ToolBar.Bybar
|
Description:
|
Toolbar
|
|
Risk Level:
|
Low
|
|
Date of First Occurence:
|
Tuesday, July 10, 2007
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
Toolbar/adware that creates pop-ups and advertisements on an infected computer.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
SCAN & REMOVE NOW »
Geographical Distribution of Threat "ToolBar.Bybar"
Threat Info
View All
Detecting items list:
- Files by Name
%PROGRAMFILES%\ByToolbar\ByToolbar1\BYToolbar1.dll
%PROGRAMFILES%\ByToolbar\ByToolbar1\ByToolbar1.exe
%PROGRAMFILES%\ByToolbar\ByToolbar1\dbcache.dll
%PROGRAMFILES%\ByToolbar\ByToolbar1\MaiSQLite.dll
%PROGRAMFILES%\ByToolbar\ByToolbar1\RunPopup.exe
%PROGRAMFILES%\ByToolbar\ByToolbar2\BYToolbar2.dll
%PROGRAMFILES%\ByToolbar\ByToolbar2\ByToolbar2.exe
%PROGRAMFILES%\ByToolbar\ByToolbar2\dbcache.dll
%PROGRAMFILES%\ByToolbar\ByToolbar2\LInstall.exe
%PROGRAMFILES%\ByToolbar\ByToolbar2\MaiSQLite.dll
%PROGRAMFILES%\ByToolbar\ByToolbar2\RunPopup.exe
%TEMP%\ByToolbar1.exe
- Files by Directories
%PROGRAMFILES%\ByToolbar
- Files by CLSID or Name
CLSID=38027849-06B9-4FCF-8509-A037409469F4
CLSID=9F7B92E8-D3BF-4849-9BEF-46C04D4AEB8E
- Registry Keys
HKCR\DoobuToolBar.DoobuBar
HKCR\DoobuToolBar.DoobuBar.1
HKCU\Software\ByToolbar
HKCU\Software\ByToolbar1
HKCU\Software\ByToolbar2
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{38027849-06B9-4FCF-8509-A037409469F4}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9F7B92E8-D3BF-4849-9BEF-46C04D4AEB8E}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bytoolbar1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bytoolbar2
- Registry Values
HKCU\Software\Microsoft\Windows\CurrentVersion\Run ValueName=ByToolbar1
HKCU\Software\Microsoft\Windows\CurrentVersion\Run ValueName=ByToolbar2
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar ValueName={9F7B92E8-D3BF-4849-9BEF-46C04D4AEB8E}
«
Go to Software Database
