1. /
  2. Security Response/
  3. Adware.DailyToolbar

Adware.DailyToolbar

Updated:
February 13, 2007 11:39:08 AM
Type:
Adware
Version:
1.0.0.1
Publisher:
Authorized Search Agents
Risk Impact:
Medium
File Names:
DailyToolbar.dll
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP


Adware.DailyToolbar is a pornographic-related adware toolbar from authorizedsearchagents.com. It is distributed by nichetoolbars.com.

When Adware.DailyToolbar is installed, it does the following:
  1. Creates the following registry keys:

    HKEY_CLASSES_ROOT\AppID\{951B3138-AE8E-4676-A05A-250A5F111631}
    HKEY_CLASSES_ROOT\AppID\DailyToolbar.DLL\AppID
    HKEY_CLASSES_ROOT\DailyToolbar.IEBand.1
    HKEY_CLASSES_ROOT\DailyToolbar.IEBand
    HKEY_CLASSES_ROOT\CLSID\{8333C319-0669-4893-A418-F56D9249FCA6}
    HKEY_CLASSES_ROOT\IEToolbar.AffiliateCtl
    HKEY_CLASSES_ROOT\IEToolbar.AffiliateCtl.1
    HKEY_CLASSES_ROOT\CLSID\{38E0F7DD-1468-4DBE-A3EA-BAAFA10D4964}
    HKEY_CLASSES_ROOT\DailyToolbar.SysMgr
    HKEY_CLASSES_ROOT\DailyToolbar.SysMgr.1
    HKEY_CLASSES_ROOT\CLSID\{58F9B276-E1CC-458e-8159-21CBC021874B}
    HKEY_CLASSES_ROOT\TypeLib\{951B3138-AE8E-4676-A05A-250A5F111631}
    HKEY_CLASSES_ROOT\Interface\{10195311-E434-47A9-ADBA-48839E3F7E4E}
    HKEY_CLASSES_ROOT\Interface\{B2C9DD5F-8267-46E4-B49A-5D4479A4171C}
    HKEY_CLASSES_ROOT\Interface\{ABAFA0B4-F78D-42E5-8C31-1A441D01C1DF}
    HKEY_LOCAL_MACHINE\SOFTWARE\NIX Solutions\DailyToolbar
    HKEY_CURRENT_USER\SOFTWARE\NIX Solutions\DailyToolbar
    HKEY_LOCAL_MACHINE\Software\DailyToolbar
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DailyToolbar

    and adds subkeys and values to them to set flags and configurations.

  2. Modifies the value:

    "Start Page" = "[http://]www.topsearchdog.com/[REMOVED]"

    in the registry subkey:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main

  3. Adds the value:

    "{8333C319-0669-4893-A418-F56D9249FCA6}" = "DailyToolbar"

    to the registry subkey:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar

  4. Adds a toolbar called the "DailyToolbar" to Microsoft Internet Explorer. The toolbar displays the following buttons:

    • Top Paysites
    • Dialy Vids
    • Daily Galleries
    • Adult Dating Webcams
    • Our Friends

      Clicking on these buttons opens pornographic Web sites. When these buttons are displayed, searchape.com searches the words entered in Search.

  5. Adds a button with red and blue arrows known as the Switch button to the toolbar. When the Switch button is clicked, the toolbar displays the following buttons:

    • Internet Privacy
    • Hosting
    • Gambling
    • Health Products
    • Real Estate
    • Travel
    Clicking on these buttons opens related Web sites. When these buttons are displayed, google.com searches the keywords entered in Search.


Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver