Content

YourSiteBar

Type
Program
SubType
-
Discovery Date
03/14/2005
Minimum DAT
4446 (03/14/2005)
Updated DAT
4602 (10/11/2005)
Minimum Engine
5.1.00
Description Added
03/14/2005
Description Modified
05/27/2005 11:37 AM (PT)

Tab Navigation

Characteristics

McAfee(R) AVERT™ recognizes that this program may have legitimate uses in contexts where an authorized administrator has knowingly installed this application.  If you agreed to a license agreement for this, or another bundled application, you may have legal obligations with regard to removing this software, or using the host application without this software.   Please contact the software vendor for further information.

See http://vil.nai.com/vil/DATReadme.asp for a list of Program detections added to the DATs.

See http://vil.nai.com/vil/pups/configuration.htm for information about how to enable, disable, and exclude detection of legitimately installed programs.

Distribution

This is not a virus or trojan. It is a direct-marketing adware application. This application installs a tool within the Internet Explorer.

This kind of application generally comes bundled with another program, which usually discloses the fact that it is ad-supported.  Users agree to have the Adware installed in the license agreement, although they may not realise at first that this file was packaged with the product they installed.

Installation

Upon execution, the application is registered as a DLL file on the local computer.  A blank toolbar is created in the Internet Explorer browser.

The following Registry key(s) is/are added to hook system startup:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
YourSiteBar "DisplayName" = "YourSiteBar"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
YourSiteBar "HelpLink" = "http://www.ysbweb.com"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
YourSiteBar "Publisher" = "Integrated Seach Technologies"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
YourSiteBar "UninstallString"= "regsvr32 /u /s "

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
YourSiteBar "URLInfoAbout" = http://www.ysbweb.com"

HKEY_LOCAL_MACHINE\SOFTWARE\YourSiteBar "gUpdate" = "0"

Removal

Instructions on Enabling/Disabling Detection and Removal of Potentially Unwanted Programs

Use the ADD/REMOVE Programs Control Panel in Windows to remove this program.

Aliases

Aliases

    N/A