
File type: Executable File
Mime Type: unknown/exe
C:\Documents and Settings\<username>\Local Settings\Temp\426FA64D-BAB0-7891-818B-9FE871D27EE4\Latest\ChromeToolbarSetup.dll File name: C:\Documents and Settings\<username>\Local Settings\Temp\426FA64D-BAB0-7891-818B-9FE871D27EE4\Latest\ChromeToolbarSetup.dll
File type: Dynamic link library
Mime Type: unknown/dll
C:\Documents and Settings\<username>\Local Settings\Temp\426FA64D-BAB0-7891-818B-9FE871D27EE4\Latest\CrxInstaller.dll File name: C:\Documents and Settings\<username>\Local Settings\Temp\426FA64D-BAB0-7891-818B-9FE871D27EE4\Latest\CrxInstaller.dll
File type: Dynamic link library
Mime Type: unknown/dll
C:\Documents and Settings\<username>\Local Settings\Temp\426FA64D-BAB0-7891-818B-9FE871D27EE4\Latest\delta.crx File name: C:\Documents and Settings\<username>\Local Settings\Temp\426FA64D-BAB0-7891-818B-9FE871D27EE4\Latest\delta.crx
Mime Type: unknown/crx
C:\Documents and Settings\<username>\Local Settings\Temp\426FA64D-BAB0-7891-818B-9FE871D27EE4\Latest\MyBabylonTB.exe File name: C:\Documents and Settings\<username>\Local Settings\Temp\426FA64D-BAB0-7891-818B-9FE871D27EE4\Latest\MyBabylonTB.exe
File type: Executable File
Mime Type: unknown/exe
C:\Documents and Settings\<username>\Local Settings\Temp\426FA64D-BAB0-7891-818B-9FE871D27EE4\Latest\Setup.exe File name: C:\Documents and Settings\<username>\Local Settings\Temp\426FA64D-BAB0-7891-818B-9FE871D27EE4\Latest\Setup.exe
File type: Executable File
Mime Type: unknown/exe
C:\Documents and Settings\<username>\Start Menu\Programs\BrowserProtect\Uninstall BrowserProtect.lnk File name: C:\Documents and Settings\<username>\Start Menu\Programs\BrowserProtect\Uninstall BrowserProtect.lnk
File type: Shortcut
Mime Type: unknown/lnk
C:\Documents and Settings\<username>\Local Settings\Temp\DeltaTB.exe File name: C:\Documents and Settings\<username>\Local Settings\Temp\DeltaTB.exe
File type: Executable File
Mime Type: unknown/exe
C:\Documents and Settings\<username>\Local Settings\Temp\MainProduct.exe File name: C:\Documents and Settings\<username>\Local Settings\Temp\MainProduct.exe
File type: Executable File
Mime Type: unknown/exe
C:\Documents and Settings\<username>\Local Settings\Temp\nsl47.tmp\Time.dll File name: C:\Documents and Settings\<username>\Local Settings\Temp\nsl47.tmp\Time.dll
File type: Dynamic link library
Mime Type: unknown/dll
C:\Documents and Settings\<username>\Local Settings\Temp\SearchComponent_Offer_0.exe File name: C:\Documents and Settings\<username>\Local Settings\Temp\SearchComponent_Offer_0.exe
File type: Executable File
Mime Type: unknown/exe
C:\Documents and Settings\<username>\Local Settings\Temp\SetupAuto.exe File name: C:\Documents and Settings\<username>\Local Settings\Temp\SetupAuto.exe
File type: Executable File
Mime Type: unknown/exe
C:\Documents and Settings\<username>\Local Settings\Temp\SetupUpdater.exe File name: C:\Documents and Settings\<username>\Local Settings\Temp\SetupUpdater.exe
File type: Executable File
Mime Type: unknown/exe
C:\Documents and Settings\<username>\Application Data\BrowserProtect\2.6.1125.80\[c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8]\BrowserProtect.crx File name: C:\Documents and Settings\<username>\Application Data\BrowserProtect\2.6.1125.80\[c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8]\BrowserProtect.crx
Mime Type: unknown/crx
C:\Documents and Settings\<username>\Application Data\BrowserProtect\2.6.1125.80\[c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8]\BrowserProtect.dll File name: C:\Documents and Settings\<username>\Application Data\BrowserProtect\2.6.1125.80\[c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8]\BrowserProtect.dll
File type: Dynamic link library
Mime Type: unknown/dll
C:\Documents and Settings\<username>\Application Data\BrowserProtect\2.6.1125.80\[c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8]\BrowserProtect.exe File name: C:\Documents and Settings\<username>\Application Data\BrowserProtect\2.6.1125.80\[c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8]\BrowserProtect.exe
File type: Executable File
Mime Type: unknown/exe
C:\Documents and Settings\<username>\Application Data\BrowserProtect\2.6.1125.80\[c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8]\BrowserProtect.settings File name: C:\Documents and Settings\<username>\Application Data\BrowserProtect\2.6.1125.80\[c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8]\BrowserProtect.settings
Mime Type: unknown/settings
C:\Program Files\Delta\delta\1.8.10.0\bh\delta.dll File name: C:\Program Files\Delta\delta\1.8.10.0\bh\delta.dll
File type: Dynamic link library
Mime Type: unknown/dll
C:\Program Files\Delta\delta\1.8.10.0\deltaApp.dll File name: C:\Program Files\Delta\delta\1.8.10.0\deltaApp.dll
File type: Dynamic link library
Mime Type: unknown/dll
C:\Program Files\Delta\delta\1.8.10.0\deltaEng.dll File name: C:\Program Files\Delta\delta\1.8.10.0\deltaEng.dll
File type: Dynamic link library
Mime Type: unknown/dll
C:\Program Files\Delta\delta\1.8.10.0\deltasrv.exe File name: C:\Program Files\Delta\delta\1.8.10.0\deltasrv.exe
File type: Executable File
Mime Type: unknown/exe
C:\Program Files\Delta\delta\1.8.10.0\deltaTlbr.dll File name: C:\Program Files\Delta\delta\1.8.10.0\deltaTlbr.dll
File type: Dynamic link library
Mime Type: unknown/dll
C:\Program Files\Delta\delta\1.8.10.0\escortShld.dll File name: C:\Program Files\Delta\delta\1.8.10.0\escortShld.dll
File type: Dynamic link library
Mime Type: unknown/dll
C:\Program Files\Delta\delta\1.8.10.0\GUninstaller.exe File name: C:\Program Files\Delta\delta\1.8.10.0\GUninstaller.exe
File type: Executable File
Mime Type: unknown/exe
C:\Program Files\Delta\delta\1.8.10.0\uninstall.exe File name: C:\Program Files\Delta\delta\1.8.10.0\uninstall.exe
File type: Executable File
Mime Type: unknown/exe
C:\WINDOWS\Tasks\BrowserProtect.job File name: C:\WINDOWS\Tasks\BrowserProtect.job
Mime Type: unknown/job
C:\Documents and Settings\<username>\Application Data\BrowserProtect\2.6.1125.80\[c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8]\FirefoxExtension\components\BrowserProtect-19.0.dll File name: C:\Documents and Settings\<username>\Application Data\BrowserProtect\2.6.1125.80\[c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8]\FirefoxExtension\components\BrowserProtect-19.0.dll
File type: Dynamic link library
Mime Type: unknown/dll
C:\Documents and Settings\<username>\Application Data\BrowserProtect\2.6.1125.80\[c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8]\FirefoxExtension\components\BrowserProtect-3.6.xpt File name: C:\Documents and Settings\<username>\Application Data\BrowserProtect\2.6.1125.80\[c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8]\FirefoxExtension\components\BrowserProtect-3.6.xpt
Mime Type: unknown/xpt
C:\Documents and Settings\<username>\Application Data\BrowserProtect\2.6.1125.80\[c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8]\FirefoxExtension\content\BrowserProtect.js File name: C:\Documents and Settings\<username>\Application Data\BrowserProtect\2.6.1125.80\[c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8]\FirefoxExtension\content\BrowserProtect.js
File type: JavaScript file
Mime Type: unknown/js
C:\Documents and Settings\<username>\Application Data\BrowserProtect\2.6.1125.80\[c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8]\uninstall.exe File name: C:\Documents and Settings\<username>\Application Data\BrowserProtect\2.6.1125.80\[c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8]\uninstall.exe
File type: Executable File
Mime Type: unknown/exe

