Spy-Bot.net Keeping You Aware of Intrusive Spyware
spy bot


Manual Spy Bot Removal > Scbar

SCBar is a pop-up-opening toolbar and a search- and error-hijacker.

Scbar's code is a descendant of the NetworkEssentials parasite.

Variants

SCBar/SearchEnhancement : first version, whose controlling server and hijack site is searchenhancement.com.

SCBar/WindowEnhancer : later version pointed at windowenhancer.com.

Distribution

It is currently unclear how Scbar is getting installed.

Advertising

Yes. Opens a number of pop-ups periodically whilst Internet Explorer is in use.

Privacy violation

Suspected. The software also has the ability to open pop-ups based on targeted keywords in web pages, but this has not been seen in action at the time of writing; it is possible this could expose one's web usage to be tracked.

Security issues

Yes. Scbar can download and execute arbitrary code when directed by its controlling server.

Stability problems

None known.

Removal

Early versions of Scbar might be removable from the Control Panel's Add/Remove Programs feature under the name 'WebEnh'.

Ad-Aware can remove SCBar/SearchEnhancement.

Manual removal

Open a DOS command prompt window (from Start->Programs->Accessories), and enter the following commands. For SCBar/SearchEnhancement:

cd "%WinDir%\System"
regsvr32 /u "\Program Files\scbar\v1\scbar.dll"

Or, for SCBar/WindowEnhancer:

cd "%WinDir%\System"
regsvr32 /u "\Program Files\winex\v2\winex.dll"

Next open the registry (click 'Start', choose 'Run', enter 'regedit') and find the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run. Delete the 'SearchEnhancement' entry on the right pointing to scbar.exe, or 'WindowEnhancer' pointing to winex.exe.

Restart the computer and you should be able to delete the 'scbar' or 'winex' folder inside Program Files.

 

© 2003 Spy-Bot.net     All Rights Reserved     info@Spy-Bot.net