Trackware.Anquiro

Printer Friendly Page

Updated: February 13, 2007 11:45:54 AM

Type: Trackware

Version: 1.0.0.4

Publisher: http://www.anquiro.com

Risk Impact: Low

File Names: anquiro.dll

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

When Trackware.Anquiro is installed it does the following:

Creates the following files:
- %ProgramFiles%\aniquro\anquiro.dll
- %ProgramFiles%\aniquro\anquiro.inf
- %ProgramFiles%\aniquro\basis.xml
- %ProgramFiles%\aniquro\Cache\522ea8a804a3e7e4b93df15a1539fc53.xml
- %ProgramFiles%\aniquro\favicon.ico
- %ProgramFiles%\aniquro\nav.bmp
- %ProgramFiles%\aniquro\newversion.txt
- %ProgramFiles%\aniquro\toolbar.crc
- %ProgramFiles%\aniquro\version.txt
  
  Note:
- These files may also be created in %ProgramFiles%\IEToolbar
- %ProgramFiles% is a variable that refers to the program files folder. By default, this is C:\Program Files.
Creates the following registry subkeys:

HKEY_CLASSES_ROOT\CLSID\{A4F64D63-3576-4754-8DD5-4D0A49345FD5} HKEY_CLASSES_ROOT\Interface\{FABBB49A-4D7B-415B-8250-15C3B854E9FF} HKEY_CLASSES_ROOT\TypeLib\{5680210F-3D26-449E-9EF5-D03E34C894D9} HKEY_CLASSES_ROOT\XBTB00000.IEToolbar HKEY_CLASSES_ROOT\XBTB00000.IEToolbar.1 HKEY_CLASSES_ROOT\XBTB00000.XBTB00000 HKEY_CLASSES_ROOT\XBTB00000.XBTB00000.1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{A4F64D63-3576-4754-8DD5-4D0A49345FD5} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XBTB00000.XBTB00000IEToolbar HKEY_CURRENT_USER\Software\XBTB00000
Adds the following value:

"{A4F64D63-3576-4754-8DD5-4D0A49345FD5}" = "00"

to the registry subkeys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar HKEY_ALL_USERS\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser HKEY_ALL_USERS\Software\Microsoft\Internet Explorer\Extensions\CmdMapping
Adds the following value:

"{12F02779-6D88-4958-8AD3-83C12D86ADC7}" = ""

to the registry subkey:

HKEY_ALL_USERS\Software\Microsoft\Internet Explorer\URLSearchHooks
Adds the following value:

"C%Program Files%aniquro" = "C:\Program Files\aniquro"

to the registry subkey:

HKEY_ALL_USERS\Software\WinRAR SFX
Changes the following value:

"Start Page" = "[http://]www.anquiro.com/[REMOVED]"

in the registry subkey:

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main

which changes your Internet Explorer home page settings.

Removal

Summary

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}