Diybar Toolbar

It is a software that displays pop-up/pop-under advertisements when the primary user interface is not visible, or which do not appear to be associated with the product.0

General information:

Malware Name: Diybar Toolbar
Malware Type: Toolbar
Company Name: Diybar
Company URL: http://diy.51.net/
Threat Level: Moderate Risk
Operating System: WIN XP
Installation Type: Installed through ActiveX
Operation: Time of After Installation

Company Description:

It is designed specifically for Internet users, in order to meet the demand for access to all Internet users, and encourages Internet users according to their preferences and style reorganizing (DIY) of the tool. Diybar Commentator including the most commonly used Internet search function, mail function landing, and the collection site classification search function, practical tool to link functions.

Spyware Description:

It is a software that displays pop-up/pop-under advertisements when the primary user interface is not visible, or which do not appear to be associated with the product.0

Characteristics/Symptoms:

    -> Changes browser -> Shows Advertisements -> It has a search function and provides search results for paid advertisers0

Additional information might be found here:

google Search at Google for Diybar Toolbar
bing Search at Bing for Diybar Toolbar
yahoo Search at Yahoo for Diybar Toolbar

Processes Running:

Codebase: http://pi.51.net/download/diybar2.cab

File information Created after Installation:

File Location Size (Bytes) Type
C:\WINDOWS\Downloaded Program Files\diybar2.inf 437 INF File
C:\WINDOWS\system32\diybar2\news.htm 2037 HTM File
C:\WINDOWS\system32\diybar2\version.txt 7 Text Document

Folder information Created after Installation:

Folder Location

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_CURRENT_USER SoftwareDIYTOOLBARV1 curVersion
HKEY_CURRENT_USER SoftwareDIYTOOLBARV2LinkFilter HideFlash
HKEY_CURRENT_USER \Software\DIYTOOLBAR\V1 pid