EliteToolbar Remover V.1.2.0	
Anti-EliteToolbar freeware program	

Technical Summary of the malware
Name: EliteBar IE Toolbar 

Company: Search Miracle (www.searchmiracle.com)

Description : EliteBar (ELITETOOLBAR VERSION xx.DLL) IE toolbar. Component of SearchMiracle.
Adware applications, toolbars and browser extensions may serve advertisements even while you are not surfing the Internet. 
This application may serve various types of advertising, not limited to pop-up ads. It may results in blocking the activity of a pc-user since this malware consumes a lot of memory because it costantly monitors if someone is deleting it from the registry or is trying to kill it in some way. It may also blocking Anti-Virus programs and contains a list of programs *.exe name in memory to block them if it detects they are running in the task manager.
Summary of the EliteToolbar Remover v.1.2.0:
A lot of people around Internet are having problems with one of the latest Elitetoolbar malware variants. 

Actually some software like Spybot v.1.3, CWShredder v.2.12, Noadware, Adaware v.6, SpyNuker 2004 and SBC Yahoo! Anti-spy have no-success in deleting this very frustrating malware. These programs find and delete it, but it keeps coming back since this new variant is very hard to be cleaned from the operative system. 
The main problem is that the malware creates a lot of registry entries and it goes in execution at the start of the pc widing itself in RAM and deleting its own *.exe from the C:\Windows\System32 directory.
When the ordinary tools try to remove it, they only clean the registry calls, the C:\Windows\EliteToolbar directory and the cabinets files where it has been originated the first time, but they don't take any actions against the malware itself that is currently running in RAM memory and is waiting for the pc O.S. to be shutted down to repeat the infestation from the back!
This new version of the EliteToolbar keeps all the previous disadvantages brang from the CoolWebSearch malware and some new ones including pop-up windows at every 2 minutes, permanent block of the Google Toolbar (if eventually present), redirecting of any instances for Google's and Yahoo's web-browsing needings, and so on...
This is a very tricky situation that keeps frustration in people who are experiencing that!
We, at SimplyTech.it, in early January 2005 had released a freeware utility that should help you in getting back your O.S. functionality by definitevely killing this malware.
After we had released the Version 1.0 of our EliteToolbar Remover, the silly guys at EliteToolbar have thought to release some new variants of their malware. The variants in circulation from the end of January 2005, in fact, do a cache detect for the words: "EliteToolbarRemoverV10.zip" that was the old name of our previous Version 1.0.

That's why if you are trying to downloading it from some mirror site you will receive the following error:

''Cannot copy file, Cannot read from file source or disk'' 
This is not an original message of your Operative System, but it is a stupid message from the malware that is actually running in your pc.

The new variants of the malware also completely conceal the presence of the EliteToolbarRemoverV10.exe, so that if you are opening the archyve you can only see the readme.doc file that is attached to that and you cannot see the *.exe even if it is really there! After all, these very clever programmers, aren't they? :)

Anyway, it is sure that these people will blacklist also the new name of the zip we are using now, so if this will occours and some new variants will circulate in the Net from today we suggest you to download the software from another pc and take it in a diskette or an USB pendrive to run it from the infected pc in Safe Mode, as usual.

Look carefully what you have to do:

The only thing you have to do is to reboot your machine in Safe Mode (just click onto F8 key the same moment the pc is starting, before the MS Windows flag screen) and run the EliteToolbar Remover, then click the "Kill Elite Toolbar" button and wait until it will finish its work.
Occasionally a DOS box could face-up to asking your permission in deleting some files inside the temporary Windows directories. You must accepting the deletion of them to be sure to fisically removing the malware!
Updated: the latest version 1.2.0 of the EliteToolbar Remover can kill the EliteToolbar malware also in Normal Mode. In fact, it detects automatically for the malware if it is resident in memory and kill its process.
We suggest you to run the program in Safe Mode but if you want, you can give it a chance to catch the malware in Normal Mode too!
Note: since it is a freeware the program may be redistribuited everywhere! 
To support us and to keep some new freeware coming soon or later, we would appreciate a donation from our users. Any amount would be greatly appreciated... YES! Also one single dollar... why not? :)
By clicking the donation link below, you will be able to make a donation to us using PayPal:
https://www.paypal.com/xclick/business=giankycalo@tin.it&item_name=EliteToolbar+Remover&item_number=EliteToolbar+Remover&no_shipping=0&no_note=1&tax=0&currency_code=USD
It's fast, easy and secure. 
Thank You for your support!! :-)
For any question or problem, or if you want to advise us of the presence of some new variant of the malware, you can contact us by writing a mail to giancarlo@simplytech.it or you can put a message in the EliteToolbar Remover section of our forum. 
You will have a reply in the shortest time.

History of the EliteToolbar Remover:
Version 1.0: Originary version was able to defeat virtually all the EliteToolbar-based infestations. (Early Jan. 2005)
Version 1.1: The new variants circulated from the mid of January 2005 weren't defeated from the previous version. That's because people at EliteToolbar have used some new inventive in their job to complicating our lives... :) 
The program, now, shows some new status: "Scanning procedures" that enumerates the various steps the program is following, and "Suspected files or voices in Registry found" that keep you updated on the status of the infestation of your pc. (22 Feb. 2005)
Version 1.1.B: This version defeats one new variant of the malware issued from EliteToolbar people at around the end of February 2005. This new version also treats some variants of the BrowserAid and the CashToolbar malwares.
It also has an automatic live update function: by using the command "Check for updates..." in the menu of the program it will search if a new version is available in our site: www.simplytech.it/ETRemover, and will let you download it if necessary.
Version 1.2.0: This version has been released the 24th March and defeats one new variant of the malware in circulation from around the 10th March 2005. The new program has some new features like: 
- a complete processes-manager
- the automatic detection of the EliteToolbar malware even if Normal Mode
- it is possible to dump a process while it is running to save it in a *.dmp file that can be useful when a new variant of the malware is in circulation and you want to send it to us to check for it
- the program generates a Registry Log file by clicking on the button: "Save Reg. Log". 
This file shows a list of the auto-run keys, subkeys and values from your System Registry.

Techincal notes:
The program uses the following *.dll and *.ocx:
advapi32.dll
vba6.dll
scrrun.dll
shell32.dll
wininet.dll
scaneng.dll
procs.dll
psapi.dll
kernel32.dll
msvbvm60.dll
msinet.ocx
comctl32.ocx

From the Version 1.2.0 the program is distribuited as a compressed executable. It brings inside the following *.dll and *.ocx, decompressing them while in execution:
scaneng.dll
procs.dll
msinet.ocx
comctl32.ocx