Movies Toolbar

Movies Toolbar Description


Movies Toolbar Screenshot 1The Movies Toolbar is a browser add-on that includes some minor features, such as enabling easy access to movie reviews, in exchange for hijacking your homepage and redirecting your searches. Promoted by the same sites that promote Conduit toolbars, the Movies Toolbar has been labeled as a Potentially Unwanted Program and should be removed unless you’re completely sure you want the Movies Toolbar on your PC. The Movies Toolbar and other PUPs often are installed through the prompts of other freeware applications, and SpywareRemove.com malware researchers encourage a careful analysis of installation options for such products to avoid any unneeded Movies Toolbar problems.

The Movies Toolbar: Showing You a Little More Than You Wanted to See


Although the Movies Toolbar actually is sponsored by Bandoo Media rather than Conduit Ltd, in most respects, the Movies Toolbar strongly resembles similar toolbars from that company – and even is promoted by the same websites. Like Oople, Value Apps or Produtools, the Movies Toolbar does offer a few theoretically useful features related to your Web-browsing experience. However, the Movies Toolbar also makes changes to your browser and disallows reversing these changes (at least, until you’ve removed the Movies Toolbar, too).

Browser changes SpywareRemove.com malware experts tied to the Movies Toolbar include:
  • Homepage changes that force your browser to load an arbitrary site as its homepage, regardless of its independent homepage settings.
  • Web search redirects to other search engines.
    DOWNLOAD NOW

    » Learn more about SpyHunter's Spyware Detection Tool
    and steps to uninstall SpyHunter.

    Currently the Movies Toolbar appears to be promoting Ask.com, which SpywareRemove.com malware experts don’t consider a malicious or dangerous website.

Some other changes that can be expected with the Movies Toolbar and similar browser add-ons include slow browser performance and unwanted advertisements delivered through various methods (such as pop-ups). The Movies Toolbar is Windows-only, but can install itself to multiple browsers (such as Google’s Chrome, Firefox or the venerable Internet Explorer) without a qualm.

Calling Curtains for a Movies Toolbar


While the Movies Toolbar’s browser changes are not necessarily very dangerous for your computer, they do take control of your browser in ways that malware experts consider indicative of unwanted software that usually should be removed without any hesitation. To be certain of deleting the Movies Toolbar completely, using anti-malware software usually is suggested – particularly since similar PUPs usually will fail to undo their browser changes even after you delete all of the visible software.

PC threats like the Movies Toolbar usually are distributed through different freeware programs that include additional toolbars, either as optional or mandatory add-ons. Given this fact, simple perceptiveness can save you from a Movies Toolbar problem and allow you to install the software you want without being subjected to the browser changes you have no reason to want.

Aliases


Adware.Win64.SearchSuite.AeVo [Baidu-International]Riskware/SearchSuite [Fortinet]PUA.Bandoo [Ikarus]Trj/Chgt.C [Panda]Win32.Application.Searchsuite.C [GData]PUP/Win32.SearchSuite [AhnLab-V3]Win32.Troj.Generic.a.(kcloud) [Kingsoft]RiskWare[WebToolbar:not-a-virus]/Win64.SearchSuite [Antiy-AVL]Artemis [McAfee-GW-Edition]not-a-virus:WebToolbar.Win64.SearchSuite.d [Kaspersky]

More aliases (30)


Movies Toolbar Automatic Detection Tool (Recommended)


Is your PC infected with Movies Toolbar? To safely & quickly detect Movies Toolbar we highly recommend you run the malware scanner listed below.



Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

Registry Modifications

Tutorial: To edit and delete registry entries manually, read the tutorial on how to remove malicious registry entries.

Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}AppID\SavevidPluginCore.EXESoftware\APN DTXSoftware\APN DTX\{3444c3c5-6c56-4a16-a453-832b05bf6ea4}Software\APNDTXSoftware\AppDataLow\Software\somotomoviestoolbar1Software\AppDataLow\Software\somotomoviestoolbar181SOFTWARE\Classes\AppID\SavevidPluginCore.EXESOFTWARE\Classes\MoviesToolbarHelper.DNSGuardSOFTWARE\Classes\MoviesToolbarHelper.DNSGuard.1SOFTWARE\Classes\SavevidPluginCore.PluginManagerSOFTWARE\Classes\SavevidPluginCore.PluginManager.1SOFTWARE\Classes\Wow6432Node\AppID\SavevidPluginCore.EXESOFTWARE\Google\Chrome\Extensions\aaaaabcbmongicmdegkmmfgdickgnnobSOFTWARE\Google\Chrome\Extensions\aaaaimdcedbpbcjjbbnfcbbjcngmomicSOFTWARE\Google\Chrome\Extensions\aaaajhegnoacmkmglfacmbbhpoadcdkhSOFTWARE\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaabcbmongicmdegkmmfgdickgnnobSoftware\Microsoft\Internet Explorer\Approved Extensions, value: {338A754C-B46E-4BF2-8AC8-23DE36862AD3}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3444c3c5-6c56-4a16-a453-832b05bf6ea4}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7B162FE9-68AE-40DA-A223-B3AEBB482B09}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{93B41E47-367D-4687-A293-5A16D88D43B5}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A161BA2F-4DAD-4F7D-B887-90A18B961F96}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B3C010E6-5D85-4D77-ABF9-1602393140DC}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c75a2d66-6d1d-4735-8f63-9d85dcc026a6}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F66A6600-CA6C-4A5C-8320-6323A68559A5}SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2427}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {3d86a75b-cb6b-4764-885d-ca6336f04ba2}SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {c75a2d66-6d1d-4735-8f63-9d85dcc026a6}SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{3d86a75b-cb6b-4764-885d-ca6336f04ba2}SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{c75a2d66-6d1d-4735-8f63-9d85dcc026a6}SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c75a2d66-6d1d-4735-8f63-9d85dcc026a6}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C75A2D66-6D1D-4735-8F63-9D85DCC026A6}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{338a754c-b46e-4bf2-8ac8-23de36862ad3}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C75A2D66-6D1D-4735-8F63-9D85DCC026A6}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C75A2D66-6D1D-4735-8F63-9D85DCC026A6}SOFTWARE\SafetyNutSoftware\savevidmoviestoolbarhaSoftware\SomotoSoftware\somotomoviestoolbar1SOFTWARE\Wow6432Node\Classes\AppID\SavevidPluginCore.EXESOFTWARE\Wow6432Node\Google\Chrome\Extensions\aaaaabcbmongicmdegkmmfgdickgnnobSOFTWARE\Wow6432Node\Google\Chrome\Extensions\aaaaimdcedbpbcjjbbnfcbbjcngmomicSOFTWARE\Wow6432Node\Google\Chrome\Extensions\aaaajhegnoacmkmglfacmbbhpoadcdkhSOFTWARE\Wow6432Node\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaabcbmongicmdegkmmfgdickgnnobSOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3444c3c5-6c56-4a16-a453-832b05bf6ea4}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7B162FE9-68AE-40DA-A223-B3AEBB482B09}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{93B41E47-367D-4687-A293-5A16D88D43B5}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A161BA2F-4DAD-4F7D-B887-90A18B961F96}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C4F9C609-53A6-4B1B-9FFC-45497774BB94}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c75a2d66-6d1d-4735-8f63-9d85dcc026a6}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F66A6600-CA6C-4A5C-8320-6323A68559A5}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2427}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar, value: {3d86a75b-cb6b-4764-885d-ca6336f04ba2}SOFTWARE\Wow6432Node\Microsoft\Tracing\tb_Movie_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\tb_Movie_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{3d86a75b-cb6b-4764-885d-ca6336f04ba2}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{c75a2d66-6d1d-4735-8f63-9d85dcc026a6}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C75A2D66-6D1D-4735-8F63-9D85DCC026A6}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\somotomoviestoolbar1FFSYSTEM\ControlSet001\Services\F06DEFF2-5B9C-490D-910F-35D3A9119622SYSTEM\ControlSet001\services\F06DEFF2-5B9C-490D-910F-35D3A91196222SYSTEM\ControlSet001\services\SafetyNutManagerSYSTEM\ControlSet001\services\SavevidServiceSYSTEM\ControlSet002\Services\F06DEFF2-5B9C-490D-910F-35D3A9119622SYSTEM\ControlSet002\services\F06DEFF2-5B9C-490D-910F-35D3A91196222SYSTEM\ControlSet002\services\SavevidServiceSYSTEM\CurrentControlSet\Services\F06DEFF2-5B9C-490D-910F-35D3A9119622SYSTEM\CurrentControlSet\services\SavevidServiceWow6432Node\AppID\SavevidPluginCore.EXEHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}savevidmoviestoolbarhaCRsavevidmoviestoolbarhaFFsomotomoviestoolbar181CRsomotomoviestoolbar181FFsomotomoviestoolbar181IEsomotomoviestoolbar1CRsomotomoviestoolbar1IE
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path} {44E16FC6-3A79-4F00-8BF3-399AD9C403BF}{587604F0-C55C-4F3F-8339-D634E878828E}{0050C303-0E30-48D3-B402-FB5D490CB89F}{6014D692-4409-4EDD-ABB2-36CA26DC2A2E}{3d86a75b-cb6b-4764-885d-ca6336f04ba2}{C4F9C609-53A6-4B1B-9FFC-45497774BB94}{934BEE21-C5A4-457E-B130-77CA098FBBD3}{d6715933-3f8b-44bc-b4b2-682164832b31}{338a754c-b46e-4bf2-8ac8-23de36862ad3}{3444c3c5-6c56-4a16-a453-832b05bf6ea4}
Posted: July 1, 2013 | By
Share:
Rate this article:
1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading ... Loading ...
Threat Metric
Threat Level: 5/10
Detection Count: 667,885

Leave a Reply

What is 12 + 8 ?
Please leave these two fields as-is:
IMPORTANT! To be able to proceed, you need to solve the following simple math (so we know that you are a human) :-)