Remove Malware and Viruses

WinProxy.and.Exploitable.Buffer.Overflow malware description and removal detail
Categories:DoS

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing WinProxy.and.Exploitable.Buffer.Overflow:

An up-to-date copy of ExterminateIt should detect and prevent infection from WinProxy.and.Exploitable.Buffer.Overflow.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove WinProxy.and.Exploitable.Buffer.Overflow manually.

To completely manually remove WinProxy.and.Exploitable.Buffer.Overflow malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with WinProxy.and.Exploitable.Buffer.Overflow.

1. Use Task Manager to terminate the WinProxy.and.Exploitable.Buffer.Overflow process.
2. Delete the original WinProxy.and.Exploitable.Buffer.Overflow file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Removing Pentpox Adware

Win.Phreak malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Win.Phreak:

An up-to-date copy of ExterminateIt should detect and prevent infection from Win.Phreak.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Win.Phreak manually.

To completely manually remove Win.Phreak malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win.Phreak.

1. Use Task Manager to terminate the Win.Phreak process.
2. Delete the original Win.Phreak file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Erkle Trojan Symptoms

Digger malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Kaspersky]Murphy.Digger

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Digger:

An up-to-date copy of ExterminateIt should detect and prevent infection from Digger.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Digger manually.

To completely manually remove Digger malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Digger.

1. Use Task Manager to terminate the Digger process.
2. Delete the original Digger file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
BackDoor.dr Trojan Removal

Pigeon.ALP malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.ALP:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.ALP.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Pigeon.ALP manually.

To completely manually remove Pigeon.ALP malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.ALP.

1. Use Task Manager to terminate the Pigeon.ALP process.
2. Delete the original Pigeon.ALP file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Desktop.Snooper Spyware Symptoms
Remove Win95.Win32Call Trojan

Dutch.Tiny malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Kaspersky]Dutch_Tiny.99.b,Dutch_Tiny.111.b,Mini.117,Small.122.b,Tiny.124;
[McAfee]Dutch Tiny,Univ/a;
[F-Prot]Dutch_Tiny.117,Dutch_Tiny.124.B;
[Panda]Dutch_Tiny(99.111),Dutch Tiny;
[Computer Associates]Dutch Tiny 99,Dutch 117,Dutch Tiny.122

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Dutch.Tiny:

An up-to-date copy of ExterminateIt should detect and prevent infection from Dutch.Tiny.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Dutch.Tiny manually.

To completely manually remove Dutch.Tiny malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Dutch.Tiny.

1. Use Task Manager to terminate the Dutch.Tiny process.
2. Delete the original Dutch.Tiny file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Remove STCPIO RAT
Isqptr04 Trojan Removal instruction
Trojanspy.Win32.Banker Spyware Information

Win32.VB.cs malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Win32.VB.cs:

An up-to-date copy of ExterminateIt should detect and prevent infection from Win32.VB.cs.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Win32.VB.cs manually.

To completely manually remove Win32.VB.cs malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.VB.cs.

1. Use Task Manager to terminate the Win32.VB.cs process.
2. Delete the original Win32.VB.cs file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Win32.Nulnuler Trojan Cleaner
Removing Expir Backdoor
Benuti.E!downloader Trojan Symptoms
PSW.Lmir.ec Trojan Symptoms

Vengence malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Kaspersky]Trivial.194,Vengence.613;
[Panda]Univ,Vengence,Vengence E.613,Vengence F.659;
[Computer Associates]Vengence A,Vengence B,Vengence C

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Vengence:

An up-to-date copy of ExterminateIt should detect and prevent infection from Vengence.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Vengence manually.

To completely manually remove Vengence malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vengence.

1. Use Task Manager to terminate the Vengence process.
2. Delete the original Vengence file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Ordnew Trojan Information
Backdoor.IRC.Smev Trojan Removal instruction

Bancos.HTC malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bancos.HTC:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bancos.HTC.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Bancos.HTC manually.

To completely manually remove Bancos.HTC malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.HTC.

1. Use Task Manager to terminate the Bancos.HTC process.
2. Delete the original Bancos.HTC file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Leodon Downloader Information
Charaho Trojan Cleaner

Sin.Cyn malware description and removal detail
Categories:Backdoor,Hacker Tool
Also known as:

[Kaspersky]Backdoor.Cyn.22;
[McAfee]BackDoor-PB;
[F-Prot]security risk or a "backdoor" program;
[Panda]Backdoor Program,Bck/Cyn;
[Computer Associates]Backdoor/Cyn.2.2,Backdoor/Cyn.22

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Sin.Cyn:

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Sin.Cyn:

An up-to-date copy of ExterminateIt should detect and prevent infection from Sin.Cyn.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Sin.Cyn manually.

