Adware.MBKWbar

Printer Friendly Page

Updated: February 13, 2007 11:45:35 AM
Type: Adware
Risk Impact: Medium
File Names: MBKWBar.exe IEToolbar.dll
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP


When Adware.Appoli is executed, it performs the following actions:
  1. Creates the following file:

    • %ProgramFiles%\MBKWBar\IEToolBar.dll

      Note: %ProgramFiles% is a variable that refers to the program files folder. By default, this is C:\Program Files.

  2. Creates the following registry keys:

    HKEY_CLASSES_ROOT\CLSID\{EA5A82FB-D6BE-44F9-9363-B1ABABC153C1}
    HKEY_CLASSES_ROOT\IEToolBar.ToolBarImpl.1
    HKEY_CLASSES_ROOT\IEToolBar.ToolBarImpl
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\MBKWBar
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Typelib\{4A7DBA74-E729-4EC8-92E2-FFD83921449F}
    HKEY_CLASSES_ROOT\TypeLib\{4A7DBA74-E729-4EC8-92E2-FFD83921449F}
    HKEY_CURRENT_USER\Software\MBKWBar
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\{EA5A82FB-D6BE-44F9-9363-B1ABABC153C1}


  3. Connects to the domains config.mbkwbar.com and report.mbkwbar.com to register itself and to download configuration parameters.

  4. Loads IEToolBar.dll with Internet Explorer and displays pop-up advertisements.


Search by name
Example: W32.Beagle.AG@mm
Limited Time Offers! Save up to 50%
Windows Vista Security