Remove Malware and Viruses

IEBAR malware description and removal detail
Categories:Hijacker,Toolbar
Visible Symptoms:
Files in system folders:
[%WINDOWS%]\Downloaded Program Files\barhelp24.0.dll
[%WINDOWS%]\Downloaded Program Files\iebar.inf
[%WINDOWS%]\Downloaded Program Files\iebar23.0.dll
[%WINDOWS%]\Downloaded Program Files\barhelp24.0.dll
[%WINDOWS%]\Downloaded Program Files\iebar.inf
[%WINDOWS%]\Downloaded Program Files\iebar23.0.dll

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting IEBAR:

Files:
[%WINDOWS%]\Downloaded Program Files\barhelp24.0.dll
[%WINDOWS%]\Downloaded Program Files\iebar.inf
[%WINDOWS%]\Downloaded Program Files\iebar23.0.dll
[%WINDOWS%]\Downloaded Program Files\barhelp24.0.dll
[%WINDOWS%]\Downloaded Program Files\iebar.inf
[%WINDOWS%]\Downloaded Program Files\iebar23.0.dll

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{56a7dc70-e102-4408-a34a-ae06fef01586}
HKEY_CURRENT_USER\software\hdt
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\ext\stats\{56a7dc70-e102-4408-a34a-ae06fef01586}
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\ext\stats\{b1d147e7-873e-4909-8127-695d9bb78728}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{56a7dc70-e102-4408-a34a-ae06fef01586}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:\windows\downloaded program files\barhelp24.0.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:\windows\downloaded program files\iebar23.0.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:\windows\downloaded program files\toolbar.bmp
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:\windows\downloaded program files\winio.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:\windows\downloaded program files\winio.sys
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:\windows\downloaded program files\winio.vxd
HKEY_CLASSES_ROOT\clsid\{3b076ce5-601e-4a74-9548-4197fd5b4b1e}
HKEY_CLASSES_ROOT\clsid\{b1d147e7-873e-4909-8127-695d9bb78728}
HKEY_CLASSES_ROOT\downloadbho.t2bho
HKEY_CLASSES_ROOT\downloadbho.t2bho.1
HKEY_CLASSES_ROOT\interface\{5e186ddb-6152-4c73-a7d4-4899140178e9}
HKEY_CLASSES_ROOT\interface\{691cc615-cd3f-41ff-920d-60769d3dcf5b}
HKEY_CLASSES_ROOT\interface\{9aaabfe1-22a9-4e0d-8f4a-48b9696a199b}
HKEY_CLASSES_ROOT\interface\{b93a0050-ac9e-4609-b55b-a4064bfd0059}
HKEY_CLASSES_ROOT\lanbar3.multimediasite
HKEY_CLASSES_ROOT\lanbar3.multimediasite.1
HKEY_CLASSES_ROOT\lan_bar.lan_barobj
HKEY_CLASSES_ROOT\lan_bar.lan_barobj.1
HKEY_CLASSES_ROOT\typelib\{1f77f67e-bd08-4932-af5a-15fd532eedb1}
HKEY_CLASSES_ROOT\typelib\{e35306d7-b44c-4530-a2ce-94c60f8cc4dc}
HKEY_CURRENT_USER\software\lan\lanbar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{b1d147e7-873e-4909-8127-695d9bb78728}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\barhelp24.0.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\iebar23.0.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\toolbar.bmp
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\urlinfo.xml
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\winio.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\winio.sys
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\winio.vxd
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\lanbar

Registry Values:
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/hdtbar.xml
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/hdtbar.xml
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls

Removing IEBAR:

An up-to-date copy of ExterminateIt should detect and prevent infection from IEBAR.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove IEBAR manually.

To completely manually remove IEBAR malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with IEBAR.

1. Use Task Manager to terminate the IEBAR process.
2. Delete the original IEBAR file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Win16.Cluck Trojan Cleaner
Cracking.Tool Trojan Cleaner