To completely manually remove Sin.Cyn malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Sin.Cyn.

1. Use Task Manager to terminate the Sin.Cyn process.
2. Delete the original Sin.Cyn file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Iddono Backdoor Removal instruction

[X].ztoo malware description and removal detail
Categories:Backdoor

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing [X].ztoo:

An up-to-date copy of ExterminateIt should detect and prevent infection from [X].ztoo.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove [X].ztoo manually.

To completely manually remove [X].ztoo malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with [X].ztoo.

1. Use Task Manager to terminate the [X].ztoo process.
2. Delete the original [X].ztoo file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Mirror.II Trojan Cleaner
AdGoblin.plathping Hijacker Symptoms
Vxidl.ARZ Trojan Removal
Peper Trojan Symptoms

BCB malware description and removal detail
Categories:Trojan
Also known as:

[Kaspersky]Trojan.win32.BCB.k;
[Other]Win32/BCB.B,Backdoor.Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing BCB:

An up-to-date copy of ExterminateIt should detect and prevent infection from BCB.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove BCB manually.

To completely manually remove BCB malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with BCB.

1. Use Task Manager to terminate the BCB process.
2. Delete the original BCB file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Removing lativio.com Tracking Cookie
Pigeon.AUO Trojan Removal instruction
Landmine DoS Removal instruction
Samsa Trojan Symptoms
DerBiz Adware Removal

Setup.akl1 malware description and removal detail
Categories:Spyware

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Setup.akl1:

An up-to-date copy of ExterminateIt should detect and prevent infection from Setup.akl1.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Setup.akl1 manually.

To completely manually remove Setup.akl1 malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Setup.akl1.

1. Use Task Manager to terminate the Setup.akl1 process.
2. Delete the original Setup.akl1 file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Removing Lynch0 Trojan
BAT.Uisgon Trojan Symptoms
Arab RAT Cleaner
Sepro Trojan Symptoms

Small.chd malware description and removal detail
Categories:Downloader

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Small.chd:

An up-to-date copy of ExterminateIt should detect and prevent infection from Small.chd.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Small.chd manually.

To completely manually remove Small.chd malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Small.chd.

1. Use Task Manager to terminate the Small.chd process.
2. Delete the original Small.chd file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Virtual.Bouncer.Remover Adware Removal

JS.Codebase malware description and removal detail
Categories:Trojan,Downloader,Hacker Tool
Also known as:

[Kaspersky]TrojanDropper.JS.Mimail.b;
[Eset]Win32/TrojanDownloader.Small.AC trojan;
[Computer Associates]JS.CodeBase.exploit

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing JS.Codebase:

An up-to-date copy of ExterminateIt should detect and prevent infection from JS.Codebase.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove JS.Codebase manually.

To completely manually remove JS.Codebase malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with JS.Codebase.

1. Use Task Manager to terminate the JS.Codebase process.
2. Delete the original JS.Codebase file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Banbra.bh Spyware Removal
Banker.BQ Trojan Removal instruction
Removing Mydf Trojan
Removing Mut.int Trojan
Pigeon.AVPB Trojan Symptoms

FireNet malware description and removal detail
Categories:Trojan,Backdoor,RAT
Also known as:

[Kaspersky]Backdoor.VB.gen;
[Panda]Trojan Horse

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing FireNet:

An up-to-date copy of ExterminateIt should detect and prevent infection from FireNet.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove FireNet manually.

To completely manually remove FireNet malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with FireNet.

1. Use Task Manager to terminate the FireNet process.
2. Delete the original FireNet file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Win32.Secdrop Trojan Information
Remove Bancos.GXH Trojan
Thiepchuchmung RAT Removal
Removing Adult.Content Adware
DKAngel Trojan Information

TrojanDownloader.Win32.Istbar.cl malware description and removal detail
Categories:Downloader
Also known as:

[Panda]Spyware/ISTbar

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing TrojanDownloader.Win32.Istbar.cl:

An up-to-date copy of ExterminateIt should detect and prevent infection from TrojanDownloader.Win32.Istbar.cl.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove TrojanDownloader.Win32.Istbar.cl manually.

To completely manually remove TrojanDownloader.Win32.Istbar.cl malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with TrojanDownloader.Win32.Istbar.cl.

