Home Malware Programs Browser Plugins IEMenuExt

IEMenuExt

Posted: March 28, 2006

IEMenuExt is a parasitical Internet Explorer plugin with malware and adware functionality. It adds a toolbar and records addresses of user visited web sites. Gathered data is sent to a predetermined web server. IEMenuExt also shows undesirable commercial advertisements. The spyware gets into the computer along with some ad-supported software. It also can be manually installed. IEMenuExt automatically runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 iemenuextension.exe
    2 tbextn.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareIEMenuExtensionHKEY_LOCAL_MACHINESOFTWAREIEMenuExtensionHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunIEMenuExtensiontoolbarHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallIEMenuExtensiontoolbar
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}6B95678D-30A4-4FF8-A72F-4208340C1F7F44BE0690-5429-47f0-85BB-3FFD8020233E
Loading...