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\{CLSID Path}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\[C1AF5FA5-852C-4C90-812E-A7F75E011D87]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\[1185823F-F22F-4027-80E5-4F68ACD5DE5E]HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\[F05B12E1-ADE8-4485-B45B-898748B53C37]HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\[261DD098-8A3E-43D4-87AA-63324FA897D8]HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\[39CB8175-E224-4446-8746-00566302DF8D]HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\[09C554C3-109B-483C-A06B-F14172F1A947]HKEY_CURRENT_USE\S-1-5-21-329068152-1390067357-682003330-500\Software\Microsoft\Internet Explorer\SearchScopes\[0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9]HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BrowserProtectHKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BrowserProtectHKEY_LOCAL_MACHINE\SOFTWARE\DataMngrHKEY_LOCAL_MACHINE\SOFTWARE\BabylonHKEY_LOCAL_MACHINE\SOFTWARE\DeltaHKEY_LOCAL_MACHINE\SOFTWARE\Classes\dHKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\esrv.EXEHKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\escorTlbr.DLLHKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\escortEng.DLLHKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\escortApp.DLLHKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\escort.DLLHKEY_LOCAL_MACHINE\SOFTWARE\e2dfddb338e846HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BROWSERPROTECTHKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BROWSERPROTECTHKEY_CURRENT_USE\S-1-5-21-329068152-1390067357-682003330-500\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettingsHKEY_CURRENT_USE\S-1-5-21-329068152-1390067357-682003330-500\Software\DataMngrHKEY_CURRENT_USE\S-1-5-21-329068152-1390067357-682003330-500\Software\BabylonToolbarHKEY_CURRENT_USE\S-1-5-21-329068152-1390067357-682003330-500\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\[D27CDB6E-AE6D-11CF-96B8-444553540000]\iexplore\AllowedDomains\delta-search.comHKEY_CURRENT_USE\S-1-5-21-329068152-1390067357-682003330-500\Software\Delta

2 Comments

Loading...