Remove Malware and Viruses

YourSiteBar malware description and removal detail
Categories:Adware,Toolbar
Also known as:

[Panda]Adware/Envolo
Visible Symptoms:
Files in system folders:
[%PROFILE_TEMP%]\shortcuts.txt
[%PROGRAM_FILES%]\YourSiteBar\imagemap_normal.bmp
[%PROGRAM_FILES%]\YourSiteBar\version.txt
[%PROGRAM_FILES%]\YourSiteBar\yoursitebar.xml
[%PROGRAM_FILES%]\YourSiteBar\ysb.dll
[%PROFILE_TEMP%]\shortcuts.txt
[%PROGRAM_FILES%]\YourSiteBar\imagemap_normal.bmp
[%PROGRAM_FILES%]\YourSiteBar\version.txt
[%PROGRAM_FILES%]\YourSiteBar\yoursitebar.xml
[%PROGRAM_FILES%]\YourSiteBar\ysb.dll

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting YourSiteBar:

Files:
[%PROFILE_TEMP%]\shortcuts.txt
[%PROGRAM_FILES%]\YourSiteBar\imagemap_normal.bmp
[%PROGRAM_FILES%]\YourSiteBar\version.txt
[%PROGRAM_FILES%]\YourSiteBar\yoursitebar.xml
[%PROGRAM_FILES%]\YourSiteBar\ysb.dll
[%PROFILE_TEMP%]\shortcuts.txt
[%PROGRAM_FILES%]\YourSiteBar\imagemap_normal.bmp
[%PROGRAM_FILES%]\YourSiteBar\version.txt
[%PROGRAM_FILES%]\YourSiteBar\yoursitebar.xml
[%PROGRAM_FILES%]\YourSiteBar\ysb.dll

Folders:
[%COMMON_FAVORITES%]\shop
[%FAVORITES%]\going places
[%FAVORITES%]\living
[%FAVORITES%]\shop
[%FAVORITES%]\technology
[%PROGRAM_FILES%]\yoursitebar

Registry Keys:
HKEY_CLASSES_ROOT\CLSID\{86227D9C-0EFE-4F8A-AA55-30386A3F5686}
HKEY_CLASSES_ROOT\Interface\{03B800F9-2536-4441-8CDA-2A3E6D15B4F8}
HKEY_CLASSES_ROOT\Interface\{DFBCC1EB-B149-487E-80C1-CC1562021542}
HKEY_CLASSES_ROOT\TypeLib\{4EE12B71-AA5E-45EC-8666-2DB3AD3FDF44}
HKEY_CLASSES_ROOT\Ysb.YsbObj
HKEY_CLASSES_ROOT\Ysb.YsbObj.1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{42F2C9BA-614F-47C0-B3E3-ECFD34EED658}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:\windows\downloaded program files\ysbactivex.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\YourSiteBar
HKEY_LOCAL_MACHINE\SOFTWARE\YourSiteBar
HKEY_CLASSES_ROOT\Interface\{7B9A715E-9D87-4C21-BF9E-F914F2FA953F}
HKEY_CLASSES_ROOT\Interface\{EAF2CCEE-21A1-4203-9F36-4929FD104D43}
HKEY_CLASSES_ROOT\Typelib\{6D3F5DE4-E980-4407-A10F-9AC771ABAAE6}
HKEY_CLASSES_ROOT\clsid\{7157b9a3-0283-03be-09d8-5474069e934}
HKEY_CLASSES_ROOT\clsid\{76825395-073d-2f38-25f0-8912a7d8f08}
HKEY_CLASSES_ROOT\clsid\{86227d9c-0efe-4f8a-aa55--30386a3f5686}
HKEY_CLASSES_ROOT\clsid\{86227d9c-0efe-4f8a-aa55-30386a3f5686}
HKEY_CLASSES_ROOT\interface\{03b800f9-2536-4441-8cda-2a3e6d15b4f8}
HKEY_CLASSES_ROOT\interface\{dfbcc1eb-b149-487e-80c1-cc1562021542}
HKEY_CLASSES_ROOT\typelib\{4ee12b71-aa5e-45ec-8666-2db3ad3fdf44}
HKEY_CLASSES_ROOT\ysb.ysbobj
HKEY_CLASSES_ROOT\ysb.ysbobj.1
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{42f2c9ba-614f-47c0-b3e3-ecfd34eed658}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\ysbactivex.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\yoursitebar
HKEY_LOCAL_MACHINE\software\yoursitebar

Registry Values:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls

Removing YourSiteBar:

An up-to-date copy of ExterminateIt should detect and prevent infection from YourSiteBar.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove YourSiteBar manually.

To completely manually remove YourSiteBar malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with YourSiteBar.

1. Use Task Manager to terminate the YourSiteBar process.
2. Delete the original YourSiteBar file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Upchan Trojan Cleaner
SillyDl.CUB Trojan Removal
Removing EventLogClear RAT
Internet.Remote.Control RAT Removal
Remove SillyDl.BZS Trojan