Updated: February 13, 2007 11:45:35 AM
Type: Adware
Risk Impact: Medium
File Names:
MBKWBar.exe
IEToolbar.dll
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
When Adware.Appoli is executed, it performs the following actions:
- Creates the following file:
- %ProgramFiles%\MBKWBar\IEToolBar.dll
Note: %ProgramFiles% is a variable that refers to the program files folder. By default, this is C:\Program Files.
- Creates the following registry keys:
HKEY_CLASSES_ROOT\CLSID\{EA5A82FB-D6BE-44F9-9363-B1ABABC153C1}
HKEY_CLASSES_ROOT\IEToolBar.ToolBarImpl.1
HKEY_CLASSES_ROOT\IEToolBar.ToolBarImpl
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\MBKWBar
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Typelib\{4A7DBA74-E729-4EC8-92E2-FFD83921449F}
HKEY_CLASSES_ROOT\TypeLib\{4A7DBA74-E729-4EC8-92E2-FFD83921449F}
HKEY_CURRENT_USER\Software\MBKWBar
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\{EA5A82FB-D6BE-44F9-9363-B1ABABC153C1}
- Connects to the domains config.mbkwbar.com and report.mbkwbar.com to register itself and to download configuration parameters.
- Loads IEToolBar.dll with Internet Explorer and displays pop-up advertisements.