YourSiteBar Spyware Profile

YourSiteBar is a spyware program disguised as a toolbar add-on for your browser.  It was first discovered on March 14 of 2005.  It is created by Integrated Search Technologies (IST), and distributed from http://www.yoursitebar.com/ and ysbweb.com, among other places.

The YourSiteBar is installed manually, as part of a bundle, or by ActiveX drive-by downloads. It has been known to deliver pop-up ads.  It sends user data to a remote server, and it also downloads arbitrary software, which may or may not be spyware or adware.  It is also set to start when you start up Internet Explorer, so it can be difficult to remove.

The activity of YourSiteBar can seriously slow down your computer’s performance.  It can also potentially cause your Internet browser to freeze or crash.  Any supposed benefits it offers are not worth compromising the functionality of your computer or your privacy.

If you are infected with this program, you should remove it immediately with ZookaWare PC Cleaner.  YourSiteBar has an uninstall program contained within it, but there’s no guarantee that it will remove the spyware components.  ZookaWare PC Cleaner guarantees complete removal of this threat

Also Known As:
YourSiteBar Spyware

Spyware Type:
Toolbar
Trojan Downloader

Associated Files:
ysbinstall_1000716_2.exe
ysbinstall_1002755_3.exe
ysbinstall_1000489_3.exe
ysbinstall_1000489_3[1].exe
auf0.exe
reed.exe
ysbactivex1.dll
ysbactivex.dll
ysb[1].dll
ysb.dll
imagemap_normal.bmp
ysb_prompt[2].htm
ysb_prompt[1].htm
version.txt
shortcuts.txt
prompt[1].htm
b_434_2_2_278300.htm
ysb.exe
yoursitebar.xml
fca0IVf.exe
fjUkYVS.exe
istinstall_153191.exe
DeleteYourSiteBar
HKEY_CLASSES_ROOT\CLSID\{86227D9C-0EFE-4F8A-AA55-30386A3F5686}
HKEY_CLASSES_ROOT\Interface\{03B800F9-2536-4441-8CDA-2A3E6D15B4F8}
HKEY_CLASSES_ROOT\Interface\{DFBCC1EB-B149-487E-80C1-CC1562021542}
HKEY_CLASSES_ROOT\Interface\{7B9A715E-9D87-4C21-BF9E-F914F2FA953F}
HKEY_CLASSES_ROOT\Interface\{EAF2CCEE-21A1-4203-9F36-4929FD104D43}
HKEY_CLASSES_ROOT\TypeLib\{4EE12B71-AA5E-45EC-8666-2DB3AD3FDF44}
HKEY_CLASSES_ROOT\Typelib\{6D3F5DE4-E980-4407-A10F-9AC771ABAAE6}
HKEY_CLASSES_ROOT\Ysb.YsbObj
HKEY_CLASSES_ROOT\Ysb.YsbObj.1
HKEY_CLASSES_ROOT\ YSBactivex.Installer
HKEY_CLASSES_ROOT\ YSBactivex.Installer.1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\YourSiteBar
HKEY_LOCAL_MACHINE\SOFTWARE\YourSiteBar
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar {86227D9C-0EFE-4f8a-AA55-30386A3F5686}” = ”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser {86227D9C-0EFE-4f8a-AA55-30386A3F5686}” = ”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\YourSiteBar “DisplayName” = “YourSiteBar”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\YourSiteBar “HelpLink” = “http://www.ysbweb.com”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\YourSiteBar “Publisher” = “Integrated Seach Technologies”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\YourSiteBar “UninstallString”= “regsvr32 /u /s”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\YourSiteBar “URLInfoAbout” = http://www.ysbweb.com”
HKEY_LOCAL_MACHINE\SOFTWARE\YourSiteBar “gUpdate” = “0”

Download Free Scan
ZookaWare runs on Windows Vista, 7, 8 and 10. It has no ads, popups or bundled software and fully uninstalls by clicking Start > All Programs > select ZookaWare and click Uninstall.

2 Responses

  1. Carla Braig says:

    I recently seem to have gotten infected with a virus called YourSiteBar.
    I did locate and “fix” it with Spybot S&D once but then the next time I ran S&D it spotted it again.
    I run CleanUp regularily and also have a “Rogers Online Protection Package” which has another Virus guard and Spyware guard. Been coming at this thing from many angles but it keeps reappearing.
    Aside from the spyware programs that “fix” it I have gone to Add & Remove programs and “removed” YourSiteBar from there. Nothing is really affecting it.
    I’m a user, not really all that technically proficient so outside of these sorts of programs to help me I am at a loss. I recently reformatted my computer because of various problems I was having but dispite my firewall and daily scanning for problems and the like within 2 weeks here I am again with the same virus.
    Now I am using SpyZooka and this program really removed it. I guess you won a new client 🙂

  2. Joseph Mourn says:

    I think I have spyware or something on my computer, tried running ad aware and avast and stuff like that but its still on my computer. “yoursitebar” and “ISTsvc” wont go away. I try to remove it myself, but it is not working. I am not so good at computers so I let my pc in the hands of Spyzooka.
    Thank you!

Leave a Reply

Your email address will not be published. Required fields are marked *

css.php