1. Use Task Manager to terminate the TrojanDownloader.Win32.Istbar.cl process.
2. Delete the original TrojanDownloader.Win32.Istbar.cl file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Cascade Trojan Information
Removing SpecialOffers Adware
Q3Smash Trojan Removal
Bancos.HSE Trojan Cleaner
Phokem Trojan Removal instruction

Smoke malware description and removal detail
Categories:Downloader

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Smoke:

An up-to-date copy of ExterminateIt should detect and prevent infection from Smoke.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Smoke manually.

To completely manually remove Smoke malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Smoke.

1. Use Task Manager to terminate the Smoke process.
2. Delete the original Smoke file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
FasterXP Adware Information
Musliv Trojan Removal instruction

Spot.www malware description and removal detail
Categories:Downloader

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Spot.www:

An up-to-date copy of ExterminateIt should detect and prevent infection from Spot.www.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Spot.www manually.

To completely manually remove Spot.www malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Spot.www.

1. Use Task Manager to terminate the Spot.www process.
2. Delete the original Spot.www file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Small.cyh Downloader Information
PWS.Msnfake Trojan Information

Windows.Search.Bar malware description and removal detail
Categories:BHO,Hijacker,Toolbar
Visible Symptoms:
Files in system folders:
[%SYSTEM%]\winsb.dll
[%WINDOWS%]\system\winsb.dll
[%SYSTEM%]\winsb.dll
[%WINDOWS%]\system\winsb.dll

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Windows.Search.Bar:

Files:
[%SYSTEM%]\winsb.dll
[%WINDOWS%]\system\winsb.dll
[%SYSTEM%]\winsb.dll
[%WINDOWS%]\system\winsb.dll

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{1e432263-6841-4653-8f02-366a2f77e339}
HKEY_CLASSES_ROOT\CLSID\{9FB534E3-67CB-4307-AE0A-9E8B5581BE2C}
HKEY_CLASSES_ROOT\CLSID\{A1DD937D-71E1-4BB5-BD5D-1B01B9CB1C2F}
HKEY_CLASSES_ROOT\windowssb.autosearch
HKEY_CLASSES_ROOT\windowssb.autosearch.1
HKEY_CLASSES_ROOT\windowssb.band
HKEY_CLASSES_ROOT\windowssb.band.1
HKEY_CLASSES_ROOT\windowssb.eventhandler
HKEY_CLASSES_ROOT\windowssb.eventhandler.1
HKEY_LOCAL_MACHINE\software\classes\clsid\{9fb534e3-67cb-4307-ae0a-9e8b5581be2c}
HKEY_LOCAL_MACHINE\software\classes\clsid\{a1dd937d-71e1-4bb5-bd5d-1b01b9cb1c2f}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FB534E3-67CB-4307-AE0A-9E8B5581BE2C}
HKEY_CLASSES_ROOT\clsid\{9fb534e3-67cb-4307-ae0a-9e8b5581be2c}
HKEY_CLASSES_ROOT\clsid\{a1dd937d-71e1-4bb5-bd5d-1b01b9cb1c2f}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{9fb534e3-67cb-4307-ae0a-9e8b5581be2c}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9fb534e3-67cb-4307-ae0a-9e8b5581be2c}

Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar

Removing Windows.Search.Bar:

An up-to-date copy of ExterminateIt should detect and prevent infection from Windows.Search.Bar.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Windows.Search.Bar manually.

To completely manually remove Windows.Search.Bar malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Windows.Search.Bar.

1. Use Task Manager to terminate the Windows.Search.Bar process.
2. Delete the original Windows.Search.Bar file and folders.
3. Delete the system registry key parameters
4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

Also Be Aware of the Following Threats:
Vxidl.AQJ Trojan Removal instruction
Zvel4449 Trojan Information
Skc Trojan Information

Iceland malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Kaspersky]Saratoga.656,Saratoga.632.a,Mix.1636;
[Eset]Icelndic.656.A virus,Icelndic.632.A virus,Icelndic.1636 virus;
[McAfee]Iceland;
[F-Prot]Icelandic.1636;
[Panda]Icelandic.650;
[Computer Associates]Icelandic 1,Icelandic-2,Icelandic 2,Icelandic-3,Mix 1b,Mix1-B
Visible Symptoms:
Files in system folders:
[%WINDOWS%]\winsys.exe
[%WINDOWS%]\winsys.exe

In order to ensure that the Iceland is launched automatically each time the system is booted, the Iceland adds a link to its executable file in the system registry:
HKLM\Microsoft\Windows\CurrentVersion\Run
[%WINDOWS%]\winsys.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista