Home Malware Programs Bad Toolbars Movies Toolbar

Movies Toolbar

Posted: July 1, 2013

Threat Metric

Ranking: 3,101
Threat Level: 5/10
Infected PCs: 227,214
First Seen: July 1, 2013
Last Seen: March 10, 2025
OS(es) Affected: Windows

Movies Toolbar Screenshot 1The Movies Toolbar is a browser add-on that includes some minor features, such as enabling easy access to movie reviews, in exchange for hijacking your homepage and redirecting your searches. Promoted by the same sites that promote Conduit toolbars, the Movies Toolbar has been labeled as a Potentially Unwanted Program and should be removed unless you're completely sure you want the Movies Toolbar on your PC. The Movies Toolbar and other PUPs often are installed through the prompts of other freeware applications, and SpywareRemove.com malware researchers encourage a careful analysis of installation options for such products to avoid any unneeded Movies Toolbar problems.

The Movies Toolbar: Showing You a Little More Than You Wanted to See

Although the Movies Toolbar actually is sponsored by Bandoo Media rather than Conduit Ltd, in most respects, the Movies Toolbar strongly resembles similar toolbars from that company – and even is promoted by the same websites. Like Oople, Value Apps or Produtools, the Movies Toolbar does offer a few theoretically useful features related to your Web-browsing experience. However, the Movies Toolbar also makes changes to your browser and disallows reversing these changes (at least, until you've removed the Movies Toolbar, too).

Browser changes SpywareRemove.com malware experts tied to the Movies Toolbar include:

  • Homepage changes that force your browser to load an arbitrary site as its homepage, regardless of its independent homepage settings.
  • Web search redirects to other search engines. Currently the Movies Toolbar appears to be promoting Ask.com, which SpywareRemove.com malware experts don't consider a malicious or dangerous website.

Some other changes that can be expected with the Movies Toolbar and similar browser add-ons include slow browser performance and unwanted advertisements delivered through various methods (such as pop-ups). The Movies Toolbar is Windows-only, but can install itself to multiple browsers (such as Google's Chrome, Firefox or the venerable Internet Explorer) without a qualm.

Calling Curtains for a Movies Toolbar

While the Movies Toolbar's browser changes are not necessarily very dangerous for your computer, they do take control of your browser in ways that malware experts consider indicative of unwanted software that usually should be removed without any hesitation. To be certain of deleting the Movies Toolbar completely, using anti-malware software usually is suggested – particularly since similar PUPs usually will fail to undo their browser changes even after you delete all of the visible software.

PC threats like the Movies Toolbar usually are distributed through different freeware programs that include additional toolbars, either as optional or mandatory add-ons. Given this fact, simple perceptiveness can save you from a Movies Toolbar problem and allow you to install the software you want without being subjected to the browser changes you have no reason to want.

