HotBlox Toolbar

HotBlox Toolbar has a search function and provides search results for paid advertisers. It adds a third-party utility bar to the web browser. It also change the browser and shows the advertisements.0

General information:

Malware Name: HotBlox Toolbar
Malware Type: Toolbar
Company Name: HotBlox
Company URL: http://toolbar.hotblox.com/searchapp/
Threat Level: Elevated Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

HotBlox Company provides us the toolbar HotBlox that can search anything on our system. It cuts down search time by quicker access to search engine result pages. It also cuts down navigation time on frequently used sites by searching directly from the toolbar. Also it is free to download.

Spyware Description:

HotBlox Toolbar has a search function and provides search results for paid advertisers. It adds a third-party utility bar to the web browser. It also change the browser and shows the advertisements.0

Characteristics/Symptoms:

    -> It has a search function and provides search results for paid advertisers -> Track browsing habits -> Adds a third-party utility bar to the web browser -> Changes browser -> Shows Advertisements0

Additional information might be found here:

google Search at Google for HotBlox Toolbar
bing Search at Bing for HotBlox Toolbar
yahoo Search at Yahoo for HotBlox Toolbar

Processes Running:

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\IEToolbar\basis.xml 52943 XML Document
C:\Program Files\IEToolbar\block.cur 766 Cursor
C:\Program Files\IEToolbar\newversion.txt 28 Text Document

Folder information Created after Installation:

Folder Location
C:\Program Files\IEToolbar

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_CURRENT_USER SoftwareXBTB00000IEToolbar updateUrl
HKEY_CURRENT_USER SoftwareXBTB00000IEToolbar urlAfterUninstall
HKEY_CURRENT_USER SoftwareXBTB00000IEToolbar urlAfterUpdate