JDEtips Toolbar

JDEtips Toolbar is a toolbar that may makes unwanted changes browser, such as reconfiguring browser’s search settings. It tracks browsing and search queries. It also adds a toolbar to the web browser.

General information:

Malware Name: JDEtips Toolbar
Malware Type: Toolbar
Company Name: Klee Associates, Inc
Company URL: http://jdetips.com/
Threat Level: Moderate Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

Klee Associates, Inc provides you the software JDEtips Toolbar that searches for document keyword search and also for document category search and links to our main services and you can also get toolbar help.

Spyware Description:

JDEtips Toolbar is a toolbar that may makes unwanted changes browser, such as reconfiguring browser’s search settings. It tracks browsing and search queries. It also adds a toolbar to the web browser.

Characteristics/Symptoms:

    -> It adds a toolbar to the web browser. -> It has a search function and provides search results for paid advertisers.

Additional information might be found here:

google Search at Google for JDEtips Toolbar
bing Search at Bing for JDEtips Toolbar
yahoo Search at Yahoo for JDEtips Toolbar

Processes Running:

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\[USER]\Application Data\{BFB5F154-9212-46F3-B547-AC6106030A54}\basis.xml 7964 XML Document
C:\Documents and Settings\[USER]\Application Data\{BFB5F154-9212-46F3-B547-AC6106030A54}\favicon.ico 1078 Icon
C:\Documents and Settings\[USER]\Application Data\{BFB5F154-9212-46F3-B547-AC6106030A54}\icons.bmp 14134 Bitmap Image

Folder information Created after Installation:

Folder Location
C:\Documents and Settings\[USER]\Application Data\BFB5F154-9212-46F3-B547-AC6106030A5
C:\Documents and Settings\[USER]\Application Data\BFB5F154-9212-46F3-B547-AC6106030A54\cach

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_CURRENT_USER \Software\TBSB02109\Toolbar\tb_items tbs_button_003766
HKEY_CURRENT_USER \Software\TBSB02109\Toolbar\tb_items tbs_item_012446
HKEY_LOCAL_MACHINE \SOFTWARE\Classes\CLSID\{FDA811D4-0656-4100-B32D-8F5F952027AC}