Aliases

Riskware/SearchSuite [Fortinet]PUA.Bandoo [Ikarus]Trj/Chgt.C [Panda]Win32.Application.Searchsuite.C [GData]PUP/Win32.SearchSuite [AhnLab-V3]RiskWare[WebToolbar:not-a-virus]/Win64.SearchSuite [Antiy-AVL]Artemis [McAfee-GW-Edition]not-a-virus:WebToolbar.Win64.SearchSuite.d [Kaspersky]Trojan ( 0049f9491 ) [K7AntiVirus]Artemis!5D8BE8191754 [McAfee]MalSign.Generic.1EE [AVG]Artemis!B9678C037594 [McAfee]Toolbar.SearchSuite [AVG]Artemis!6AC8FDB0D943 [McAfee]Riskware/Agent [Fortinet]
More aliases (30)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%SYSTEMDRIVE%\AdwCleaner\FileQuarantine\C\Program Files (x86)\ilividbandoomoviestoolbar\IE\searchresultsDx.dll.vir File name: searchresultsDx.dll.vir
Size: 115.58 KB (115584 bytes)
MD5: 775b7ee21c3bf311359c6f17ab7faa42
Detection count: 9,881
Mime Type: unknown/vir
Path: %SYSTEMDRIVE%\AdwCleaner\FileQuarantine\C\Program Files (x86)\ilividbandoomoviestoolbar\IE\searchresultsDx.dll.vir
Group: Malware file
Last Updated: July 6, 2024
%SYSTEMDRIVE%\AdwCleaner\Quarantine\files\ujnaqsosewocekeeuacfqgkraujgljcl\GC\IACNativeMsgHost.exe File name: IACNativeMsgHost.exe
Size: 164.22 KB (164224 bytes)
MD5: 25abf2393eebf6a731708170e4accb37
Detection count: 3,387
File type: Executable File
Mime Type: unknown/exe
Path: %SYSTEMDRIVE%\AdwCleaner\Quarantine\files\ujnaqsosewocekeeuacfqgkraujgljcl\GC\IACNativeMsgHost.exe
Group: Malware file
Last Updated: November 6, 2024
C:\4_ OOPS Keys_2017\AdwCleaner\Quarantine\C\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\__searchresultsDx.dll.vir File name: __searchresultsDx.dll.vir
Size: 92.59 KB (92592 bytes)
MD5: 3a560e3678cbd0d4dfa3c7210dea0aa1
Detection count: 693
Mime Type: unknown/vir
Path: C:\4_ OOPS Keys_2017\AdwCleaner\Quarantine\C\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\__searchresultsDx.dll.vir
Group: Malware file
Last Updated: July 8, 2024
C:\Program Files (x86)\Movies App\Datamngr\SRTOOL~1\IE\searchresultsDx.dll File name: searchresultsDx.dll
Size: 115.61 KB (115616 bytes)
MD5: e1650d38200291ca948bfeefaedd1553
Detection count: 356
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Program Files (x86)\Movies App\Datamngr\SRTOOL~1\IE\searchresultsDx.dll
Group: Malware file
Last Updated: October 21, 2024
%PROGRAMFILES(x86)%\Movies Toolbar\Datamngr\DatamngrUI.exe File name: DatamngrUI.exe
Size: 3.58 MB (3584008 bytes)
MD5: 90f82064bfe53d79ca75fa71a7a00040
Detection count: 171
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Movies Toolbar\Datamngr
Group: Malware file
Last Updated: February 18, 2019
\??\C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\setmgrc1.cfg File name: setmgrc1.cfg
Size: 36.21 KB (36216 bytes)
MD5: 24a97cf9304d38b5515ef4a23f0e7505
Detection count: 162
Mime Type: unknown/cfg
Path: \??\C:\Program Files (x86)\Movies Toolbar\Datamngr\x64
Group: Malware file
Last Updated: June 4, 2014
%PROGRAMFILES%\Browser Tab Search by Ask\SafetyNut\safetynut.exe File name: safetynut.exe
Size: 3.58 MB (3587280 bytes)
MD5: 780a11e50ae157025b2f41d70b1659ab
Detection count: 56
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Browser Tab Search by Ask\SafetyNut
Group: Malware file
Last Updated: March 23, 2016
%PROGRAMFILES%\Music App\SafetyNut\SafetyNutManager.exe File name: SafetyNutManager.exe
Size: 3.57 MB (3572432 bytes)
MD5: c11903cdaf06b5af763427d92e5fb083
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Music App\SafetyNut
Group: Malware file
Last Updated: March 23, 2016
%PROGRAMFILES(x86)%\Movies App\Datamngr\DatamngrCoordinator.exe File name: DatamngrCoordinator.exe
Size: 3.28 MB (3287048 bytes)
MD5: 683e592d74beb6c543da211bb5fcadd7
Detection count: 21
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Movies App\Datamngr
Group: Malware file
Last Updated: August 5, 2017

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{0050C303-0E30-48D3-B402-FB5D490CB89F}{08AE5E13-70CC-4FBB-AD00-EF4B90A44451}{338a754c-b46e-4bf2-8ac8-23de36862ad3}{3444c3c5-6c56-4a16-a453-832b05bf6ea4}{3d86a75b-cb6b-4764-885d-ca6336f04ba2}{44E16FC6-3A79-4F00-8BF3-399AD9C403BF}{587604F0-C55C-4F3F-8339-D634E878828E}{6014D692-4409-4EDD-ABB2-36CA26DC2A2E}{934BEE21-C5A4-457E-B130-77CA098FBBD3}{c75a2d66-6d1d-4735-8f63-9d85dcc026a6}{CC2542C4-3251-4AC4-845E-F7E742BBE6DE}{d6715933-3f8b-44bc-b4b2-682164832b31}HKEY..\..\..\..{RegistryKeys}Software\APN DTXSoftware\APN DTX\{3444c3c5-6c56-4a16-a453-832b05bf6ea4}Software\APNDTXSoftware\AppDataLow\Software\somotomoviestoolbar1Software\AppDataLow\Software\somotomoviestoolbar181SOFTWARE\Classes\AppID\SavevidPluginCore.EXESOFTWARE\Classes\MoviesToolbarHelper.DNSGuardSOFTWARE\Classes\MoviesToolbarHelper.DNSGuard.1SOFTWARE\Classes\SavevidPluginCore.PluginManagerSOFTWARE\Classes\SavevidPluginCore.PluginManager.1SOFTWARE\Classes\Wow6432Node\AppID\SavevidPluginCore.EXESoftware\imeshkoyotesoftmoviestoolbarSoftware\Microsoft\Internet Explorer\Approved Extensions\{338A754C-B46E-4BF2-8AC8-23DE36862AD3}Software\Microsoft\Internet Explorer\Approved Extensions\{C75A2D66-6D1D-4735-8F63-9D85DCC026A6}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\${dtUserElevationPolicyID}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3444c3c5-6c56-4a16-a453-832b05bf6ea4}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3d86a75b-cb6b-4764-885d-ca6336f04ba2}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c75a2d66-6d1d-4735-8f63-9d85dcc026a6}SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8473}SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2427}SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2446}SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2459}SOFTWARE\Microsoft\Internet Explorer\Toolbar\{08ae5e13-70cc-4fbb-ad00-ef4b90a44451}SOFTWARE\Microsoft\Internet Explorer\Toolbar\{3d86a75b-cb6b-4764-885d-ca6336f04ba2}SOFTWARE\Microsoft\Internet Explorer\Toolbar\{c75a2d66-6d1d-4735-8f63-9d85dcc026a6}SOFTWARE\Microsoft\Internet Explorer\Toolbar\{cc2542c4-3251-4ac4-845e-f7e742bbe6de}SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{3d86a75b-cb6b-4764-885d-ca6336f04ba2}Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c0caa5fe-7c9c-4dca-a265-63cf55379d1a}SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c75a2d66-6d1d-4735-8f63-9d85dcc026a6}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C75A2D66-6D1D-4735-8F63-9D85DCC026A6}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{338a754c-b46e-4bf2-8ac8-23de36862ad3}SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3D86A75B-CB6B-4764-885D-CA6336F04BA2}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C75A2D66-6D1D-4735-8F63-9D85DCC026A6}SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3D86A75B-CB6B-4764-885D-CA6336F04BA2}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C75A2D66-6D1D-4735-8F63-9D85DCC026A6}SOFTWARE\SafetyNutSoftware\SavevidSoftware\savevidmoviestoolbarhaSoftware\SomotoSoftware\somotomoviestoolbar1Software\somotomoviestoolbar181SOFTWARE\Wow6432Node\APNDTXSOFTWARE\Wow6432Node\Classes\AppID\SavevidPluginCore.EXESOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\${dtUserElevationPolicyID}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3444c3c5-6c56-4a16-a453-832b05bf6ea4}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3d86a75b-cb6b-4764-885d-ca6336f04ba2}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c75a2d66-6d1d-4735-8f63-9d85dcc026a6}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8473}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2446}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2459}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{08ae5e13-70cc-4fbb-ad00-ef4b90a44451}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{3d86a75b-cb6b-4764-885d-ca6336f04ba2}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{c75a2d66-6d1d-4735-8f63-9d85dcc026a6}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{cc2542c4-3251-4ac4-845e-f7e742bbe6de}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{3d86a75b-cb6b-4764-885d-ca6336f04ba2}Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c0caa5fe-7c9c-4dca-a265-63cf55379d1a}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C75A2D66-6D1D-4735-8F63-9D85DCC026A6}SOFTWARE\Wow6432Node\SafetyNutSYSTEM\ControlSet001\Enum\Root\LEGACY_F06DEFF2-5B9C-490D-910F-35D3A9119622SYSTEM\ControlSet001\services\DatamngrCoordinatorSYSTEM\ControlSet001\Services\F06DEFF2-5B9C-490D-910F-35D3A9119622SYSTEM\ControlSet001\services\F06DEFF2-5B9C-490D-910F-35D3A91196222SYSTEM\ControlSet001\services\SafetyNutManagerSYSTEM\ControlSet001\services\SavevidServiceSYSTEM\ControlSet002\Enum\Root\LEGACY_F06DEFF2-5B9C-490D-910F-35D3A9119622SYSTEM\ControlSet002\services\DatamngrCoordinatorSYSTEM\ControlSet002\Services\F06DEFF2-5B9C-490D-910F-35D3A9119622SYSTEM\ControlSet002\services\F06DEFF2-5B9C-490D-910F-35D3A91196222SYSTEM\ControlSet002\services\SafetyNutManagerSYSTEM\ControlSet002\services\SavevidServiceSYSTEM\CurrentControlSet\Enum\Root\LEGACY_F06DEFF2-5B9C-490D-910F-35D3A9119622SYSTEM\CurrentControlSet\services\DatamngrCoordinatorSYSTEM\CurrentControlSet\Services\F06DEFF2-5B9C-490D-910F-35D3A9119622SYSTEM\CurrentControlSet\services\F06DEFF2-5B9C-490D-910F-35D3A91196222SYSTEM\CurrentControlSet\services\SafetyNutManagerSYSTEM\CurrentControlSet\services\SavevidServiceHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}ilividmoviestoolbar20CRimeshkoyotesoftmoviestoolbarCRimeshkoyotesoftmoviestoolbarFFimeshkoyotesoftmoviestoolbarIESavevidsavevidmoviestoolbarhaCRsavevidmoviestoolbarhaFFsomotomoviestoolbar181CRsomotomoviestoolbar181FFsomotomoviestoolbar181IEsomotomoviestoolbar1CRsomotomoviestoolbar1FFsomotomoviestoolbar1IE

