DLSearchBar Hijacker

DLSearchBar virus description
Technical details:
Categories: Hijacker

DLSearchBar Registry Keys:
HKEY_CLASSES_ROOT\catalyst.httpclientctrl.1
HKEY_CLASSES_ROOT\clsid\{01fc5803-8644-45d7-877b-5a3924d8ecc4}
HKEY_CLASSES_ROOT\clsid\{aa8c93e1-7e5f-497e-b67c-cc8fe2a40d3b}
HKEY_CLASSES_ROOT\clsid\{edd6ba26-9ebb-11d2-b89c-00104b30757b}
HKEY_CLASSES_ROOT\clsid\{edd6ba27-9ebb-11d2-b89c-00104b30757b}
HKEY_CLASSES_ROOT\imgconv.clsimgconv
HKEY_CLASSES_ROOT\interface\{2ddd90d6-f153-4ea7-a324-4b2d83d1027e}
HKEY_CLASSES_ROOT\interface\{68831d00-169e-4feb-89b9-e099df439321}
HKEY_CLASSES_ROOT\interface\{9ce15eb5-6b39-4656-9e1f-2d219ee42e0e}
HKEY_CLASSES_ROOT\interface\{edd6ba24-9ebb-11d2-b89c-00104b30757b}
HKEY_CLASSES_ROOT\interface\{edd6ba25-9ebb-11d2-b89c-00104b30757b}
HKEY_CLASSES_ROOT\clsid\{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}\inprocserver32
HKEY_CLASSES_ROOT\clsid\{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}\inprocserver32 threadingmodel apartment
HKEY_CLASSES_ROOT\clsid\{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}\inprocserver32 [%SYSTEM%]\srchbar.dll
HKEY_CLASSES_ROOT\clsid\{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}\progid
HKEY_CLASSES_ROOT\clsid\{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}\progid searchbartoolbar.searchbar
HKEY_CLASSES_ROOT\clsid\{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}\typelib
HKEY_CLASSES_ROOT\clsid\{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}\version
HKEY_CLASSES_ROOT\clsid\{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}\version 2.0
HKEY_CLASSES_ROOT\searchbartoolbar.isubclass
HKEY_CLASSES_ROOT\searchbartoolbar.isubclass searchbartoolbar.isubclass
HKEY_CLASSES_ROOT\searchbartoolbar.searchbar
HKEY_CLASSES_ROOT\searchbartoolbar.searchbar search bar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\search bar displayname search bar

DLSearchBar Registry Values:
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls


DLSearchBar indications of infection

This symptoms of DLSearchBar detection are the files, registry, and network communication referenced in the technical details section.
Method of Infection
Trojans do not self-replicate. They are spread manually, often under the premise that the executable is something beneficial.Distribution channels include IRC, peer-to-peer networks, newsgroup postings, e-mail, etc.
Buy Exterminate-It antivirus software and perform a full scan of the computer.
You can also Download Free Trial Version of ExterminateIt! to check your your computer just NOW.

Also Be Aware of the Following Threats:
Small.ga Downloader Information
Bancos.HQF Trojan Information
Zlob.Fam.MPVideoCodec Trojan Cleaner
Belcaro.GoldenRetriever Spyware Removal
Win32.Swyque!Flooder!Trojan DoS Removal instruction

No comments: