We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Virus:DOS/Elitebar
Detected by Microsoft Defender Antivirus
Aliases: AdClicker-BA (McAfee) Trojan.Elitebar (Symantec) Win32/Betalire (CA) Win32/EliteBar!BHO!Dropper (CA) SearchMiracle.EliteBar (Sunbelt Software)
Summary
EliteBar displays pop-up advertisements on the desktop and may take other actions without user consent. It may add its own toolbar in Internet Explorer, for which it may install a browser helper object (BHO). EliteBar may also change the user's Internet Explorer home page and add its own "favorites" URLs to the user's Favorites list. Elitebar employs user-mode rootkit techniques to hide some of its files, processes, and registry entries, so that these resources are not visible in system utilities such as Windows Explorer, Task Manager, and Registry Editor. Elitebar may be installed without notifying the user, and may silently download and install updates or other executable code.Â
Some versions of Elitebar place an entry for an uninstaller named "EliteBar Internet Explorer Toolbar" in Add or Remove Programs in Control Panel. If an Elitebar uninstaller is not available or if you do not want to use one that is provided, use Microsoft Windows Defender or another up-to-date scanning and removal tool to detect and remove Elitebar from your computer. For more information, see http://www.microsoft.com/athome/security/downloads/default.mspx
Follow us
