Remove SecurityToolbar. Description and removal instructions

 
Title: SecurityToolbar
Also known as: Security Toolbar 7.1, SecurityToolbar 7.1
Type: Browser Plugins
Severity scale:SecurityToolbar severity is 50  (50 / 100)
 
Security Toolbar 7.1 is a variant of the infamous Zlob. This malicious toobar usually makes it's way to the system by disguising itself to be a video codec. The purpose of this parasite is to promote rogue anti-spyware programs, such as the recently popular VirusHeat and many others. Security Toolbar 7.1 does this by redirecting the browser to unsolicited rogue websites and displaying popups and fake system notifications to scare the user.

SecurityToolbar 7.1 is a threat and should therefore be removed upon detection.


Related files: 1203846321.dll, 1203634438.dll, 1204372749.dll, 1203140349.dll, 1202650266.dll, 1202567261.dll, laf1.exe, 1198448799.dll, waun.exe, wamdl.dll, uninst.exe, scu.exe, scm.exe, scit.exe, sbun.exe, sbsm.exe, sbmntr.exe, sbmdl.dll, 1198448796.dll, iinqyl.dll, 1202030455.dll, ofcpi.dll, 1201639702.dll, 1201639705.dll, findsiteonline.dll, qhcvdw.dll, fsehfcu.dll, G5-tmp.exe, G2-tmp.exe, hdtip.dll, voipwet.dll, vipextpxm.dll, werbettxf.dll, vipextgpk.dll, werbetlrw.dll, vipextnog.dll, sysdivx.dll, werbetpwg.dll, Trojan.Zlob|eulbn.dll, isfun.exe, isfmntr.exe, ictun.exe, icthis.exe, nczupfw.dll, isfmdl.dll, ictmdl.dll, antzozc.dll, zxserv0.com, vnp7s.net, msvol.tlb, hp[X].tmp, MSMSGS.EXE, nvctrl.exe, dumpserv.com, Protect, RSA, uimcu.dll, dtjby.dll, ncompat.tlb

Automatic SecurityToolbar removal:

remover for SecurityToolbar

SecurityToolbar manual removal:

