InstantBuzz Toolbar

InstantBuzz.comThe InstantBuzz toolbar is an Internet Explorer toolbar designed to show targeted add messages. The toolbar shows ads in the form of text links on the toolbar and also provides instant messages from the host.The installation of the toolbar requires that the user should have an account with the host site, if the user has no account with the host then the user will have to signin for a user account which requires a valid email address.The toolbar collects users browsing history and shows messages accordingly, in the process of installing the toolbar it also collects some information about user (e.g., name, email address). The toolbar also changes the user IE home page and also effects his search settings.Characteristics/Symptoms: Collects data about the users browsing habitsSlows the browser Communicates with the host serverShows ads as text links in the toolbar and also shows messages from the host site.Changes the IE home pageWorks in backgroundScreenshot:a) Toolbar Screenshotb) Instantbuzz as the IE Toolbar button2. Installation Sample and Image2.1. Installation SampleOrigin URL: http://ct49993.ourtoolbar.com/exe 3. Changes after installation 3.1. Process: Files and Location: C:\Program Files\Instant Buzz\IBDaemon.exeC:\Program Files\Instant Buzz\IBSetup.exe3.2 Directories:InstantBuzz Toolbar installer creates following directory:C:\Program Files\Instant Buzz3.3. ActiveX Information ActiveX Screenshot:File location

General information:

Malware Name:	InstantBuzz Toolbar
Malware Type:	Browser Helper Object
Company Name:	InstantBuzz.com
Company URL:	http://www.instantbuzz.com
Threat Level:
Operating System:
Installation Type:
Operation:

Company Description:

The InstantBuzz toolbar is an Internet Explorer toolbar designed to show targeted add messages. The toolbar shows ads in the form of text links on the toolbar and also provides instant messages from the host.

Spyware Description:

Characteristics/Symptoms:

-> Collects data about the users browsing habits -> Slows the browser -> Communicates with the host server -> Shows ads as text links in the toolbar and also shows messages from the host site. -> Changes the IE home page -> Works in background0

Additional information might be found here:

	Search at Google for InstantBuzz Toolbar
	Search at Bing for InstantBuzz Toolbar
	Search at Yahoo for InstantBuzz Toolbar

Processes Running:

File information Created after Installation:

File Location	Size (Bytes)	Type
C:\Program Files\Instant Buzz\.ibq	12003	IBQ File
C:\Program Files\Instant Buzz\IBBar.dll	825344	Application Extension
C:\Program Files\Instant Buzz\alex1980.ibp	89	IBP File

Folder information Created after Installation:

Folder Location

Registry information Created after Installation:

Main Registry Key	Sub Registry Key	Key Value Name
HKEY_LOCAL_MACHINE	\SOFTWARE\Classes\CLSID\{7475D3FD-5D85-49DB-8B9B-6968467B2D80}
HKEY_LOCAL_MACHINE	\SOFTWARE\Classes\CLSID\{B8D60EBB-5565-4392-957B-7164BA087AD4}
HKEY_LOCAL_MACHINE	\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Instant Buzz