Monday, November 10, 2008

DLSearchBar Hijacker

Removing DLSearchBar
Categories: Hijacker
A desktop hijacker replaces the desktop wallpaper with advertising
for products and services on the desktop.

How to detect DLSearchBar:

Registry Keys:
HKEY_CLASSES_ROOT\catalyst.httpclientctrl.1
HKEY_CLASSES_ROOT\clsid\{01fc5803-8644-45d7-877b-5a3924d8ecc4}
HKEY_CLASSES_ROOT\clsid\{aa8c93e1-7e5f-497e-b67c-cc8fe2a40d3b}
HKEY_CLASSES_ROOT\clsid\{edd6ba26-9ebb-11d2-b89c-00104b30757b}
HKEY_CLASSES_ROOT\clsid\{edd6ba27-9ebb-11d2-b89c-00104b30757b}
HKEY_CLASSES_ROOT\imgconv.clsimgconv
HKEY_CLASSES_ROOT\interface\{2ddd90d6-f153-4ea7-a324-4b2d83d1027e}
HKEY_CLASSES_ROOT\interface\{68831d00-169e-4feb-89b9-e099df439321}
HKEY_CLASSES_ROOT\interface\{9ce15eb5-6b39-4656-9e1f-2d219ee42e0e}
HKEY_CLASSES_ROOT\interface\{edd6ba24-9ebb-11d2-b89c-00104b30757b}
HKEY_CLASSES_ROOT\interface\{edd6ba25-9ebb-11d2-b89c-00104b30757b}
HKEY_CLASSES_ROOT\clsid\{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}\inprocserver32
HKEY_CLASSES_ROOT\clsid\{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}\inprocserver32 threadingmodel apartment
HKEY_CLASSES_ROOT\clsid\{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}\inprocserver32 [%SYSTEM%]\srchbar.dll
HKEY_CLASSES_ROOT\clsid\{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}\progid
HKEY_CLASSES_ROOT\clsid\{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}\progid searchbartoolbar.searchbar
HKEY_CLASSES_ROOT\clsid\{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}\typelib
HKEY_CLASSES_ROOT\clsid\{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}\version
HKEY_CLASSES_ROOT\clsid\{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}\version 2.0
HKEY_CLASSES_ROOT\searchbartoolbar.isubclass
HKEY_CLASSES_ROOT\searchbartoolbar.isubclass searchbartoolbar.isubclass
HKEY_CLASSES_ROOT\searchbartoolbar.searchbar
HKEY_CLASSES_ROOT\searchbartoolbar.searchbar search bar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\search bar displayname search bar

Registry Values:
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls

Removing DLSearchBar:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:

No comments: