All Headline News Toolbar

The All Headlines News Toolbar is an internet explorer toolbar which gives scrolling for news and headlines at search facility at allheadlinenews.com. The toolbar collects information about the users browsing activity and also his personal information such as name, email address etc via different signin forms. It also creates cookies to track user. The toolbar also shows popup ads.Also known as AHN Toolbar.0

General information:

Malware Name:All Headline News Toolbar
Malware Type:Toolbar
Company Name:All Headline News Corp.
Company URL:http://www.allheadlinenews.com/
Threat Level:High
Operating System:WIN XP
Installation Type:Installed through EXE
Operation:Time of After restarting browser.

Company Description:

Spyware Description:

The All Headlines News Toolbar is an internet explorer toolbar which gives scrolling for news and headlines at search facility at allheadlinenews.com. The toolbar collects information about the users browsing activity and also his personal information such as name, email address etc via different signin forms. It also creates cookies to track user. The toolbar also shows popup ads.Also known as AHN Toolbar.0

Characteristics/Symptoms:

    -> Track browsing habits -> Changes browser -> It has a search function and provides search results for paid advertisers -> Adds a third-party utility bar to the web browser0

Additional information might be found here:

googleSearch at Google for All Headline News Toolbar
bingSearch at Bing for All Headline News Toolbar
yahooSearch at Yahoo for All Headline News Toolbar

Processes Running:

File information Created after Installation:

File LocationSize (Bytes)Type
C:\Program Files\AHNTOOLBAR Toolbar\Cache\ahntoolbartb0300.cfg7391CFG File
C:\Program Files\AHNTOOLBAR Toolbar\Cache\toolbar.bmp6824Bitmap Image
C:\WINDOWS\Downloaded Program Files\AHNTOOLBAR.DLL1114112Application Extension

Folder information Created after Installation:

Folder Location
C:\Program Files\AHNTOOLBAR Toolbar
C:\Program Files\AHNTOOLBAR Toolbar\Cache

Registry information Created after Installation:

Main Registry KeySub Registry KeyKey Value Name
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AHNTOOLBAR
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/ahntoolbar.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AHNTOOLBAR