Home Malware Programs Bad Toolbars Allin1Convert Toolbar

Allin1Convert Toolbar

Posted: September 9, 2013

Threat Metric

Ranking: 1,476
Threat Level: 1/10
Infected PCs: 98,689
First Seen: September 9, 2013
Last Seen: October 17, 2023
OS(es) Affected: Windows

Allin1Convert Toolbar Screenshot 1The Allin1Convert Toolbar is a file-converter add-on that may also resets your Web browser's search engine and homepage. Although the Allin1Convert Toolbar may enact these changes with your theoretical consent, the Allin1Convert Toolbar sometimes may be installed with other programs and may be difficult to remove completely, making Allin1Convert Toolbar equivalent to a Potentially Unwanted Program. If your PC has an unwanted installation of an Allin1Convert Toolbar, anti-malware programs can be put to use for both deleting the Allin1Convert Toolbar's visible components and its browser changes, which may redirect you to other sites arbitrarily.

Allin1Convert Toolbar: Taking All Your Browser's Choices Away from You in One Swoop

The Allin1Convert Toolbar is another browser toolbar that exists mostly as a marketing tool for the Ask.com search engine. While the Allin1Convert Toolbar does provide some actual file-converting features as its marketing claims, the Allin1Convert Toolbar also includes changes to your homepage and default search engine that are unrelated to these file-converting features. With the Allin1Convert Toolbar installed with its default settings (which you may opt out of taking), your browser's homepage may be locked to Ask.com and any Web searches may be redirected to that site, as well.
Although you should be careful while searching for sites through this site, visiting sites directly marketed by the Allin1Convert Toolbar is not a likely infection vector or a source of any immediate attacks against your PC.

Converting Your Browser Back to One that's Freed of an Allin1Convert Toolbar's Redirects

Unfortunately, the Allin1Convert Toolbar's Ask.com-promoting browser changes are not easily removed with the Allin1Convert Toolbar, itself, and any default browser settings may be ignored. Therefore, to keep your browser from being redirected to Ask.com regularly, you will need to use anti-malware software to remove the Allin1Convert Toolbar and its system changes in their entirety. The Allin1Convert Toolbar's changes may affect several browser types, including Firefox, Chrome and Internet Explorer, but the Allin1Convert Toolbar does not have any expressed compatibility with non-Windows OSes, at this point.

Being cautious about the options offered to you while installing new software is the best way to keep PUPs like the Allin1Convert Toolbar from being installed without your total consent on the matter. SpywareRemove.com malware experts could list similar toolbars almost indefinitely, but a shortened list of examples can include browser add-ons like the VirtualDJ Toolbar, the VacationXplorer, the WeatherBlink Toolbar, the Movies Toolbar, the Sammsoft Toolbar and the Video Download Converter Toolbar. Note that while these programs display diverse features and brand names, they all perform functions similar to those of the Allin1Convert Toolbar with regards to resetting your search engine and homepage.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES%\Allin1Convert_8h\bar\1.bin\8hSrchMn.exe File name: 8hSrchMn.exe
Size: 55.36 KB (55368 bytes)
MD5: 82a4caf435b50eaf44ff3f6e4ce16b16
Detection count: 19
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Allin1Convert_8h\bar\1.bin
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES%\Allin1Convert_8h\bar\1.bin\8hbarsvc.exe File name: 8hbarsvc.exe
Size: 116.23 KB (116232 bytes)
MD5: 1f9a501cf85b666570116bb0e8b713b8
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Allin1Convert_8h\bar\1.bin
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES%\Allin1Convert_8h\bar\1.bin\8hbarsvc.exe File name: 8hbarsvc.exe
Size: 44.75 KB (44752 bytes)
MD5: 2dcce93d9d1a36178d65513736e8b2fd
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Allin1Convert_8h\bar\1.bin
Group: Malware file
Last Updated: May 20, 2014
%PROGRAMFILES%\Allin1Convert_8h\bar\1.bin\8hbrmon.exe File name: 8hbrmon.exe
Size: 61.51 KB (61512 bytes)
MD5: 6703d5ce11e208160f3734078741a1b6
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Allin1Convert_8h\bar\1.bin
Group: Malware file
Last Updated: May 20, 2014

Registry Modifications

The following newly produced Registry Values are:

