Home Malware Programs Bad Toolbars SearchFlyBar2 Toolbar

SearchFlyBar2 Toolbar

Posted: September 24, 2013

Threat Metric

Ranking: 14,748
Threat Level: 5/10
Infected PCs: 602
First Seen: September 24, 2013
Last Seen: September 10, 2023
OS(es) Affected: Windows

The SearchFlyBar2 Toolbar is a Potentially Unwanted Program that provides links to Conduit-affiliated websites and some minor features that may benefit your Web-browsing activities, but also includes several negative characteristics, like Web search redirects, homepage hijacks and updates that may occur without your permission. Malware researchers were unsurprised to find any of these issues with the SearchFlyBar2 Toolbar, which, as a Conduit affiliate, may be designed primarily for redirecting traffic to its sites rather than to benefit the user in any way. While the SearchFlyBar2 Toolbar may be only a low-level PC threat at its worst, using anti-malware products for deleting a SearchFlyBar2 Toolbar still is recommended for ensuring your browser's complete restoration to normal.

Flying All the Way to Sites You Never Intended to Visit with Help from the SearchFlyBar2 Toolbar

The SearchFlyBar2 Toolbar is one of the all too numerous members of the Conduit family of browser add-ons: a group of toolbars that may claim to offer benefits for your browser but mostly are used for redirecting you to Conduit.com, a Google clone search site. While malware researchers have not found the Conduit.com website to be engaged in direct attacks against your PC, they do caution that the SearchFlyBar2 Toolbar doesn't provide sufficient advantages to make up for its drawbacks and that links from Conduit are not necessarily certain to have the most relevant results.

The primary issues that a SearchFlyBar2 Toolbar usually may be related to include homepage hijacks and Web search redirects that always take your browser to Conduit.com. As usual, the SearchFlyBar2 Toolbar may affect more than one type of browser with these functions, such as Chrome or Internet Explorer – and often may do so simultaneously. The SearchFlyBar2 Toolbar also will completely disregard any normal homepage or search settings that your browser may be using prior to the SearchFlyBar2 Toolbar's installation.

Choosing a Sky not Shadowed by Conduit Hijacks

The SearchFlyBar2 Toolbar does claim to be easily uninstallable, but SpywareRemove.com malware researchers have noticed a pattern of behavior on the part of the SearchFlyBar2 Toolbar and similar Conduit toolbars that usually results in their browser modifications staying even when the actual toolbar has been removed. To prevent this situation and delete a SearchFlyBar2 Toolbar along with the changes the SearchFlyBar2 Toolbar makes to your browser, appropriate anti-malware tools should be used while all affected browsers are closed. Particularly extreme circumstances also may warrant the use of other security features, such as Safe Mode, which can prevent the SearchFlyBar2 Toolbar from being launched at all.

For the most part, the SearchFlyBar2 Toolbar may be significant only as one stepping stone out of many between Conduit and its desired traffic. Many other toolbars also have been designed with attacks identical to those of the SearchFlyBar2 Toolbar such as the Messenger Plus Toolbar, the OurWorld Toolbar, the iWin Toolbar, the Top 10 Toolbar, the Goofler Toolbar, the Midicair Toolbar, the Trustworthy Toolbar, the Entrusted Toolbar and the Movies Toolbar.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{20a320d1-d26b-48e5-a301-1dc697606798}

Additional Information

The following directories were created:
%PROGRAMFILES%\SearchFlyBar6%PROGRAMFILES(x86)%\SearchFlyBar6%TEMP%\ct3292715
Loading...