Adware applications, toolbars and browser extensions may serve advertisements even while you are not surfing the Internet.

This application may serve various types of advertising, not limited to pop-up ads. It may results in blocking the activity of a pc-user since this malware consumes a lot of memory because it costantly monitors if someone is deleting it from the registry or is trying to kill it in some way. It may also blocking Anti-Virus programs and contains a list of programs *.exe name in memory to block them if it detects they are running in the task manager.

Summary of the EliteToolbar Remover:

A lot of people around Internet are having problems with one of the latest Elitetoolbar malware variants.

Actually some software like Spybot v.1.3, CWShredder v.2.12, Noadware, Adaware v.6, SpyNuker 2004 and SBC Yahoo! Anti-spy have no-success in deleting this very frustrating malware. These programs find and delete it, but it keeps coming back since this new variant is very hard to be cleaned from the operative system.

The main problem is that the malware creates a lot of registry entries and it goes in execution at the start of the pc widing itself in RAM and deleting its own *.exe from the C:\Windows\System32 directory.

When the ordinary tools try to remove it, they only clean the registry calls, the C:\Windows\EliteToolbar directory and the cabinets files where it has been originated the first time, but they don't take any actions against the malware itself that is currently running in RAM memory and is waiting for the pc O.S. to be shutted down to repeat the infestation from the back!

This new version of the EliteToolbar keeps all the previous disadvantages brang from the CoolWebSearch malware and some new ones including pop-up windows at every 2 minutes, permanent block of the Google Toolbar (if eventually present), redirecting of any instances for Google's and Yahoo's web-browsing needings, and so on...

This is a very tricky situation that keeps frustration in people who are experiencing that!

We, at SimplyTech.it, have released a freeware utility that should help you in getting back your O.S. functionality by definitevely killing this malware.

The only thing you have to do is to reboot your machine in Safe Mode (just click onto F8 key the same moment the pc is starting, before the MS Windows flag screen) and run the EliteToolbar Remover, then click the "Kill Elite Toolbar" button and wait until it will finish its work.

Occasionally a DOS box could face-up to asking your permission in deleting some files inside the temporary Windows directories. You must accepting the deletion of them to be sure to fisically removing the malware!

What's New:

The new EliteToolbar Remover deletes any traces of the following persistent malwares:

EliteBar (adware toolbar)
EliteToolbar (adware toolbar)
EliteSidebar (adware toolbar)
BargainBuddy (Adware)
Browser Aid (adware toolbar)
CashToolbar (adware toolbar)
FreshBar (also known as: ADW_FRESHBAR.B, adware)
GameSpy (adware)
MoneyTree (adware)
Nail.exe (Trojan)
NaviSearch (Adware)
navpsrvc.exe (also known as: W32/Forbot-EF, worm)
SearchMeUp (adware toolbar)
SideStep (spyware)
Spybot - Randex (Worm)
SupportSoft (spyware)
SurfSideKick (malware)
Win32.RBot (Worm)
winmon.exe (also known as: W32/Agobot-KA, trojan)
WinMoviePlugIn (adware)

Last update: 14th May 2005

Technical Summary of the EliteToolbar malware:

Name: EliteBar IE Toolbar

Company: Search Miracle (www.searchmiracle.com)

Description : EliteBar (ELITETOOLBAR VERSION xx.DLL) IE toolbar. Component of SearchMiracle.
Adware applications, toolbars and browser extensions may serve advertisements even while you are not surfing the Internet.
This application may serve various types of advertising, not limited to pop-up ads. It may result in blocking the activity of a PC user since this malware consumes a lot of memory because it constantly monitors if someone is deleting it from the registry or is trying to kill it in some way. It may also block anti-virus programs and contains a list of *.exe program names in memory to block them if it detects they are running in the task manager.

Summary of the EliteToolbar Remover v.1.3.0:

A lot of people around the Internet are having problems with one of the latest Elitetoolbar malware variants.

Actually some software like Spybot v.1.3, CWShredder v.2.12, Noadware, Adaware v.6, SpyNuker 2004 and SBC Yahoo! Anti-spy have no success in deleting this very frustrating malware. These programs find and delete it, but it keeps coming back since this new variant is very difficult to remove from the operating system.

The main problem is that the malware creates a lot of registry entries and executes at PC startup, winding itself into RAM and deletes its own *.exe from the C:\Windows\System32 directory.

When ordinary tools try to remove it, they only clean the registry calls, the C:\Windows\EliteToolbar directory and the cabinets files where it originated from, but they don't take any action against the malware itself that is currently running in RAM and waiting for the PC OS to be shut down only to repeat the infestation once again!

This new version of the EliteToolbar has all the previous disadvantages of the CoolWebSearch malware and some new ones including pop-up windows every 2 minutes, a permanent block of the Google Toolbar (if present), redirecting of any instances of Google and Yahoo web-browsing, and so on...