CLSID{13B534D0-49F9-48A9-A006-B2F92E1D01CB}{1604fc43-3a1e-4c6b-850d-70c8a858c61a}{164993F7-4D6D-40A5-8FA1-37A8F96B4700}{16976E15-10EA-44FD-804A-6ECBC9EBBFC7}{1B520A16-E83A-48F9-8802-8F485F24A452}{1CE5ABBD-42D7-4EEE-BBD6-33E76D912ECD}{1E6170F4-3856-40E4-A2EB-2D8FB46574A4}{21B4FA2D-3459-44D1-A855-D8BC0378E9D2}{248b3e95-17a4-482d-a8a8-6b3df4d05c35}{250b71cd-97ca-40a5-834f-265719a62caf}{2561FD25-FE31-4E56-A120-AF7FEAAE3124}{27f49273-de3a-4111-90f9-6c474c37aefb}{289211A5-2A74-454B-9F1F-FA9A8D9CD6D8}{2CFC7EED-36BA-4374-8D29-92895D942F6C}{39d4f1a1-a94d-4b7d-bf1d-7446308800ed}{3E698E62-9516-4670-AD6C-DC58181BC9F8}{43E76D04-EB5C-4D74-A11D-7403BAFE540B}{443321f7-e46c-42f8-812b-f35e98cbb44f}{45A28B99-6C20-441D-9D4D-F7EC7C701F6C}{4BD0FCFF-AD64-4315-9F2C-960EF3C21623}{4CE34BDA-95CD-431D-AA32-0FF7589C0376}{4E089F3E-F5E1-4759-AF16-E7EBE24CAA9C}{507C73BB-FC69-425E-8A49-9204F886B328}{53F6A516-3DCC-48F4-835C-6C670CB39CEA}{5bcf818d-78c8-41b8-ba89-65c5fdac4fc4}{5cde4714-32dc-473c-8194-0645e62c2e96}{5D076356-28C1-43B2-B29B-1AAE8D518E83}{5D5D5550-534F-4854-B461-3B40D759EA72}{5E58CDA9-3B21-4611-A859-26EE28950E61}{5E59E7F3-87E7-4E0E-8B62-7DE9EA685511}{628BA19D-7BED-4C54-8210-AFE66BB15D06}{6C5561B6-3DD2-46B5-83BE-EAE744366046}{6EC57031-1740-4151-93C5-C465D6063DD2}{76FC1003-0825-48BD-B59B-3B7A5754972C}{774BFD7A-2CE7-4785-8957-2D62F7F4A83C}{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}{7DBE2E95-6739-4DC4-8BD0-687B5F5A856D}{7EB7381C-FB01-47FC-9C42-ED64122C1B92}{8077E854-138D-4396-ABB8-44C39E621705}{889f49d2-6cea-40be-be5f-7217485f9745}{8f83d657-5993-4ffa-9aee-da0b20d828a7}{9B79844F-F67F-4024-B41A-633E0D36B60B}{9D217B94-6FC9-44FE-94B1-30C711871266}{a4c2fb10-84c3-44eb-9f9e-860fa1d9a797}{af60f89a-4645-4381-8c7f-b8feab385445}{B0602473-26E3-425F-A819-D8651D6D83A8}{B1339BE3-9E4D-49D4-97F2-E4220530F65C}{B48AC2CD-9662-47E0-A3C0-3B01BB3F463E}{B992BF10-B9DF-413D-BFBE-0DAED5BF0ABC}{BB644C1C-BDFC-4390-8BCF-8E864D1859E6}{BE698E51-830B-447A-954D-901D6E05DDE2}{BFCF748F-A56E-451F-AA45-0D7EB699E416}{c8ef8f70-3807-424a-83f7-da06fd4dacf9}{cd1a63ba-a08c-431b-9a34-f240aadc728d}{D09139AB-0ACB-4F22-B9AE-816E6838A814}{D617CF84-B0BC-441F-9984-B676AFBA1E8D}{DC86010C-7F30-485D-85D4-0957ECA323DD}{de0f6787-9d1c-42b7-a0b9-eac630f87902}{e4ef697f-434b-4dc7-a464-4412462206db}{EA3743AC-948C-4E65-A61F-10EDA13D79CA}{ef3f28c8-0330-4d18-b901-d24cb83e5aa1}{ef5db804-585b-472e-b415-bc63f8f01bf6}{F11B9E79-0F7B-4C8B-B507-F06982497901}{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}{f9131ea5-c2e2-4bcf-b0f3-b2d7ed6edc76}{f99ddd9a-07d0-47ab-86f1-193533dd2c60}{fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d}File name without pathallin1convert.dl.myway[1].xmlallin1convert.dl.tb.ask[1].xmlhttp_allin1convert.dl.myway.com_0.localstoragehttp_allin1convert.dl.myway.com_0.localstorage-journalhttp_allin1convert.dl.tb.ask.com_0.localstoragehttp_allin1convert.dl.tb.ask.com_0.localstorage-journalHKEY..\..\..\..{RegistryKeys}SOFTWARE\Allin1ConvertSoftware\Allin1Convert_8hSoftware\AppDataLow\Software\Allin1Convert_8hSoftware\Microsoft\Internet Explorer\Approved Extensions\{A4C2FB10-84C3-44EB-9F9E-860FA1D9A797}Software\Microsoft\Internet Explorer\Approved Extensions\{CD1A63BA-A08C-431B-9A34-F240AADC728D}Software\Microsoft\Internet Explorer\Approved Extensions\{FBCBC43A-DCA9-4192-A4C8-B57FD0F77D4D}Software\Microsoft\Internet Explorer\DOMStorage\allin1convert.dl.myway.comSOFTWARE\Microsoft\Internet Explorer\DOMStorage\allin1convert.dl.tb.ask.comSOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{53f6a516-3dcc-48f4-835c-6c670cb39cea}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5e58cda9-3b21-4611-a859-26ee28950e61}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6874fade-02c8-4181-831a-fc7486cf1d74}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6c5561b6-3dd2-46b5-83be-eae744366046}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88e44198-d164-4ec0-b2c0-f679d866c6da}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f671c1b3-9776-426d-a350-55fb2d9b53f7}SOFTWARE\Microsoft\Internet Explorer\LowRegistry\DOMStorage\allin1convert.dl.myway.comSoftware\Microsoft\Internet Explorer\SearchScopes\{75b4241f-171e-44a3-bf44-23613b6e3e03}SOFTWARE\Microsoft\Internet Explorer\Toolbar\{cd1a63ba-a08c-431b-9a34-f240aadc728d}SOFTWARE\Microsoft\Tracing\Allin1Convert_RASAPI32SOFTWARE\Microsoft\Tracing\Allin1Convert_RASMANCSSOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{a4c2fb10-84c3-44eb-9f9e-860fa1d9a797}SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{27f49273-de3a-4111-90f9-6c474c37aefb}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7EB7381C-FB01-47FC-9C42-ED64122C1B92}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{af60f89a-4645-4381-8c7f-b8feab385445}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e4ef697f-434b-4dc7-a464-4412462206db}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{f9131ea5-c2e2-4bcf-b0f3-b2d7ed6edc76}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A4C2FB10-84C3-44EB-9F9E-860FA1D9A797}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CD1A63BA-A08C-431B-9A34-F240AADC728D}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FBCBC43A-DCA9-4192-A4C8-B57FD0F77D4D}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7CAEFAFC-9A1E-4BCC-94DD-BC7D8D52717A}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A4C2FB10-84C3-44EB-9F9E-860FA1D9A797}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CD1A63BA-A08C-431B-9A34-F240AADC728D}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9131EA5-C2E2-4BCF-B0F3-B2D7ED6EDC76}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FBCBC43A-DCA9-4192-A4C8-B57FD0F77D4D}SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Allin1Convert AppIntegrator 32-bitSOFTWARE\Microsoft\Windows\CurrentVersion\Run\Allin1Convert Search Scope MonitorSOFTWARE\MozillaPlugins\@Allin1Convert_8h.com/PluginSOFTWARE\Wow6432Node\Allin1Convert_8hSOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5e58cda9-3b21-4611-a859-26ee28950e61}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6874fade-02c8-4181-831a-fc7486cf1d74}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6c5561b6-3dd2-46b5-83be-eae744366046}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88e44198-d164-4ec0-b2c0-f679d866c6da}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{75b4241f-171e-44a3-bf44-23613b6e3e03}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{cd1a63ba-a08c-431b-9a34-f240aadc728d}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{a4c2fb10-84c3-44eb-9f9e-860fa1d9a797}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{27f49273-de3a-4111-90f9-6c474c37aefb}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7EB7381C-FB01-47FC-9C42-ED64122C1B92}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{af60f89a-4645-4381-8c7f-b8feab385445}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e4ef697f-434b-4dc7-a464-4412462206db}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{f9131ea5-c2e2-4bcf-b0f3-b2d7ed6edc76}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\Allin1Convert AppIntegrator 32-bitSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\Allin1Convert Search Scope MonitorSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\Allin1Convert_8h Browser Plugin Loader 64SOFTWARE\Wow6432Node\MozillaPlugins\@Allin1Convert_8h.com/PluginSYSTEM\ControlSet001\services\Allin1Convert_8hServiceSYSTEM\ControlSet002\services\Allin1Convert_8hServiceSYSTEM\CurrentControlSet\services\Allin1Convert_8hServiceHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Allin1Convert_8hbar Uninstall FirefoxAllin1Convert_8hbar Uninstall Internet ExplorerAllin1ConvertTooltab Uninstall Internet Explorer

Additional Information

The following directories were created:
%LOCALAPPDATA%\Allin1ConvertTooltab%LOCALAPPDATA%\Allin1Convert_8h%PROGRAMFILES%\Allin1Convert_8h%PROGRAMFILES(x86)%\Allin1Convert_8h%USERPROFILE%\AppData\LocalLow\Allin1Convert_8h%USERPROFILE%\Application Data\Allin1Convert_8h
Loading...