ANWB Toolbar
The ANWB Toolbar is an IE toolbar that lets user to easily access links at http://www2.anwb.nl/. The toolbar shows news as scrolling links, the weather report etc. The toolbar shows number of popup messages and collects data about the users browsing
activity. It can also change the IE search settings and create cookies to identify user.0
General information:
Malware Name: |
ANWB Toolbar |
Malware Type: |
Toolbar |
Company Name: |
ANWB |
Company URL: |
http://www2.anwb.nl/
|
Threat Level: |
High |
Operating System: |
WIN XP |
Installation Type: |
Installed through EXE |
Operation: |
Time of After Browser Restart. |
Company Description:
The ANWB Toolbar is an IE toolbar that lets user to easily access links at http://www2.anwb.nl/. The toolbar shows news as scrolling links, the weather report etc. The toolbar shows number of popup messages and collects data about the users browsing
activity. It can also change the IE search settings and create cookies to identify user.
Spyware Description:
The ANWB Toolbar is an IE toolbar that lets user to easily access links at http://www2.anwb.nl/. The toolbar shows news as scrolling links, the weather report etc. The toolbar shows number of popup messages and collects data about the users browsing
activity. It can also change the IE search settings and create cookies to identify user.0
Characteristics/Symptoms:
-> Collects information about the pages visited -> Slows the browser -> Can change the default search settings -> Communicates with the host server -> Shows popup ads0
Additional information might be found here:
Processes Running:
File information Created after Installation:
File Location |
Size (Bytes) |
Type |
C:\Program Files\ANWBToolbar\hotels.xml |
87917 |
XML Document |
C:\Program Files\ANWBToolbar\koerslijst.dtd |
122 |
DTD File |
C:\Program Files\ANWBToolbar\koerslijst.xml |
26327 |
XML Document |
Folder information Created after Installation:
Registry information Created after Installation:
Main Registry Key |
Sub Registry Key |
Key Value Name |
HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{EBB03E3E-020A-418D-B322-761B730CA860}\ANWBtoolbar |
|
HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ANWB-toolbar |
|
HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ANWB-toolbar |
|