Trackware.Dogpile

When the program is installed, it creates the following files:

• %ProgramFiles%\DogpileToolbar
• %ProgramFiles%\DOGPIL~1\INSTALL.LOG
• %ProgramFiles%\DogpileToolbar\tbinstall.log
• %ProgramFiles%\DogpileToolbar\ultrabar.dll
• %ProgramFiles%\DogpileToolbar\UNWISE.EXE

Next, the program creates the following registry subkeys:
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Uninstall\DogpileToolbar
HKEY_CLASSES_ROOT\CLSID\{5E92F538-B50B-46C5-9C5F-C6EECED3F6C6}
HKEY_CLASSES_ROOT\CLSID\{DCA9F79B-903A-456D-847D-43A2EFE0476B}
HKEY_CLASSES_ROOT\TypeLib\{55A59FFC-65F0-4995-93BA-D03EAA16443D}\1.0
HKEY_CURRENT_USER\Software\Infospace\DogpileToolbar\Options

It also creates the following registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Dogpile Toolbar\"DisplayName" = "Dogpile Toolbar"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Dogpile Toolbar\"UninstallString" = "C:\PROGRA~1\DOGPIL~1\UNWISE.EXE C:\PROGRA~1\DOGPIL~1\INSTALL.LOG"
HKEY_CLASSES_ROOT\CursorSearchWord.CConnect.1\"Default" = "Connect Class"
HKEY_CLASSES_ROOT\CursorSearchWord.CConnect.1\CLSID\"Default" = "{DCA9F79B-903A-456D-847D-43A2EFE0476B}"
HKEY_CLASSES_ROOT\CursorSearchWord.CConnect\"Default" = "Connect Class"
HKEY_CLASSES_ROOT\CursorSearchWord.CConnect\CLSID\"Default" = "{DCA9F79B-903A-456D-847D-43A2EFE0476B}"
HKEY_CLASSES_ROOT\CursorSearchWord.CConnect\CurVer\"Default" = "CursorSearchWord.CConnect.1"
HKEY_CLASSES_ROOT\CLSID\{DCA9F79B-903A-456D-847D-43A2EFE0476B}VersionIndependentProgID\"Default" = "CursorSearchWord.CConnect"
HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\CursorSearchWord.CConnect\"FriendlyName" = "Cursor Search"
HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\CursorSearchWord.CConnect\"Description" = "Cursor Search add-in for Word"
HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\CursorSearchWord.CConnect\"LoadBehavior" = "3"
HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\CursorSearchWord.CConnect\"CommandLineSafe" = "1"
HKEY_CURRENT_USER\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings" =
"3C 00 00 00 0B 00 00 00
01 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00
01 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00
00 00 00 00"

It also modifies the following registry entries:
HKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\"ProxyEnable" = "0"
HKEY_CURRENT_USER\Software\Microsoft\windows\CurrentVersion\Internet Settings\"MigrateProxy" = "1"
HKEY_CURRENT_USER\Software\Microsoft\windows\CurrentVersion\Internet Settings\"ProxyEnable" = "0"

The program stores icons, logos, sounds, and template files in the following location:
C:\Document and Settings\Administrator\Application Data\Infospace\DogpileToobar

After the installation, the following Dogpile toolbar appears when Internet Explorer is opened:



The toolbar performs the following functions:

• Web Search: Finds results from the Web's leading search engines.
• White and Yellow Pages.
• Popup Blocker.
• Ticker for getting news information.
• Cursor Search: Searches any word(s) on a Web page or Word Document by right-clicking your mouse.

When a search is entered into the Dogpile toolbar the browser is directed to clickit.go2net.com. This service, in turn, directs you to the target site.

The program then collects the following information:

• IP address
• Referral data
• Browser type
• Platform type
• Date and time that the InfoSpace Site was visited
• Search terms
• Visited links

InfoSpace analyzes the information to examine trends, administer the site, track user movement in the aggregate, and gather broad demographic information for aggregate use.

Summary