iWebar

iWebar Description


iWebar is adware that may display a variety of unwanted pop-up advertisements including discount coupons on the desktop of the computer system while the PC user is surfing on the Internet. iWebar may target Internet Explorer, Mozilla Firefox and Google Chrome web browsers. Once iWebar is installed on the PC, it may cover the screen of the computer with random pop-up ads while the computer user is visiting shopping related websites or social networking websites and other websites. If the PC user clicks on pop-up ads delivered by iWebar, he may get unwillingly rerouted to questionable websites that may show commercial ads.
DOWNLOAD NOW

» Learn more about SpyHunter's Spyware Detection Tool
and steps to uninstall SpyHunter.

The main goal of iWebar may possibly be to boost traffic of unreliable websites and make money from ad clicks. iWebar may circulate and enter the computer system through bundled free apps. PC users may avoid this if they are attentive while installing other free programs and unmarking all options which may offer to install extra software that they are not familiar with. However, many PC users may often overlook the steps of the installation of other free tools simply because they want to install a desired program as quickly as possible. iWebar may gather information about the PC user’s surfing routine and then transmit this data to the third parties and use it with the aim to deliver and show targeted advertisements.

iWebar Automatic Detection Tool (Recommended)


Is your PC infected with iWebar? To safely & quickly detect iWebar we highly recommend you run the malware scanner listed below.



Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

Registry Modifications

Tutorial: To edit and delete registry entries manually, read the tutorial on how to remove malicious registry entries.

Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}.DEFAULT\Software\AppDataLow\Software\iWebar.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\iWebar68671f62832e4803b34065d441f9a2210065123.BHO68671f62832e4803b34065d441f9a2210065123.BHO.168671f62832e4803b34065d441f9a2210065123.SandboxCrossriderApp0035510.BHOCrossriderApp0035510.BHO.1SOFTWARE\Classes\68671f62832e4803b34065d441f9a2210065123.BHOSOFTWARE\Classes\68671f62832e4803b34065d441f9a2210065123.BHO.1SOFTWARE\Classes\68671f62832e4803b34065d441f9a2210065123.SandboxSOFTWARE\Classes\68671f62832e4803b34065d441f9a2210065123.Sandbox.1SOFTWARE\Classes\CrossriderApp0035510.BHOSOFTWARE\Classes\CrossriderApp0035510.BHO.1Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\iWebarSoftware\InstalledBrowserExtensions\21836, value: 35510SOFTWARE\InstalledBrowserExtensions\21836Software\InstalledBrowserExtensions\iWebarSOFTWARE\iWebarSOFTWARE\iWebar-nvSoftware\Microsoft\Internet Explorer\ApprovedExtensionsMigration, value: {11111111-1111-1111-1111-110311551110}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{002255df-f361-4e29-b00b-d20403cebc16}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2837e313-a40f-4c02-b2d1-b7fbdf8884f9}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{323ba568-5bdd-4660-a515-539fc3a87e54}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59DF6DB1-CCAA-4522-B3AC-E6E8D2548FEE}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{71748A28-CCA7-43DE-B02D-2BDE94E97C}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{740F8B78-8D3E-4B86-97A0-D222562AFCB}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8529ef48-2a25-4db8-bd46-8e8a8e0febfd}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8D65776-E971-422F-8D48-DCC1278C1BE4}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{94573f2c-7948-4a62-a279-254930e526f6}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{95d1b1f6-13ab-4066-9e02-d6f81fb5940d}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AE021B3C-DCF1-4F1E-896A-2CC26ECA3477}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c799a01a-6514-4856-a605-2bddf8e4094b}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E50B8771-1370-4A7B-9A63-C9873C4E4DC6}SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION, value: iWebar-bg.exeSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4AED1555-B803-44D4-8DC6-52DC4326CCD0}SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B3B82794-35E5-4BA8-AB75-F2A770563A59}SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{93367617-8523-4205-ADC9-684EC70F2888}SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AA983DFD-9882-44F5-BD07-C38602A21F41}SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AE844BCF-185B-413D-B2EB-EBF4A947B2A9}SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B3B82794-35E5-4BA8-AB75-F2A770563A59}SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Installer_iwebarSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\iWebar-chromeinstallerSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\iWebar-codedownloaderSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\iWebar-enablerSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\iWebar-firefoxinstallerSoftware\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311551110}SOFTWARE\Wow6432Node\InstalledBrowserExtensions\21836SOFTWARE\Wow6432Node\iWebar-nvSOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{002255df-f361-4e29-b00b-d20403cebc16}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2303d253-7251-4c26-bde8-29941d07d921}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2837e313-a40f-4c02-b2d1-b7fbdf8884f9}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{323ba568-5bdd-4660-a515-539fc3a87e54}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{40f50b0f-5362-4fc7-8f5d-bbab91a9361a}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8529ef48-2a25-4db8-bd46-8e8a8e0febfd}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{94573f2c-7948-4a62-a279-254930e526f6}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{95d1b1f6-13ab-4066-9e02-d6f81fb5940dSOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9e799fb7-8c3d-4dbf-8d52-c4420bf0ae18}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c799a01a-6514-4856-a605-2bddf8e4094b}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION, value: iWebar-bg.exeSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311551110}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}iWebar
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path} {44444444-4444-4444-4444-440344554410}{22222222-2222-2222-2222-220322552210}{11111111-1111-1111-1111-110311551110}{66666666-6666-6666-6666-660366556610}{55555555-5555-5555-5555-550355555510}
Posted: December 18, 2013 | By
Share:
Rate this article:
1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading ... Loading ...
Threat Metric
Threat Level: 2/10
Detection Count: 212,063

One Comment

Leave a Reply

What is 10 + 13 ?
Please leave these two fields as-is:
IMPORTANT! To be able to proceed, you need to solve the following simple math (so we know that you are a human) :-)