1. /
  2. Security Response/
  3. Adware.MBKWbar

Adware.MBKWbar

Updated:
February 13, 2007 11:45:35 AM
Type:
Adware
Risk Impact:
Medium
File Names:
MBKWBar.exe IEToolbar.dll
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

When Adware.Appoli is executed, it performs the following actions:
  1. Creates the following file:

    • %ProgramFiles%\MBKWBar\IEToolBar.dll

      Note: %ProgramFiles% is a variable that refers to the program files folder. By default, this is C:\Program Files.

  2. Creates the following registry keys:

    HKEY_CLASSES_ROOT\CLSID\{EA5A82FB-D6BE-44F9-9363-B1ABABC153C1}
    HKEY_CLASSES_ROOT\IEToolBar.ToolBarImpl.1
    HKEY_CLASSES_ROOT\IEToolBar.ToolBarImpl
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\MBKWBar
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Typelib\{4A7DBA74-E729-4EC8-92E2-FFD83921449F}
    HKEY_CLASSES_ROOT\TypeLib\{4A7DBA74-E729-4EC8-92E2-FFD83921449F}
    HKEY_CURRENT_USER\Software\MBKWBar
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\{EA5A82FB-D6BE-44F9-9363-B1ABABC153C1}


  3. Connects to the domains config.mbkwbar.com and report.mbkwbar.com to register itself and to download configuration parameters.

  4. Loads IEToolBar.dll with Internet Explorer and displays pop-up advertisements.


Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report