Nordnet Toolbar
The Nordnet toolbar is a toolbar to search the companies stock index values by just typing simple company names for example if the user enter the keyword âmsftâ in the toolbar search box it will display the stock values for Microsoft
Corporation.n The user can also search the web using the toolbar, the toolbar searches the web on Google Search.The toolbar collects the user information from the browser and also contains different links. The toolbar is capable of showing popup
messages and it also changes the default browser settings.0
General information:
| Malware Name: |
Nordnet Toolbar |
| Malware Type: |
Toolbar |
| Company Name: |
NORDNET |
| Company URL: |
https://www.nordnet.se/
|
| Threat Level: |
High |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Browser Restart. |
Company Description:
The Nordnet toolbar is a toolbar to search the companies stock index values by just typing simple company names for example if the user enter the keyword âmsftâ in the toolbar search box it will display the stock values for Microsoft
Corporation.n The user can also search the web using the toolbar, the toolbar searches the web on Google Search.
Spyware Description:
The Nordnet toolbar is a toolbar to search the companies stock index values by just typing simple company names for example if the user enter the keyword âmsftâ in the toolbar search box it will display the stock values for Microsoft
Corporation.n The user can also search the web using the toolbar, the toolbar searches the web on Google Search.The toolbar collects the user information from the browser and also contains different links. The toolbar is capable of showing popup messages
and it also changes the default browser settings.0
Characteristics/Symptoms:
-> Collects information about the pages visited -> Slows the browser -> Can change the default search settings -> Communicates with the host server -> Shows popup ads0
Additional information might be found here:
Processes Running:
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\WINDOWS\Downloaded Program Files\basis.key |
32 |
KEY File |
| C:\WINDOWS\Downloaded Program Files\basis.xml |
8047 |
XML File |
| C:\WINDOWS\Downloaded Program Files\no.xml |
1500 |
XML File |
Folder information Created after Installation:
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Classes\ToolbarToolBar01.1 |
|
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{92F02779-6D88-4958-8AD3-83C12D86ADC7}\DownloadInformation\CODEBASE\https:\www.nordnet.se/NNSE/sv/toolbar/toolbar.cab |
|
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ToolbarToolBar01IEToolbar |
|
