Masterbar manual removal:
Kill processes:
stcloader.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\stcloader
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\SearchURL=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Default_Search_URL=[site address]
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page=[site address]
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL=[site address]
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch=[site address]
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant=[site address]
Unregister DLLs:masterbar.dll, qi32.dll
Delete files:stcloader.exe, masterbar.dll, qi32.dll
Misc:[site address] is an address of a web site on the masterbar.com domain.
The stcloader.exe file can be found in the default system directory C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32.
- Seems to be related to 'Pugi' according to some reports and code references.
Post Comment: