Saturday, November 8, 2008

Unknown.Toolbar6 BHO

How To Remove Unknown.Toolbar6?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Unknown.Toolbar6 is dangerous virus:
The BHO (Browser Helper Object) waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.
Toolbar presents itself as a helpful add-on for Internet Explorer but it is a real pest.

Unknown.Toolbar6 Symptoms:

Files:
[%PROGRAM_FILES%]\intern~2\4third.exe
[%PROGRAM_FILES%]\intern~2\hope curb.exe
[%PROGRAM_FILES%]\intern~2\long.exe
[%PROGRAM_FILES%]\intern~2\up meta.exe
[%PROGRAM_FILES%]\second~1\3655.exe
[%PROGRAM_FILES%]\second~1\axispoll.dll
[%PROGRAM_FILES%]\second~1\baittick.dll
[%PROGRAM_FILES%]\intern~2\4third.exe
[%PROGRAM_FILES%]\intern~2\hope curb.exe
[%PROGRAM_FILES%]\intern~2\long.exe
[%PROGRAM_FILES%]\intern~2\up meta.exe
[%PROGRAM_FILES%]\second~1\3655.exe
[%PROGRAM_FILES%]\second~1\axispoll.dll
[%PROGRAM_FILES%]\second~1\baittick.dll

Folders:
[%PROGRAM_FILES%]\playbind
[%PROGRAM_FILES%]\sendpe~1

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{0820a243-cb96-9380-3a55-c273e5ade7b7}
HKEY_CLASSES_ROOT\clsid\{2ce58e7c-c2a4-ca87-787b-00b6f09f2cab}
HKEY_CLASSES_ROOT\clsid\{823b4790-b3f5-ee67-1d37-2807033272bc}
HKEY_CLASSES_ROOT\clsid\{9f056c01-9ad4-c0c5-8c63-da73d8888f29}
HKEY_LOCAL_MACHINE\software\classes\clsid\{0820a243-cb96-9380-3a55-c273e5ade7b7}
HKEY_LOCAL_MACHINE\software\classes\clsid\{2ce58e7c-c2a4-ca87-787b-00b6f09f2cab}
HKEY_LOCAL_MACHINE\software\classes\clsid\{823b4790-b3f5-ee67-1d37-2807033272bc}
HKEY_LOCAL_MACHINE\software\classes\clsid\{9f056c01-9ad4-c0c5-8c63-da73d8888f29}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9f056c01-9ad4-c0c5-8c63-da73d8888f29}

Registry Values:
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:

No comments: