Threat Descriptions

Adware:W32/Gigatech-Superbar

Classification

Category :

Spyware

Type :

Adware

Platform :

W32

Aliases :

-

Summary

This program delivers advertising content to the user. It is usually annoying but harmless, unless it is combined with spyware or trackware.

Removal

Based on the settings of your F-Secure security product, it may block the file from running, move it to the quarantine where it cannot spread or cause harm, or ask you to select an action.

A False Positive is when a file is incorrectly detected as harmful, usually because its code or behavior resembles known harmful programs. A False Positive will usually be fixed in a subsequent database update without any action needed on your part. If you wish, you may also:

  • Check for the latest database updates

    First check if your F-Secure security program is using the latest updates, then try scanning the file again.

  • Submit a sample

    After checking, if you still believe the file is incorrectly detected, you can submit a sample of it for re-analysis.

    Note: If the file was moved to quarantine, you need to collect the file from quarantine before you can submit it.

  • Exclude a file from further scanning

    If you are certain that the file is safe and want to continue using it, you can exclude it from further scanning by the F-Secure security product.

    Note: You need administrative rights to change the settings.

Technical Details

Adware:W32/Gigatech-Superbar is an adware program that is installed as Browser Helper Object (BHO) on the Microsoft Internet Explorer (IE) web browser.

In addition to displaying pop-up advertisements, the program also adds links to the search results of other search engines from the greasycow.com website.

The toolbar appears as below:

File System Changes

Create these directories:

  • C:\SuperBar Files

Registry Modifications

Creates these keys:

  • HKEY_CURRENT_USER\Software\SuperBar
  • HKEY_LOCAL_MACHINE\SOFTWARE\SuperBar
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SuperBar.Component
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SuperBarBHO.Component
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SuperBarBL.Component
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SuperBarCWS.Component
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SuperBarSE.Component
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{136A9D1D-1F4B-43D4-8359-6F2382449255}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{49C3014F-03ED-4634-9FB2-2881F2C7A057}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4F9D4163-23F0-42E1-AFDA-4C1A6F8607E7}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CF1E49B3-24A6-4B17-94BE-C25102E3BF04}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D86E62D8-B2D2-4B61-A9C2-1CC011B29402}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar {D86E62D8-B2D2-4B61-A9C2-1CC011B29402}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{136A9D1D-1F4B-43D4-8359-6F2382449255}
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser{D86E62D8-B2D2-4B61-A9C2-1CC011B29402}
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{136A9D1D-1F4B-43D4-8359-6F2382449255}
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D86E62D8-B2D2-4B61-A9C2-1CC011B29402}