Jokwmp toolbar

Posted by Emma Adrian in Blog Latest Spyware News, Latest Spyware Threats, Recent Articles, Top Spyware Threats on March 17th, 2009 | Leave a comment
TAGS: , ,

What is Jokwmp toolbar?
Jokwmp Toolbar, another clone of all the previous Zlob toolbars, is a recent spyware infection that masquerades as an internet explorer toolbar that helps you remove spyware from your computer. Jokwmp toolbar comes from the Zlob Trojan infection which is downloaded through a video codec or P2P website, and it may redirect you to malicious websites that promote rogue anti-spyware programs.

Do you have Jokwmp toolbar?
If you have enough time and expertise, you can search your computer for Jokwmp toolbar manually. However, it might take hours to find out all files of Htepo Virus, and it is possible that Jokwmp toolbar will appear after rebooting, for its hidden files may still be there.

Download automatic scanner for Jokwmp toolbar
Spyware Cease – the technology-oriented security protection that provides a risk-free computing environment for your home and office – with detection, removal and guard in one intuitive and straight-forward interface. Only Spyware Cease gives you individual fix against the most dangerous spyware problems.

Manual Jokwmp toolbar removal instructions
WARNING: The manually removal method is for advanced users. Jokwmp toolbar manually removal can be difficult and time-consuming. There is no guarantee that Jokwmp toolbar can be completely removed, for there are hundreds of files generated when Jokwmp toolbar installed on your system. Make sure to back up your computer in case that you make any mistakes and your system does not work.

Follow the instruction below for Jokwmp toolbar removal manually:

Navigate and stop Jokwmp toolbar processes:
install_cn.exe
eqmd.exe
nethop.exe

Navigate and Unregister Jokwmp toolbar DLL Files:
jokwmp.dll
popnetxog.dll
rmvgor.dll
sapnet.dll

Navigate and Remove Jokwmp toolbar registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D3A3BB03-15BF-4C5B-A01A-4F376C62CBF3}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D3A3BB03-15BF-4C5B-A01A-4F376C62CBF3}\VersionIndependentProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E75C0DB5-5DF7-4DF0-9761-8EFCD1783912}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A7738AB-6CF0-49BF-8025-6F541AF0F3C0}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{36FF176E-0A2D-4A75-A366-BA6C5C5BE695}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{36FF176E-0A2D-4A75-A366-BA6C5C5BE695}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A7738AB-6CF0-49BF-8025-6F541AF0F3C0}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D3A3BB03-15BF-4C5B-A01A-4F376C62CBF3}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D3A3BB03-15BF-4C5B-A01A-4F376C62CBF3}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D3A3BB03-15BF-4C5B-A01A-4F376C62CBF3}\ProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D3A3BB03-15BF-4C5B-A01A-4F376C62CBF3}\Programmable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E75C0DB5-5DF7-4DF0-9761-8EFCD1783912}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E75C0DB5-5DF7-4DF0-9761-8EFCD1783912}\ProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E75C0DB5-5DF7-4DF0-9761-8EFCD1783912}\Programmable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E75C0DB5-5DF7-4DF0-9761-8EFCD1783912}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{075DFCA7-73D5-4219-8F12-4B6E9D4097D5}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07674711-95E8-46EB-B30B-5F691976D832}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07674711-95E8-46EB-B30B-5F691976D832}\ProxyStubClsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E75C0DB5-5DF7-4DF0-9761-8EFCD1783912}\VersionIndependentProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{075DFCA7-73D5-4219-8F12-4B6E9D4097D5}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{075DFCA7-73D5-4219-8F12-4B6E9D4097D5}\ProxyStubClsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{075DFCA7-73D5-4219-8F12-4B6E9D4097D5}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4677D280-FF2B-48CD-9786-A4A2F5A3BFE3}\1.0\HELPDIR
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F7676BAC-D0FD-42AD-B12B-220EE60AC351}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07674711-95E8-46EB-B30B-5F691976D832}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07674711-95E8-46EB-B30B-5F691976D832}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7AF5B502-729D-44DB-8E45-75D848BC970A}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7AF5B502-729D-44DB-8E45-75D848BC970A}\ProxyStubClsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7AF5B502-729D-44DB-8E45-75D848BC970A}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7AF5B502-729D-44DB-8E45-75D848BC970A}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4677D280-FF2B-48CD-9786-A4A2F5A3BFE3}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4677D280-FF2B-48CD-9786-A4A2F5A3BFE3}\1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4677D280-FF2B-48CD-9786-A4A2F5A3BFE3}\1.0\0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4677D280-FF2B-48CD-9786-A4A2F5A3BFE3}\1.0\0\win32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4677D280-FF2B-48CD-9786-A4A2F5A3BFE3}\1.0\FLAGS
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F7676BAC-D0FD-42AD-B12B-220EE60AC351}\1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F7676BAC-D0FD-42AD-B12B-220EE60AC351}\1.0\0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F7676BAC-D0FD-42AD-B12B-220EE60AC351}\1.0\0\win32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F7676BAC-D0FD-42AD-B12B-220EE60AC351}\1.0\FLAGS
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F7676BAC-D0FD-42AD-B12B-220EE60AC351}\1.0\HELPDIR
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D3A3BB03-15BF-4C5B-A01A-4F376C62CBF3}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WebVideo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\VideoPlugin HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jokwmp.bkdp
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jokwmp.bkdp\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jokwmp.bkdp\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jokwmp.ToolBar.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jokwmp.ToolBar.1\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSVPS.MSVPSApp
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSVPS.MSVPSApp\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSVPS.MSVPSApp\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brow

Navigate and Delete Jokwmp toolbar files:
C:\ProgramFiles\jokwmp
C:\ProgramFiles\jokwmp toolbar

What are the symptoms of Jokwmp toolbar?

  • Jokwmp toolbar may masquerades as an internet explorer toolbar
  • Jokwmp toolbar comes from the Zlob Trojan infection
  • Jokwmp toolbar may redirect you to malicious websites that promote rogue anti-spyware programs
  • Jokwmp toolbar may slow down computer process
  • Jokwmp toolbar may decrease system performance

How do I keep away from Jokwmp toolbar?
Once you have cleaned up Jokwmp toolbar, the most important point to prevent Jokwmp toolbar and future malicious programs from reverting is to stay suspicious of spam E-mail attachment and unknown websites. Here are several ways in which you can help protect your computer against Jokwmp toolbar and other malware:

  • Use a computer firewall
  • Confirm that you have downloaded all the latest critical security updates
  • Adjust Internet Explorer web browser’s security settings
  • Download and install anti-spyware protection, such as, Spyware Cease
  • Surf sites and download programs from the web sites you trust

What is Toolbar?
Jokwmp toolbar is a type of Toolbar.

A Toolbar is a type of browser plug-in that adds a third-party utility bar to the web browser, usually just below or next to the browser’s address bar. A Toolbar typically has a search function and provides search results for paid advertisers. It often has buttons that are links to advertisers’ web pages. An advertising toolbar may track browsing and search queries in order to display contextually relevant search results and ads.