Updated: February 13, 2007 11:43:40 AM
Type: Adware
Version: 3.0.2
Publisher: Starware.com
Risk Impact: Low
File Names:
Starware_305.exe
Starware.dll
Systems Affected: Windows 2000, Windows 98, Windows Me, Windows NT, Windows XP
When Adware.Starware is installed, it performs the following actions:
- Creates the following files:
- %UserProfile%\Application Data\Starware\BrowserSearch\BrowserSearch.xml
- %UserProfile%\Application Data\Starware\BrowserSearch\BrowserSearch.xml.backup
- %UserProfile%\Application Data\Starware\ErrorSearch\ErrorSearchOptions.xml
- %UserProfile%\Application Data\Starware\ErrorSearch\ErrorSearchOptions.xml.backup
- %UserProfile%\Application Data\Starware\Layouts\PreferencesLayout.xml
- %UserProfile%\Application Data\Starware\Layouts\PreferencesLayout.xml.backup
- %UserProfile%\Application Data\Starware\Layouts\ToolbarLayout.xml
- %UserProfile%\Application Data\Starware\Layouts\ToolbarLayout.xml.backup
- %UserProfile%\Application Data\Starware\Manager\ManagerOptions.xml
- %UserProfile%\Application Data\Starware\Manager\ManagerOptions.xml.backup
- %UserProfile%\Application Data\Starware\PopupBlocker\PopupBlockerOptions.xml
- %UserProfile%\Application Data\Starware\PopupBlocker\PopupBlockerOptions.xml.backup
- %UserProfile%\Application Data\Starware\ProductMessaging\ProductMessaging.xml
- %UserProfile%\Application Data\Starware\ProductMessaging\ProductMessaging.xml.backup
- %UserProfile%\Application Data\Starware\Reference\ReferenceOptions.xml
- %UserProfile%\Application Data\Starware\Reference\ReferenceOptions.xml.backup
- %UserProfile%\Application Data\Starware\RelatedSearch\RelatedSearchOptions.xml
- %UserProfile%\Application Data\Starware\RelatedSearch\RelatedSearchOptions.xml.backup
- %UserProfile%\Application Data\Starware\SearchMatch\SearchMatchOptions.xml
- %UserProfile%\Application Data\Starware\SearchMatch\SearchMatchOptions.xml.backup
- %UserProfile%\Application Data\Starware\SimpleUpdate\SimpleUpdateConfig.xml
- %UserProfile%\Application Data\Starware\SimpleUpdate\SimpleUpdateConfig.xml.backup
- %UserProfile%\Application Data\Starware\SmileyTown\SmileyTownOptions.xml
- %UserProfile%\Application Data\Starware\SmileyTown\SmileyTownOptions.xml.backup
- %UserProfile%\Application Data\Starware\Timers\Timers.xml
- %UserProfile%\Application Data\Starware\Timers\Timers.xml.backup
- %UserProfile%\Application Data\Starware\Toolbar\TBProductsOptions.xml
- %UserProfile%\Application Data\Starware\Toolbar\TBProductsOptions.xml.backup
- %UserProfile%\Application Data\Starware\ToolbarLogo\ToolbarLogoOptions.xml
- %UserProfile%\Application Data\Starware\ToolbarLogo\ToolbarLogoOptions.xml.backup
- %UserProfile%\Application Data\Starware\ToolbarSearch\ToolbarSearchOptions.xml
- %UserProfile%\Application Data\Starware\ToolbarSearch\ToolbarSearchOptions.xml.backup
- %UserProfile%\Application Data\Starware\TravelSearch\TravelSearchOptions.xml
- %UserProfile%\Application Data\Starware\TravelSearch\TravelSearchOptions.xml.backup
- %UserProfile%\Application Data\Starware\Weather\WeatherOptions.xml
- %UserProfile%\Application Data\Starware\Weather\WeatherOptions.xml.backup
- %UserProfile%\Cookies\LocalUser@overture[2].txt
- %UserProfile%\Local Settings\Temp\ICD1.tmp\setup.inf
- %UserProfile%\Local Settings\Temp\ICD1.tmp\Starware_305.exe
- %ProgramFiles%\Starware\bin\Starware.dll
- %ProgramFiles%\Starware\brand.bmp
- %ProgramFiles%\Starware\contexts\Error.xml
- %ProgramFiles%\Starware\contexts\Related.xml
- %ProgramFiles%\Starware\contexts\Travel.xml
- %ProgramFiles%\Starware\icons\star_16.ico
- %ProgramFiles%\Starware\StarwareConfig.xml
- %ProgramFiles%\Starware\StarwareUninstall.exe
- %ProgramFiles%\Starware\Products
Note:
- %UserProfile% is a variable that refers to the current user's profile folder. By default, this is C:\Documents and Settings\<Current User> (Windows NT/2000/XP).
- %ProgramFiles% is a variable that refers to the program files folder. By default, this is C:\Program Files.
- Creates the following registry keys:
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2D51D869-C36B-42bd-AE68-0A81BC771FA5}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7BED0340-176B-44bc-915E-C21C1DD6F617}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CA356D79-679B-4b4c-8E49-5AF97014F4C1}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D49E9D35-254C-4c6a-9D17-95018D228FF5}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CA356D79-679B-4b4c-8E49-5AF97014F4C1}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Starware
- HKEY_CURRENT_USER\Software\Starware
- Adds the value:
"{D49E9D35-254C-4c6a-9D17-95018D228FF5}" = "Starware"
in the registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
- Adds the value:
"{D49E9D35-254C-4C6A-9D17-95018D228FF5}" = <values>
in the registry key:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser
- Modifies the value:
"SearchAssistant" = "http://as.starware.com/dp/search?x=wKX1ILEOi+Vh7AfA98Gm4Me69ZMbubcDzJ8gIalwXowzPMzwyWNB1EcT8FvMQFUnKLIqaeNL06cRjR3z5HduUp6v3ufZrrU5GavoMMhuCkekNPNgVxm4YHwzk3UBtE56"
in the registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search
- Creates a search bar in Internet Explorer.
Technorati
Digg
Delicious
Reddit
StumbleUpon
Yahoo Buzz
Twitter
Facebook
Newsvine
