Last updated 14/05/2005
Copyright © 1999 - 2004, Sandra Hardmeier, All Rights Reserved Worldwide

Spyware Home Page

 

Uses tinybar.html, br.reg and br.dll.  Rename the files and get rid of the following registry keys:

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars\{69555BE2-9A78-11d2-BA91-00600827878D}
 

HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\{69555BE2-9A78-11d2-BA91-00600827878D}
 

HKEY_CLASSES_ROOT\CLSID\{69555BE2-9A78-11d2-BA91-00600827878D}
 

HKEY_CLASSES_ROOT:CLSID\{018b7ec3-eeca-11d3-8e71-0000e82c6c0d}\ (identified as SearchbarCash)

 

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\>>> Search The Web <<<
 

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\ITBarLayout

 

Search for tinybar.exe and delete.

 

See this page for a detailed infection chart for tinybar, searchbarcash, itbar etc.