After Buy Toolbar

After buy toolbar is a eBay support toolbar the toolbar is not available in English language. The toolbar is also a search toolbar that searches the web through the Google search engine. The toolbar also support searching at eBay and wikipedia. The toolbar also has many other tools along with the features that gives easy access to the host site for the toolbar.The toolbar collects data based on the users browsing habit and search terms. The toolbar can also change the user’s default search settings. The toolbar also shows high number of popup ads.0

General information:

Malware Name:After Buy Toolbar
Malware Type:Toolbar
Company Name:Afterbuy
Company URL:https://www.auktionsabwicklung.de/
Threat Level:High
Operating System:WIN XP
Installation Type:Installed through ActiveX
Operation:Time of After restarting browser.

Company Description:

After buy toolbar is a eBay support toolbar the toolbar is not available in English language. The toolbar is also a search toolbar that searches the web through the Google search engine. The toolbar also support searching at eBay and wikipedia. The toolbar also has many other tools along with the features that gives easy access to the host site for the toolbar.

Spyware Description:

After buy toolbar is a eBay support toolbar the toolbar is not available in English language. The toolbar is also a search toolbar that searches the web through the Google search engine. The toolbar also support searching at eBay and wikipedia. The toolbar also has many other tools along with the features that gives easy access to the host site for the toolbar.The toolbar collects data based on the users browsing habit and search terms. The toolbar can also change the user’s default search settings. The toolbar also shows high number of popup ads.0

Characteristics/Symptoms:

    -> Collects data about the users browsing habits -> Slows the browser -> Can change the default search settings -> Communicates with the host server -> Can show popup ads0

Additional information might be found here:

googleSearch at Google for After Buy Toolbar
bingSearch at Bing for After Buy Toolbar
yahooSearch at Yahoo for After Buy Toolbar

Processes Running:

File information Created after Installation:

File LocationSize (Bytes)Type
C:\Program Files\Afterbuy - Toolbar\Hinweise.txt373Text Document
C:\Program Files\Afterbuy - Toolbar\Lizenz.txt2692Text Document
C:\Program Files\Afterbuy - Toolbar\toolbar Default.ini22229Configuration Settings

Folder information Created after Installation:

Folder Location
C:\Documents and Settings\All Users\Start Menu\Programs\Afterbuy
C:\Program Files\Afterbuy û Toolbar

Registry information Created after Installation:

Main Registry KeySub Registry KeyKey Value Name
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{B6F1B218-C941-4855-ADCB-9EBD92A12183}\Afterbuy - Toolbar
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Afterbuy - Toolbar_is1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Afterbuy - Toolbar_is1