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\Application Data\SafetyNut%ALLUSERSPROFILE%\SafetyNut%LOCALAPPDATA%\ilividmoviestoolbar20%LOCALAPPDATA%\imeshkoyotesoftmoviestoolbar%LOCALAPPDATA%\imeshsavevidmoviestoolbar%LOCALAPPDATA%\savevidmoviestoolbarha%LOCALAPPDATA%\somotomoviestoolbar1%PROGRAMFILES%\Browser Tab Search by Ask\SafetyNut%PROGRAMFILES%\Movies App%PROGRAMFILES%\Savevid%PROGRAMFILES%\ilividmoviestoolbar20%PROGRAMFILES%\ilividmoviestoolbar280%PROGRAMFILES(x86)%\Browser Tab Search by Ask\SafetyNut%PROGRAMFILES(x86)%\Savevid%PROGRAMFILES(x86)%\ilividmoviestoolbar20%PROGRAMFILES(x86)%\ilividmoviestoolbar280%ProgramFiles%\Movies Toolbar%ProgramFiles(x86)%\Movies Toolbar%TEMP%\{2977d8cc-8902-4340-be88-2c676bf96b8d}%USERPROFILE%\AppData\LocalLow\ilividmoviestoolbar20%USERPROFILE%\AppData\LocalLow\imeshkoyotesoftmoviestoolbar%USERPROFILE%\AppData\LocalLow\savevidmoviestoolbarha%USERPROFILE%\AppData\LocalLow\somotomoviestoolbar1%USERPROFILE%\AppData\LocalLow\somotomoviestoolbar181%UserProfile%\Local Settings\Application Data\ilividmoviestoolbar20%UserProfile%\Local Settings\Application Data\imeshkoyotesoftmoviestoolbar%UserProfile%\Local Settings\Application Data\somotomoviestoolbar1
The following URL's were detected:
somotomoviestoolbar1

Related Posts

Loading...