Copyright © 1999 - 2006, Sandra Hardmeier, All
Rights Reserved Worldwide
Last updated
20/08/2006
Uses tinybar.html, br.reg and br.dll. Rename the files and get rid of the following registry keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer
Bars\{69555BE2-9A78-11d2-BA91-00600827878D}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet
Explorer\Toolbar\{69555BE2-9A78-11d2-BA91-00600827878D}
HKEY_CLASSES_ROOT\CLSID\{69555BE2-9A78-11d2-BA91-00600827878D}
HKEY_CLASSES_ROOT:CLSID\{018b7ec3-eeca-11d3-8e71-0000e82c6c0d}\ (identified as SearchbarCash)
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\>>> Search The
Web <<<
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\ITBarLayout
Search for tinybar.exe and delete.
See this page for a detailed infection chart for tinybar, searchbarcash, itbar etc.