Updated: February 13, 2007 11:41:33 AM
Type: Adware
Version: 2.0.1
Publisher: Blowsearch.com, Infospace, Inc.
Risk Impact: Medium
File Names: tbar.exe,ubinst.exe,Ultrabar.dll
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
When Adware.Hotbar is installed, it does the following:
- Creates the following files:
- %Program Files%\Blowsearch\ INSTALL.LOG
- %Program Files%\Blowsearch\ tbinstall.log
- %Program Files%\Blowsearch\ubinst.exe
- %Program Files%\Blowsearch\ ultrabar.dll
- %Program Files%\Blowsearch\ UNWISE.EXE
- C:\Documents and Settings\All Users\Application Data\Infospace
Note: %ProgramFiles% is a variable that refers to the program files folder. By default, this is C:\Program Files.
- Creates the following registry entries:
HKEY_CLASSES_ROOT\CLSID\{6F8ADBE2-8C92-4362-B0E6-7321AA49EE46}
HKEY_CLASSES_ROOT\TypeLib\{508D52D8-117D-405A-BF53-818278D8E4A8}
HKEY_CLASSES_ROOT\Interface\{818E8BAA-BBA9-4343-AF32-C7F51582D6B5}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\
Browser Helper Objects\{{6F8ADBE2-8C92-4362-B0E6-7321AA49EE46}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\
{6F8ADBE2-8C92-4362-B0E6-7321AA49EE46}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\
Uninstall\BlowsearchToolbar
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\
Explorer Bars\{6F8ADBE2-8C92-4362-B0E6-7321AA49EE46}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\
Toolbar\WebBrowser\{6F8ADBE2-8C92-4362-B0E6-7321AA49EE46}
HKEY_CURRENT_USER\Software\Infospace
HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\
MUICache\[Path where executable is stored]
- Launches Internet Explorer and tries to contact www.blowsearch.com.
Technorati
Digg
Delicious
Reddit
StumbleUpon
Yahoo Buzz
Twitter
Facebook
Newsvine
