Adware.DashBar

[TJ]

Adware.DashBar is a IE Toolbar application which may facilitate the installation of the Adware.GAIN security risk.

Symptoms
Your Symantec program detects Adware.DashBar

Transmission
Adware.DashBar must be manually installed.

technical details
File names: DashBarSetup.exe
DashBar.exe
DBAu.exe
DashBar30.dll

When Adware.DashBar is installed, it performs the following actions:

   1. Creates the following files:
          * %UserProfile\DashBar\Dashbar Website.lnk
          * %ProgramFiles%\DashBar.dll
          * %ProgramFiles%\DashBar\DashBar30.dll
          * %ProgramFiles%\DashBar\DashBarSetup.log
          * %ProgramFiles%\DashBar\DASHBARWEBSITE.URL
          * %ProgramFiles%\DashBar\DbAu.exe
          * %ProgramFiles%\DashBar\DBButtons.dat
          * %ProgramFiles%\DashBar\DBcat.dat
          * %ProgramFiles%\DashBar\DBconfig.dat
          * %ProgramFiles%\DashBar\DBkw.dat
          * %ProgramFiles%\DashBar\DBUninstaller.exe
          * %ProgramFiles%\DashBar\DBUninstaller.exe.manifest
          * %ProgramFiles%\DashBar\Icons\icon_af.ico
          * %ProgramFiles%\DashBar\Icons\icon_cust.ico
          * %ProgramFiles%\DashBar\Icons\icon_def.ico
          * %ProgramFiles%\DashBar\Icons\icon_FI.ICO
          * %ProgramFiles%\DashBar\Icons\icon_map.ICO
          * %ProgramFiles%\DashBar\Icons\icon_new.ICO
          * %ProgramFiles%\DashBar\Icons\icon_PC.ICO
          * %ProgramFiles%\DashBar\Icons\icon_PEOPLE.ICO
          * %ProgramFiles%\DashBar\Icons\icon_ref.ICO
          * %ProgramFiles%\DashBar\Icons\icon_sport.ICO
          * %ProgramFiles%\DashBar\Icons\icon_TV.ICO
          * %ProgramFiles%\DashBar\Icons\icon_WP.ICO
          * %ProgramFiles%\DashBar\Icons\icon_WS.ICO
          * %ProgramFiles%\DashBar\Icons\icon_YP.ICO

            Note:
          * %ProgramFiles% is a variable that refers to the Program Files folder. By default, this is C:\Program Files.
          * %UserProfile% is a variable that refers to the current user's profile folder. By default, this is C:\Documents and Settings\[CURRENT USER] (Windows NT/2000/XP).

   2. Creates the following registry subkeys:

      HKEY_CLASSES_ROOT\CLSID\{21FFB6C0-0DA1-11D5-A9D5-00500413153C}
      HKEY_CLASSES_ROOT\CLSID\{CC90CDA0-74A0-45b4-80EF-D89CA8C249B8}
      HKEY_CLASSES_ROOT\CLSID\{A2BA5E71-5BE3-4007-AC48-157823FB63FB}
      HKEY_CLASSES_ROOT\Interface\{A2BA5E71-5BE3-4007-AC48-157823FB63FB}
      HKEY_CLASSES_ROOT\Typelib\{8642D0F2-37CC-46B7-AA5B-399E6E68C626}
      HKEY_CLASSES_ROOT\DashBarToolbar.SearchScoutBandObj
      HKEY_CLASSES_ROOT\DashBarToolbar.SearchScoutBandObj.1
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DashBar
      HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\DashBar
      HKEY_ALL_USERS\SOFTWARE\Gator.com\DashBar
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{CC90CDA0-74A0-45b4-80EF-D89CA8C249B8}

   3. May facilitate the download and installation of the Adware.GAIN security risk

REMOVAL INSTRUCTIONS
To uninstall the security risk
This security risk includes an uninstallation applet. In order to uninstall this security risk, complete the following instructions:

   1. Click Start > Settings > Control Panel or Start > Control Panel (this varies with the operating system).

   2. In the Control Panel window, double-click Add/Remove Programs.

      Windows Me only: If you do not see the Add/Remove Programs icon, click ...view all Control Panel options.

   3. Click DashBar Toolbar.

      Note: You may need to use the scroll bar to view the whole list.

   4. Click Add/Remove, Change/Remove, or Remove (this varies with the operating system). Follow the prompts.

      Note: After running the Add/Remove programs applet, all the files may have been removed. You will want to run a full system scan to ensure that this is the case. However, it is possible that no files will be detected after using Add/Remove programs.


To delete the value from the registry
   1. Click Start > Run.
   2. Type regedit

      Then click OK.

   3. Navigate to and delete the following registry keys:

      HKEY_CLASSES_ROOT\CLSID\{21FFB6C0-0DA1-11D5-A9D5-00500413153C}
      HKEY_CLASSES_ROOT\CLSID\{CC90CDA0-74A0-45b4-80EF-D89CA8C249B8}
      HKEY_CLASSES_ROOT\CLSID\{A2BA5E71-5BE3-4007-AC48-157823FB63FB}
      HKEY_CLASSES_ROOT\Interface\{A2BA5E71-5BE3-4007-AC48-157823FB63FB}
      HKEY_CLASSES_ROOT\Typelib\{8642D0F2-37CC-46B7-AA5B-399E6E68C626}
      HKEY_CLASSES_ROOT\DashBarToolbar.SearchScoutBandObj
      HKEY_CLASSES_ROOT\DashBarToolbar.SearchScoutBandObj.1
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DashBar
      HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\DashBar
      HKEY_ALL_USERS\SOFTWARE\Gator.com\DashBar
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{CC90CDA0-74A0-45b4-80EF-D89CA8C249B8}

   4. Exit the Registry Editor