Kill processes:
laf1.exe waun.exe sbmntr.exe sbsm.exe sbun.exe scit.exe scm.exe scu.exe uninst.exe G2-tmp.exe G5-tmp.exe icthis.exe ictun.exe isfmntr.exe isfun.exe nvctrl.exe msmsgs.exe
Delete registry values:
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3D76B96-30B9-4DCC-9B3D-D12E31280D29}
{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
{ab75cc7d-2751-4144-a278-5462d5a5884c}
{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{ab75cc7d-2751-4144-a278-5462d5a5884c}
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows CurrentVersionRunRegSvr32=%System%msmsgs.exe
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsNTCurrentVersionWinlogonShell=explorer.exe
HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows NT CurrentVersionWinlogonShell=explorer.exe, msmsgs.exeHKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentV
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{60dea04c-9817-4309-bfa2-f8a1766c3cd1}
SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\some
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\start
{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
{60dea04c-9817-4309-bfa2-f8a1766c3cd1}
{D579A683-0CC7-4023-BAE7-0544D0D1DA3A}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D579A683-0CC7-4023-BAE7-0544D0D1DA3A}
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{a6d478c6-7961-4fe9-be4b-e621dd640112}
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
Online Add-on
{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
{a6d478c6-7961-4fe9-be4b-e621dd640112}
Microsoft\Internet Explorer\Toolbar\WebBrowser\{F2BADA0D-FD61-45EF-A994-64A073FD6613}
Microsoft\Internet Explorer\Toolbar\{F2BADA0D-FD61-45EF-A994-64A073FD6613}
Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{c0ca766d-060c-48e1-b536-205e321bd174}
{69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014}
{c0ca766d-060c-48e1-b536-205e321bd174}
{F2BADA0D-FD61-45EF-A994-64A073FD6613}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014}
HKEY_CURRENT_USER\Software\Online Add-on
{aaad3a22-1c07-45f5-bfb3-e9a8c3b382fe}
{2012F73E-7427-4AD8-9E9D-6CBA6E0053D4}
c7cd9e83-3bf6-47f8-b2e2-b114c96c1888
BA0BACB5-FC95-451E-94D2-4959AB0949D2
F10587E9-0E47-4CBE-84AE-7DD20B8684CC
F10587E9-0E47-4CBE-ABCD-7DD20B8622FF
10C52A42-DB8B-4ade-AA4A-CED6A8282B85
7265100a-17e1-41bf-bd08-63b95a25a9c3
{27cb634d-c84e-4c00-9b53-f5523601dbad}
Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{27cb634d-c84e-4c00-9b53-f5523601dbad}
{F10587E9-0E47-4CBE-ABCD-7DD20B862223}
E404.e404mgr
E404.e404mgr.1
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F10587E9-0E47-4CBE-ABCD-7DD20B862223}
NetProject
{10C52A42-DB8B-4ade-AA4A-CED6A8282B67}
{747e1fbe-b70f-441d-bbca-6e536c04924a}
{81705D67-3F73-4983-859B-97D0922E5ABE}
{C2A1C5CB-C0EF-4689-9436-F62CCA1C5383}
{E85F6AA5-7A0C-49A5-9E5E-936FED62347D}
{F7D09218-46D7-4D3D-9B7F-315204CD0836}
{499B8A53-5949-4625-A8BF-A4D934AFC9DA}
{E63648F7-3933-440E-B4F6-A8584DD7B7EB}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10C52A42-DB8B-4ade-AA4A-CED6A8282B67}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C2A1C5CB-C0EF-4689-9436-F62CCA1C5383}
Microsoft\Windows\CurrentVersion\Uninstall\Internet Service
Microsoft\Windows\CurrentVersion\Uninstall\MultiMedia Software
Microsoft\Windows\CurrentVersion\Uninstall\Secure Browsing
Microsoft\Windows\CurrentVersion\Uninstall\Web Application
Microsoft\Windows\CurrentVersion\Uninstall\Windows Safety Alert
Microsoft\Internet Explorer\Toolbar\WebBrowser\{81705D67-3F73-4983-859B-97D0922E5ABE}
Microsoft\Internet Explorer\Toolbar\{81705D67-3F73-4983-859B-97D0922E5ABE}
Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{747e1fbe-b70f-441d-bbca-6e536c04924a}
Microsoft\Windows\CurrentVersion\policies\explorer\run\some
Microsoft\Windows\CurrentVersion\policies\explorer\run\start
{C03FD59D-9104-44B7-929A-9EAA0BA05211}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C03FD59D-9104-44B7-929A-9EAA0BA05211}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2C566C34-7D72-4DC1-9BBE-1121A76698F8}
Objects\{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03B902B1-9B25-4173-9468-56775C85A8D4}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8F10DE2B-E923-4548-B524-4D9C5FA80777}
Unregister DLLs:
1202567261.dll 1202650266.dll 1203140349.dll 1204372749.dll 1203634438.dll 1203846321.dll 1198448799.dll wamdl.dll fsehfcu.dll qhcvdw.dll findsiteonline.dll 1201639705.dll 1201639702.dll ofcpi.dll 1202030455.dll iinqyl.dll 1198448796.dll sbmdl.dll Trojan.Zlob|eulbn.dll werbetpwg.dll sysdivx.dll vipextnog.dll werbetlrw.dll vipextgpk.dll werbettxf.dll vipextpxm.dll voipwet.dll hdtip.dll antzozc.dll ictmdl.dll isfmdl.dll nczupfw.dll dtjby.dll uimcu.dll

Delete files:
ncompat.tlb dtjby.dll uimcu.dll %UserProfile%\\Application Data\\Microsoft\\Crypto\\RSA %UserProfile%\\Application Data\\Microsoft\\Protect dumpserv.com nvctrl.exe msmsgs.exe hp[X].tmp msvol.tlb RSA Protect vnp7s.net zxserv0.com dumpserv.com antzozc.dll ictmdl.dll isfmdl.dll nczupfw.dll icthis.exe ictun.exe isfmntr.exe isfun.exe Trojan.Zlob|eulbn.dll werbetpwg.dll sysdivx.dll vipextnog.dll werbetlrw.dll vipextgpk.dll werbettxf.dll vipextpxm.dll voipwet.dll hdtip.dll G2-tmp.exe G5-tmp.exe fsehfcu.dll qhcvdw.dll findsiteonline.dll 1201639705.dll 1201639702.dll ofcpi.dll 1202030455.dll iinqyl.dll 1198448796.dll sbmdl.dll sbmntr.exe sbsm.exe sbun.exe scit.exe scm.exe scu.exe uninst.exe wamdl.dll waun.exe 1198448799.dll laf1.exe 1202567261.dll 1202650266.dll 1203140349.dll 1204372749.dll 1203634438.dll 1203846321.dll

Other programs to remove SecurityToolbar:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 16/03/08
Information updated: 17/03/08

Additional resources related to SecurityToolbar:

Attention: If you know or you have a website or page about SecurityToolbar removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about SecurityToolbar parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites:
Related discussions: