Exterminate It! Antimalware

malpedia

Known threats:700,086 Last Update:March 16, 12:51

Testimonials

You guys are freakin' awesome, love the program, love the personalized service, and my pc loves it too :D

Justin S.

TrojanSpy.Win32.DKS- Registry Values List

This is a complete list of TrojanSpy.Win32.DKS registry values collected by Exterminate It!. If you find any of these registry values on your PC, your computer is very likely to be infected with the TrojanSpy.Win32.DKS - trojan,spyware.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • [HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\shellbrowser]{b195b3b3-8a05-11d3-97a4-0004aca6948e}=B3B395B1058AD31197A40004ACA6948E
  • [HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser]{b195b3b3-8a05-11d3-97a4-0004aca6948e}=B3B395B1058AD31197A40004ACA6948E
  • [HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\shellbrowser]{74cc49f7-eb32-4a08-b204-948962a6e3db}=F749CC7432EB084AB204948962A6E3DB
  • [HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser]{74cc49f7-eb32-4a08-b204-948962a6e3db}=F749CC7432EB084AB204948962A6E3DB
  • [HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar]{74cc49f7-eb32-4a08-b204-948962a6e3db}=HbTools
  • [HKEY_LOCAL_MACHINE\software\microsoft\exchange\client\extensions]spam blocker for ms outlook=4.0;[%PROGRAM_FILES%]\SPAMBL~1\Bin\484~1.0\SBOLExt.dll;1;11111111111111;1111111
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]spamblocker=[%PROGRAM_FILES%]\SpamBlockerUtility\Bin\4.8.4.0\SbOEAddOn.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]spam blocker for outlook express=[%PROGRAM_FILES%]\SPAMBL~1\Bin\484~1.0\SBInst.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]weatherontray=[%PROGRAM_FILES%]\SpamBlockerUtility\Bin\4.8.4.0\SbWeatherOnTray.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls][%WINDOWS%]\downloaded program files\hbinstie.dll=1
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]hbtools=[%PROGRAM_FILES%]\HbTools\Bin\4.8.4.0\HbtOEAddOn.exe
  • [HKEY_LOCAL_MACHINE\software\classes\appid\wallpaper.dll]appid={5CA2095F-E932-48BF-88E1-603094E9331F}
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\internet settings\user agent\post platform]hotbar 4.4.2.0=Hotbar
  • [HKEY_LOCAL_MACHINE\software\classes\appid\weatherontray.exe]appid={0507FDDE-F3B7-49F5-9E8F-C557E991F39B}
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]spam blocker for outlook express=[%PROGRAM_FILES%]\Hotbar\bin\450~1.0\SBInst.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\exchange\client\extensions]spam blocker for ms outlook=4.0;[%PROGRAM_FILES%]\Hotbar\bin\450~1.0\SBOLExt.dll;1;11111111111111;1111111
  • [HKEY_LOCAL_MACHINE\software\classes\appid\hbsrv.exe]appid={B701A705-F828-11D4-A466-00508B5BA2DF}
  • [HKEY_LOCAL_MACHINE\software\microsoft\exchange\client\extensions]spam blocker for ms outlook=4.0;[%PROGRAM_FILES%]\SPAMBL~1\bin\102217~1.0\SBOLExt.dll;1;11111111111111;1111111
  • [HKEY_LOCAL_MACHINE\software\microsoft\exchange\client\extensions]spam blocker for ms outlook=4.0;[%PROGRAM_FILES%]\SPAMBL~1\Bin\471~1.0\SBOLExt.dll;1;11111111111111;1111111
  • [HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar]{74cc49f7-eb32-4a08-b204-948962a6e3db}=SpamBlockerUtility
  • [HKEY_LOCAL_MACHINE\software\microsoft\exchange\client\extensions]spam blocker for ms outlook=4.0;[%PROGRAM_FILES%]\SPAMBL~1\Bin\480~1.0\SBOLExt.dll;1;11111111111111;1111111
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]spam blocker for outlook express=[%PROGRAM_FILES%]\SPAMBL~1\Bin\480~1.0\SBInst.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]weatherontray=[%PROGRAM_FILES%]\Hotbar\Bin\4.6.1.0\WeatherOnTray.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]hotbar=[%PROGRAM_FILES%]\Hotbar\Bin\4.6.1.0\HbOEAddOn.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]weatherontray=[%PROGRAM_FILES%]\Hotbar\bin\4.5.1.0\WeatherOnTray.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar]{b195b3b3-8a05-11d3-97a4-0004aca6948e}=Hotbar
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbara]displayname=Web Tools by Hotbar
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbara]installlocation=[%PROGRAM_FILES%]\hbinst
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbara]publisher=Hotbar.com
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbara]uninstallstring=[%PROGRAM_FILES%]\hbinst\Hbinst.exe /Uninstall comp=UNI
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbara]versionmajor=4.5
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarb]installlocation=[%PROGRAM_FILES%]\hbinst
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarb]publisher=Hotbar.com
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarb]uninstallstring=[%PROGRAM_FILES%]\hbinst\Hbinst.exe /Uninstall comp=OL;silence=1
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarb]versionmajor=4.5
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarc]installlocation=[%PROGRAM_FILES%]\hbinst
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarc]publisher=Hotbar.com
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarc]uninstallstring=[%PROGRAM_FILES%]\hbinst\Hbinst.exe /Uninstall comp=SR;silence=1
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarc]versionmajor=4.5
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarc]versionminor=1.0
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbara]versionminor=1.0
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarb]versionminor=1.0
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarb]displayname=Outlook Tools by Hotbar
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarc]displayname=Shopper Reports by Hotbar
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]hotbar=[%PROGRAM_FILES%]\HOTBAR\BIN\4.5.1.0\HBINST.EXE /Upgrade
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\internet settings\user agent\post platform]hotbar 4.0=Hotbar
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\internet settings\5.0\user agent\post platform]hbtools 4.7.0=(EMPTY)
  • [HKEY_LOCAL_MACHINE\software\microsoft\exchange\client\extensions]spam blocker for ms outlook=4.0;[%PROGRAM_FILES%]\SPAMBL~1\bin\102215~1.0\SBOLExt.dll;1;11111111111111;1111111
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]spam blocker for outlook express=[%PROGRAM_FILES%]\SPAMBL~1\bin\102215~1.0\SBInst.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]hbtools=[%PROGRAM_FILES%]\HbTools\Bin\4.8.7.0\HbtOEAddOn.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\exchange\client\extensions]spam blocker for ms outlook=4.0;[%PROGRAM_FILES%]\SPAMBL~1\Bin\475~1.0\SBOLExt.dll;1;11111111111111;1111111
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]spamblocker=[%PROGRAM_FILES%]\SpamBlockerUtility\Bin\4.7.5.0\SbOEAddOn.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]spamblocker=(EMPTY)
  • [HKEY_LOCAL_MACHINE\software\microsoft\exchange\client\extensions]spam blocker for ms outlook=4.0;[%PROGRAM_FILES%]\SPAMBL~1\Bin\461~1.0\SBOLExt.dll;1;11111111111111;1111111
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarb]versionminor=3.0
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]hotbar=[%PROGRAM_FILES%]\HOTBAR\BIN\4.5.3.0\HBINST.EXE /Upgrade
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\internet settings\user agent\post platform]hotbar 4.1.8.0=Hotbar
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbara]versionminor=3.0
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]weatherontray=[%PROGRAM_FILES%]\Hotbar\bin\4.5.3.0\WeatherOnTray.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbara]displayname=Hotbar Web Tools
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbara]versionminor=4.0
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarb]displayname=Hotbar Email Toolbar
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarb]versionminor=4.0
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]spamblocker=[%PROGRAM_FILES%]\SpamBlockerUtility\Bin\4.8.5.0\SbOEAddOn.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]hbtools=[%PROGRAM_FILES%]\HbTools\Bin\4.8.0.0\HbtOEAddOn.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\exchange\client\extensions]spam blocker for ms outlook=4.0;[%PROGRAM_FILES%]\SPAMBL~1\bin\102237~1.0\SBOLExt.dll;1;11111111111111;1111111
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]spam blocker for outlook express=[%PROGRAM_FILES%]\SPAMBL~1\bin\102237~1.0\SBInst.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarc]versionmajor=4.4
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarc]versionminor=7.0
  • [HKEY_LOCAL_MACHINE\software\microsoft\exchange\client\extensions]spam blocker for ms outlook=4.0;[%PROGRAM_FILES%]\SPAMBL~1\bin\102203~1.0\SBOLExt.dll;1;11111111111111;1111111
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]spam blocker for outlook express=[%PROGRAM_FILES%]\SPAMBL~1\bin\102203~1.0\SBInst.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\internet settings\user agent\post platform]hotbar 4.2.8.0=Hotbar
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]weatherontray=[%PROGRAM_FILES%]\HbTools\Bin\4.8.7.0\HbtWeatherOnTray.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbara]versionminor=2.0
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarb]versionminor=2.0
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbara]versionminor=0.0
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarb]versionminor=0.0
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarc]versionminor=0.0
  • [HKEY_LOCAL_MACHINE\software\microsoft\exchange\client\extensions]spam blocker for ms outlook=4.0;[%PROGRAM_FILES%]\SPAMBL~1\Bin\477~1.0\SBOLExt.dll;1;11111111111111;1111111
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]hotbar=(EMPTY)
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\internet settings\user agent\post platform]hotbar 4.4.9.0=Hotbar
  • [HKEY_LOCAL_MACHINE\software\microsoft\exchange\client\extensions]spam blocker for ms outlook=4.0;[%PROGRAM_FILES%]\Hotbar\bin\449~1.0\SBOLExt.dll;1;11111111111111;1111111
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]weatherontray=[%PROGRAM_FILES%]\HbTools\Bin\4.8.2.0\HbtWeatherOnTray.exe
  • [HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser]{b195b3b3-8a05-11d3-97a4-0004aca6948e}=1
  • [HKEY_LOCAL_MACHINE\software\microsoft\exchange\client\extensions]spam blocker for ms outlook=4.0;[%PROGRAM_FILES%]\Hotbar\bin\451~1.0\SBOLExt.dll;1;11111111111111;1111111
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]spam blocker for outlook express=[%PROGRAM_FILES%]\SPAMBL~1\bin\102217~1.0\SBInst.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]weatherontray=[%PROGRAM_FILES%]\HbTools\Bin\4.7.3.0\HbtWeatherOnTray.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\exchange\client\extensions]spam blocker for ms outlook=4.0;[%PROGRAM_FILES%]\SPAMBL~1\bin\102219~1.0\SBOLExt.dll;1;11111111111111;1111111
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\internet settings\5.0\user agent\post platform]spamblockerutility 4.7.7=(EMPTY)
  • [HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser]{74cc49f7-eb32-4a08-b204-948962a6e3db}=1
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]spam blocker for outlook express=[%PROGRAM_FILES%]\SPAMBL~1\Bin\477~1.0\SBInst.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\internet settings\user agent\post platform]hotbar 3.0=Hotbar
  • [HKEY_LOCAL_MACHINE\software\microsoft\exchange\client\extensions]spam blocker for ms outlook=4.0;[%PROGRAM_FILES%]\SPAMBL~1\bin\102230~1.0\SBOLExt.dll;1;11111111111111;1111111
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]spam blocker for outlook express=[%PROGRAM_FILES%]\SPAMBL~1\bin\102230~1.0\SBInst.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbara]displayname=Web Tools by Spam Blocker Utility
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]weatherontray=[%PROGRAM_FILES%]\Hotbar\bin\4.5.0.0\WeatherOnTray.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarb]displayname=Spam Blocker Utility
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarc]displayname=Shopper Reports by Spam Blocker Utility
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\internet settings\user agent\post platform]hotbar 4.3.5.0=Hotbar
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbara]versionmajor=4.4
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbara]versionminor=9.0
  • [HKEY_LOCAL_MACHINE\software\microsoft\exchange\client\extensions]spam blocker for ms outlook=4.0;[%PROGRAM_FILES%]\SPAMBL~1\bin\100342~1.0\SBOLExt.dll;1;11111111111111;1111111
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]hbtools=[%PROGRAM_FILES%]\HbTools\Bin\4.7.5.0\HbtOEAddOn.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]spamblocker=[%PROGRAM_FILES%]\SpamBlockerUtility\Bin\4.8.0.0\SbOEAddOn.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]weatherontray=[%PROGRAM_FILES%]\HbTools\Bin\4.8.0.0\HbtWeatherOnTray.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]weatherontray=[%PROGRAM_FILES%]\HbTools\Bin\4.8.4.0\HbtWeatherOnTray.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]hotbar=[%PROGRAM_FILES%]\Hotbar\bin\4.4.5.0\HbInst.exe /Upgrade
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\internet settings\user agent\post platform]hotbar 4.3.4.0=Hotbar
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]hotbar=[%PROGRAM_FILES%]\Hotbar\bin\Hbinst.exe /Upgrade
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]hbtools=[%PROGRAM_FILES%]\HbTools\Bin\4.8.2.0\HbtOEAddOn.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]spam blocker for outlook express=[%PROGRAM_FILES%]\SPAMBL~1\Bin\475~1.0\SBInst.exe