Manual Spy Bot Removal > Scbar
SCBar is a pop-up-opening toolbar and a search- and error-hijacker.
Scbar's code is a descendant of the NetworkEssentials parasite.
Variants
SCBar/SearchEnhancement : first version, whose controlling server and hijack site is searchenhancement.com.
SCBar/WindowEnhancer : later version pointed at windowenhancer.com.
Distribution
It is currently unclear how Scbar is getting installed.
Advertising
Yes. Opens a number of pop-ups periodically whilst Internet Explorer is in use.
Privacy violation
Suspected. The software also has the ability to open pop-ups based on targeted keywords in web pages, but this has not been seen in action at the time of writing; it is possible this could expose one's web usage to be tracked.
Security issues
Yes. Scbar can download and execute arbitrary code when directed by its controlling server.
Stability problems
None known.
Removal
Early versions of Scbar might be removable from the Control Panel's Add/Remove Programs feature under the name 'WebEnh'.
Ad-Aware can remove SCBar/SearchEnhancement.
Manual removal
Open a DOS command prompt window (from Start->Programs->Accessories), and enter the following commands. For SCBar/SearchEnhancement:
cd "%WinDir%\System"
regsvr32 /u "\Program Files\scbar\v1\scbar.dll"
Or, for SCBar/WindowEnhancer:
cd "%WinDir%\System"
regsvr32 /u "\Program Files\winex\v2\winex.dll"
Next open the registry (click 'Start', choose 'Run', enter 'regedit') and find the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run. Delete the 'SearchEnhancement' entry on the right pointing to scbar.exe, or 'WindowEnhancer' pointing to winex.exe.
Restart the computer and you should be able to delete the 'scbar' or 'winex' folder inside Program Files.
|