Friday, November 21, 2008

CouponBar Toolbar

Removing CouponBar
Categories: Toolbar,Adware
Toolbar presents itself as a helpful add-on for Internet Explorer but it is a real pest.Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

Visible Symptoms:
Files in system folders:
[%WINDOWS%]\CouponBarIE.dll
[%WINDOWS%]\cpbrkpie.ocx
[%WINDOWS%]\couponbar.dll
[%WINDOWS%]\CouponBarIE.dll
[%WINDOWS%]\cpbrkpie.ocx
[%WINDOWS%]\couponbar.dll

How to detect CouponBar:

Files:
[%WINDOWS%]\CouponBarIE.dll
[%WINDOWS%]\cpbrkpie.ocx
[%WINDOWS%]\couponbar.dll
[%WINDOWS%]\CouponBarIE.dll
[%WINDOWS%]\cpbrkpie.ocx
[%WINDOWS%]\couponbar.dll

Registry Keys:
HKEY_CLASSES_ROOT\CLSID\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
HKEY_CLASSES_ROOT\CLSID\{A85A5E6A-DE2C-4F4E-99DC-F469DF5A0EEC}
HKEY_CLASSES_ROOT\cpbrkpie.Coupon6Ctrl.1
HKEY_CLASSES_ROOT\Interface\{6E780F0B-BCD6-40CB-B2DB-7AF47AB4D4A4}
HKEY_CLASSES_ROOT\Interface\{A138BE8B-F051-4802-9A3F-A750A6D862D4}
HKEY_CLASSES_ROOT\typelib\{87255c51-cd7d-4506-b9ad-97606daf53f3}
HKEY_CLASSES_ROOT\CLSID\{5BED3930-2E9E-76D8-BACC-80DF2188D455}
HKEY_CLASSES_ROOT\CLSID\{62960D20-6D0D-1AB4-4BF1-95B0B5B8783A}
HKEY_CLASSES_ROOT\Interface\{0D700D4A-F8C1-8888-C5BA-CB09D464A4E8}
HKEY_CLASSES_ROOT\Interface\{6D69B86A-B94C-59EE-BCB8-5F5DF46B2BE8}
HKEY_CLASSES_ROOT\ToolBand.TTB000000
HKEY_CLASSES_ROOT\TTB000001.IEToolbar
HKEY_CURRENT_USER\Software\TTB000001
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{62960D20-6D0D-1AB4-4BF1-95B0B5B8783A}
HKEY_CLASSES_ROOT\clsid\{9522b3fb-7a2b-4646-8af6-36e7f593073c}
HKEY_CLASSES_ROOT\clsid\{a85a5e6a-de2c-4f4e-99dc-f469df5a0eec}
HKEY_CLASSES_ROOT\clsid\{fb986a68-eae4-11d4-9bd1-0080c6f60b6a}
HKEY_CLASSES_ROOT\cpbrkpie.coupon6ctrl.1
HKEY_CLASSES_ROOT\interface\{6e780f0b-bcd6-40cb-b2db-7af47ab4d4a4}
HKEY_CLASSES_ROOT\interface\{a138be8b-f051-4802-9a3f-a750a6d862d4}
HKEY_LOCAL_MACHINE\software\classes\clsid\{fb986a68-eae4-11d4-9bd1-0080c6f60b6a}

Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shell extensions\approved

Removing CouponBar:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
NetPal BHO Information
Ljjw Trojan Removal instruction

No comments: