Furl Toolbar

LookSmart, Ltd.LookSmart provides relevant content, advertising and technology solutions for consumers, advertisers and publishers. Furl was founded in the spring of 2003 by Mike Giles, and is part of the LookSmart family.Furl is a free service that saves the important items that user find on the Web and enables user to quickly find them again. Furl archives a personal copy of every page you save. When user want to recall it, user can find it instantly by searching the full text your archived items. Each member has a personal archive of 5 gigabytes (GB), large enough to store tens of thousands of searchable items.The Furl Toolbar allows user to save the current page as his own personal furl archive. The toolbar can also be used to search internet with google, amazon etc search engines and it also works as a popup blocker. The popup blocker has settings to allow popups from the host site.The toolbar collects information about the user browsing activity and send the information to the server continusly. The installation or the toolbar requires that the user must have an account with the furl.net. To open an account the user must have a valid email address. The information collected during the installation (name, email etc) can be used by the host and the host site can also distribute the information to the third parties. The collected information can be used for targeted advertising pourposes etc.The toolbar also appears on the window explorer.Characteristics/Symptoms: Collects data about the users browsing habitsSlows the browser Communicates with the host serverNeeds a user account with the host site.Works in backgroundDate of Found: 2006-02-22Security Level: HighOperating OS: WIN XPInstallation Type: Installed through EXEOperation: After InstallationTime of Operation: After restarting browser.Screenshot: 2. Installation Sample and Image2.1. Installation SampleOrigin URL: http://www.furl.net/toolbar/toolbar.exe 3. Changes after installation 3.1. Process: Files and Location: 3.2 Directories:Furl Toolbar installer creates following directory:C:\Program Files\Furl ToolbarC:\Program Files\Furl Toolbar\Cache3.3. ActiveX Information ActiveX Screenshot:File location

General information:

Malware Name: Furl Toolbar
Malware Type: Toolbar
Company Name: LookSmart, Ltd.
Company URL: http://search.looksmart.com/
Threat Level: High
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After restarting browser.

Company Description:

LookSmart provides relevant content, advertising and technology solutions for consumers, advertisers and publishers. Furl was founded in the spring of 2003 by Mike Giles, and is part of the LookSmart family.

Spyware Description:

LookSmart, Ltd.LookSmart provides relevant content, advertising and technology solutions for consumers, advertisers and publishers. Furl was founded in the spring of 2003 by Mike Giles, and is part of the LookSmart family.Furl is a free service that saves the important items that user find on the Web and enables user to quickly find them again. Furl archives a personal copy of every page you save. When user want to recall it, user can find it instantly by searching the full text your archived items. Each member has a personal archive of 5 gigabytes (GB), large enough to store tens of thousands of searchable items.The Furl Toolbar allows user to save the current page as his own personal furl archive. The toolbar can also be used to search internet with google, amazon etc search engines and it also works as a popup blocker. The popup blocker has settings to allow popups from the host site.The toolbar collects information about the user browsing activity and send the information to the server continusly. The installation or the toolbar requires that the user must have an account with the furl.net. To open an account the user must have a valid email address. The information collected during the installation (name, email etc) can be used by the host and the host site can also distribute the information to the third parties. The collected information can be used for targeted advertising pourposes etc.The toolbar also appears on the window explorer.Characteristics/Symptoms: Collects data about the users browsing habitsSlows the browser Communicates with the host serverNeeds a user account with the host site.Works in backgroundDate of Found: 2006-02-22Security Level: HighOperating OS: WIN XPInstallation Type: Installed through EXEOperation: After InstallationTime of Operation: After restarting browser.Screenshot: 2. Installation Sample and Image2.1. Installation SampleOrigin URL: http://www.furl.net/toolbar/toolbar.exe 3. Changes after installation 3.1. Process: Files and Location: 3.2 Directories:Furl Toolbar installer creates following directory:C:\Program Files\Furl ToolbarC:\Program Files\Furl Toolbar\Cache3.3. ActiveX Information ActiveX Screenshot:File location

Characteristics/Symptoms:

    -> Collects data about the users browsing habits -> Slows the browser -> Communicates with the host server -> Needs a user account with the host site. -> Works in background0

Additional information might be found here:

google Search at Google for Furl Toolbar
bing Search at Bing for Furl Toolbar
yahoo Search at Yahoo for Furl Toolbar

Processes Running:

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\Furl Toolbar\options.html 8502 HTML File
C:\Program Files\Furl Toolbar\toolbar.crc 96 CRC File
C:\Program Files\Furl Toolbar\toolbar.dll 520192 Application Extension

Folder information Created after Installation:

Folder Location

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Classes\XBTB05988.XBTB05988
HKEY_LOCAL_MACHINE \SOFTWARE\Classes\XBTB05988.XBTB05988.1
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XBTB05988.XBTB05988Toolbar