Threat Scorecard

Threat Level: 50 % (Medium)
Infected Computers: 556
First Seen: July 24, 2009
Last Seen: March 1, 2024
OS(es) Affected: Windows

EliteBar is a widely-spread trojan that displays unsolicited commercial advertisements, changes Internet Explorer default home and search pages and redirects the web browser to undesirable web sites. The parasite also secretly downloads from the Internet and executes potentially harmful files, removes installed Internet Explorer toolbars, adds numerous bookmarks to the Favorites list and blocks access to some web resources. EliteBar is able to hide its processes by injecting malicious code into legitimate tasks and system components. The trojan automatically runs on every Windows startup.


15 security vendors flagged this file as malicious.

Anti-Virus Software Detection
TrendMicro PAK_Generic.001
Symantec Adware.Purityscan
Sunbelt ClickSpring.PuritySCAN
Sophos ClickSpring
Prevx1 Medium Risk Malware Downloader
Panda Adware/PurityScan
NOD32 Win32/TrojanDownloader.PurityScan
Microsoft Adware:Win32/Clickspring.B
McAfee-GW-Edition Trojan.Downloader.Gen
McAfee+Artemis Generic!Artemis
McAfee Downloader-EV
Ikarus Trojan-Downloader.Win32.PurityScan
Fortinet W32/EV!tr.dldr
F-Secure Trojan-Downloader.Win32.PurityScan.fe
eTrust-Vet Win32/Clspring!generic

SpyHunter Detects & Remove EliteBar

File System Details

EliteBar may create the following file(s):
# File Name MD5 Detections
1. VirusShare_02b601aba63bf920282db6bb831e0235 02b601aba63bf920282db6bb831e0235 3
2. wuauclt.exe 2254457213510df63c482be5a95f2625 0
3. nt_hide79.dll 3bfe5760545429dd1d9d0ba7feae3f8b 0
4. pokapoka79.exe 807fcb10c817836af1f0f6f5e9b944f4 0

Registry Details

EliteBar may create the following registry entry or registry entries:

Related Posts


Most Viewed