eXact.SearchBar Spyware Profile

eXact.Searchbar is a spyware program created by eXact Advertising.  It was released on November 30 of 2003.  It must be manually installed by the user to infect a computer.  It uses a search enhancing toolbar for your browser as a trade-off for infection.  Its ads are delivered as pop-ups.

Exact Advertising’s End User Licensing Agreement is up front about what Searchbar does.  It is explicitly stated that they will use your browsing activity and computer usage information to deliver targeted advertising.  They freely state that the sites they will direct you to are their affiliate sites.  They also state that they will download files to your computer as updates to Searchbar.  They also claim that Searchbar can be completely removed by the Add/Remove Programs command in Windows.

While the Add/Remove Programs function may remove the functional part of Searchbar, we recommend that you use a spyware removal tool to make certain that all the spyware is removed from your computer.  Spyzooka is the best program to do this.

Also Known As:
Spyware/BargainBuddy [Panda],
Adware/Etoolbar [Panda],
Adware/ExactSearch [Panda],
eXact,
eXact Search bar,
Exact Searchbar

Associated Files:
angelex.exe
cacls.exe-25504e4a.pf
cashback.exe
cb.exe
exactsetup.exe
exactsetup.exe-10a25ae5.pf
exacttoolbar.dll
exacttoolbar00068.dll
exactupdate.exe
exactupdate.exe-29d73d0f.pf
closewindow.exe
exactlog.txt
exactupdate00105.exe
exactupdate00136.exe
installer_adperform.exe
mg03025.xml
mg03026.xml
mg03027.xml
mg03028.xml
mg03030.xml
mg03031.xml
mg03032.xml
mg03033.xml
mg03034.xml
mg10000.xml
mqexdlm.srg
flash.exe
glb6.tmp-1a38aaa8.pf
install.log
mscb.dll
nls.exe
popularlinks.reg
stubnsbg21.exe
trkgif.exe
%program_files%\exact\exacttoolbar.dll
%program_files%\exact\exacttoolbar00068.dll
%program_files%\exact\exactupdate.exe
%program_files%\exact\exactupdate00136.exe
%program_files%\exact\popularlinks.reg
%program_files%\navisearch\bin\nls.exe
%system%\exacctsetup3.exe
%system%\exactsetup.dll
%system%\exacttoolbar.dll
%system%\ezstubi.dll
%system%\ezstubi.exe
%system%\s4bar.dll
%windows%\system\exacttoolbar.dll
%windows%\system\s4bar.dll
%windows%\system\s4bar.dll
%windows%\system\exacttoolbar.dll
%system%\s4bar.dll
%system%\ezstubi.dll
%system%\exacttoolbar.dll
%system%\exactsetup.dll
%program_files%\exact\exacttoolbar00068.dll
%program_files%\exact\exacttoolbar.dll
mscb.dll
flash.exe
exactsetup.exe
exactupdate00105.exe
closewindow.exe
cb.exe
cashback.exe
angelex.exe
trkgif.exe
%program_files%\exact\exactupdate.exe
stubnsbg21.exe
installer_adperform.exe
%system%\exacctsetup3.exe
%program_files%\navisearch\bin\nls.exe
%program_files%\exact\exactupdate00136.exe
%system%\ezstubi.exe
%windows%\system\s4bar.dll
%windows%\system\exacttoolbar.dll
%system%\s4bar.dll
%system%\ezstubi.dll
%system%\exacttoolbar.dll
%system%\exactsetup.dll
%program_files%\exact\exacttoolbar00068.dll
%program_files%\exact\exacttoolbar.dll
mscb.dll
HKEY_CLASSES_ROOT\clsid\{224530a0-c9cb-4aee-9c0f-54ac1b533211}
HKEY_CLASSES_ROOT\clsid\{f9765480-72d1-11d4-a75a-004f49045a87}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{f9765480-72d1-11d4-a75a-004f49045a87}
HKEY_CLASSES_ROOT\typelib\{53f066f0-a4c0-4f46-83eb-2dfd03f938cf}
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser {224530a0-c9cb-4aee-9c0f-54ac1b533211}
HKEY_LOCAL_MACHINE\software\classes\clsid\{224530a0-c9cb-4aee-9c0f-54ac1b533211}
HKEY_LOCAL_MACHINE\software\classes\clsid\{f9765480-72d1-11d4-a75a-004f49045a87}
HKEY_LOCAL_MACHINE\software\exact branding
HKEY_LOCAL_MACHINE\software\exact checkinservername
HKEY_LOCAL_MACHINE\software\exact checkinserverpath
HKEY_LOCAL_MACHINE\software\exact checkinserverport
HKEY_LOCAL_MACHINE\software\exact installdir
HKEY_LOCAL_MACHINE\software\exact partner
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar {224530a0-c9cb-4aee-9c0f-54ac1b533211}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{f9765480-72d1-11d4-a75a-004f49045a87}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run cashback
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run navisearch
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shell extensions\approved {224530a0-c9cb-4aee-9c0f-54ac1b533211}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shell extensions\approved {f9765480-72d1-11d4-a75a-004f49045a87}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shell extensions\approved\{224530a0-c9cb-4aee-9c0f-54ac1b533211}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shell extensions\approved\{f9765480-72d1-11d4-a75a-004f49045a87}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\exact search bar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\exact search bar displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\exact search bar uninstallstring
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\navisearch

Download Free Scan
ZookaWare runs on Windows Vista, 7, 8 and 10. It has no ads, popups or bundled software and fully uninstalls by clicking Start > All Programs > select ZookaWare and click Uninstall.

One Response

  1. Barbara Allen says:

    I guess my children install eXact.SearchBar without my knowledge. This virus made my life a living hell. Thanks to this post, and to SpyZooka, the computer is clean and I can use it safe. I’m glad that you exist!

Leave a Reply

Your email address will not be published. Required fields are marked *

css.php