Browser hijack by babylon/delta

[cameo]

I had that same hijacker, and 5 or 6 different methods I tried
would not remove it. Someone then pointed me to Hitman Pro, which
was the only tool that finally got rid of it.

http://download.cnet.com/HitmanPro-...aid=download.hitman pro-e&dlc=n&part=fivemill

Good luck,
George

After trying several manual steps to get rid off both babylon and delta,
I stumbled on the solution.
A had to remove them from the list of extensions, plus a couple menubars
whose name now I forgot and that seemed to do the trick for both Chrome
and IE.
I suspect I got the infection when I recently downloaded the GOM video
player with its codecs from download.dot and I missed to uncheck some
box during installation.

 

[housetrained]

"cameo" wrote in message news:[email protected]...

I've just noticed that the Chrome search engine on my new Win8 laptop is
no longer Google, but search.babylon.com. A second tab on it also opens
at start time, but with delta-search.com.

I've seen here some prior messaging about this nasty babylon browser
hijacker but nobody mentioned its accomplice, delta. I could not remove
them with the traditional methods because they don't show up in the
Control Panel's uninstall program list and changing the default search
engine in the Option screen doesn't work, either.
I wonder if anybody tried the removal method offered by the babylon.com
web site. I don't trust anything that the makers of such nasty malware
advise. It could just lead to more malware installed.

BTW, the IE also is infected and not even MalwareBytes detects them.

Use 'System Restore'

 

[Bucky Breeder]

George has written on 6/17/2013 1:38 PM:

<http://www.majorgeeks.com/files/details/hitman_pro.html> avoids the
nonsense that CNET puts forth.

$18/year.

"... only tool that finally got rid of it."

(I tip the pizza girl more than that)

--

I AM Bucky Breeder, (*(^; and , EVERYBODY SING :

"NSA sees you when you're sleeping;
NSA knows when you're awake;
NSA knows if you've been bad or good;
So, be good for goodness sake!"

"All your phone calls are belong to us!" -- NSA

 

[generic name]

After trying several manual steps to get rid off both babylon and delta,
I stumbled on the solution.
A had to remove them from the list of extensions, plus a couple menubars
whose name now I forgot and that seemed to do the trick for both Chrome
and IE.
I suspect I got the infection when I recently downloaded the GOM video
player with its codecs from download.dot and I missed to uncheck some
box during installation.

Since the search engine got changed to "Bing", perhaps it is what
microsoft paid to have done????

 

[generic name]

Since the search engine got changed to "Bing", perhaps it is what
microsoft paid to have done????

Forgot to add that you might also go into uninstall programs to
uninstall "internet explorer by sweetpacks 4.8 toolbar". cnet is
really a trojan/virus/bot/malware site & should be reported as so.

 

[Mitch Bujard]

I know it is possible because I have removed it myself but it was such
a long time ago that I can't remember the details. I can tell you
though that this one's a tough nut to crack. But it CAN be cracked.

Malwarebytes probably doesn't see it as malware. It is a legit program
that you install even if you install it unwittingly. Beware of
installing freebees with such piggy back programs. Always Custom
install any such programs.

There are many such scandrels who hijack the browsr settings. And even
System restore can't seem to remove the unwanted apps.

The ultimate removal procedure, under the hood but really toxic for
these nuisances is at such :

- look in the C:\programs folder, or c:\programs(86)
- Remove the folder by the name of the intrusive program. You will need
to confirm. If the folder cannot beremoved because a file is busy,
rename it. For instance rename Delta as goaway-Delta. It will
inactivate the program for next time you start your machine.
- Start the Command line tool in Accessories/System
- type Resedit
- Search for all occurences of Delta and delete the corresponding keys

This procedure removes all mentions of the program. It is not
recommended for beginners, because it is extremely powerful.

For the browser settings, simply replace the unwanted start page by the
original, and the search engine by your choice.

Hope this helps.

Mitch Bujard
SchoolFonts.com