Threat Explorer

The Threat Explorer is a comprehensive resource consumers can turn to for daily, accurate, up-to-date information on the latest threats, risks and vulnerabilities.

Adware.MBKWbar

Adware.MBKWbar

Updated:
February 13, 2007
Risk Impact:
Medium
File Names:
MBKWBar.exe IEToolbar.dll
Systems Affected:
Windows

Behavior


Adware.MBKWbar is an adware program that displays advertisements.

Symptoms


Files detected as Adware.MBKWbar.

Behavior


This adware is installed manually.

Antivirus Protection Dates

  • Initial Rapid Release version October 02, 2014 revision 022
  • Latest Rapid Release version October 02, 2014 revision 022
  • Initial Daily Certified version July 01, 2005
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date July 06, 2005
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

When Adware.Appoli is executed, it performs the following actions:
  1. Creates the following file:

    • %ProgramFiles%\MBKWBar\IEToolBar.dll

      Note: %ProgramFiles% is a variable that refers to the program files folder. By default, this is C:\Program Files.

  2. Creates the following registry keys:

    HKEY_CLASSES_ROOT\CLSID\{EA5A82FB-D6BE-44F9-9363-B1ABABC153C1}
    HKEY_CLASSES_ROOT\IEToolBar.ToolBarImpl.1
    HKEY_CLASSES_ROOT\IEToolBar.ToolBarImpl
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\MBKWBar
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Typelib\{4A7DBA74-E729-4EC8-92E2-FFD83921449F}
    HKEY_CLASSES_ROOT\TypeLib\{4A7DBA74-E729-4EC8-92E2-FFD83921449F}
    HKEY_CURRENT_USER\Software\MBKWBar
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\{EA5A82FB-D6BE-44F9-9363-B1ABABC153C1}

  3. Connects to the domains config.mbkwbar.com and report.mbkwbar.com to register itself and to download configuration parameters.

  4. Loads IEToolBar.dll with Internet Explorer and displays pop-up advertisements.



1. To uninstall the security risk
This security risk includes an uninstallation applet. In order to uninstall this security risk, complete the following instructions:
  1. Click Start > Settings > Control Panel or Start > Control Panel (this varies with the operating system).

  2. In the Control Panel window, double-click Add/Remove Programs.

    Windows Me only: If you do not see the Add/Remove Programs icon, click ...view all Control Panel options.

  3. Click MBKWBar - Toolbar.

    Note:
    You may need to use the scroll bar to view the whole list.

  4. Click Add/Remove, Change/Remove, or Remove (this varies with the operating system). Follow the prompts.

    Note: After running the Add/Remove programs applet, all the files may have been removed. You will want to run a full system scan to ensure that this is the case. However, it is possible that no files will be detected after using Add/Remove programs.