OneToolbar

It is a toolbar that changes the homepage to swoople.com and tracks user surfing habits. It also includes elevated threats that are typically installed without adequate notice and consent, and may make unwanted changes to system, such as reconfiguring browser’s homepage and search settings. These threats may install advertising-related add-ons, including toolbars and search bars, or insert advertising-related components into the Winsock Layered Service Provider chain. These new add-ons and components may block or redirect preferred network connections, and can negatively impact computer’s performance and stability.0

General information:

Malware Name: OneToolbar
Malware Type: Toolbar
Company Name: OneToolbar
Company URL: http://www.onetoolbar.com/
Threat Level: Elevated Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation.

Company Description:

The OneToolbar is absolutely free and it is full with lots of very helpful features when we surf. From OneToolbar we get the freshest news from all over the world. Translate the site we are visiting with one click. From OneToolbar we make the web search the easiest thing in the world. Get the full information about the site you are visiting. It also blocks annoying popups.

Spyware Description:

It is a toolbar that changes the homepage to swoople.com and tracks user surfing habits. It also includes elevated threats that are typically installed without adequate notice and consent, and may make unwanted changes to system, such as reconfiguring browser’s homepage and search settings. These threats may install advertising-related add-ons, including toolbars and search bars, or insert advertising-related components into the Winsock Layered Service Provider chain. These new add-ons and components may block or redirect preferred network connections, and can negatively impact computer’s performance and stability.0

Characteristics/Symptoms:

    -> It has a search function and provides search results for paid advertisers -> Track browsing habits -> Adds a third-party utility bar to the web browser -> Changes browser0

Additional information might be found here:

google Search at Google for OneToolbar
bing Search at Bing for OneToolbar
yahoo Search at Yahoo for OneToolbar

Processes Running:

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\onetoolbar\Cache\newalertdigest.txt 167 Text Document
C:\Program Files\onetoolbar\Cache\news013.bmp 824 Bitmap Image
C:\Program Files\onetoolbar\Cache\onetoolbartb0401.cfg 3542 CFG File

Folder information Created after Installation:

Folder Location
C:\Program Files\onetoolbar
C:\Program Files\onetoolbar\Cache

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindowsCurrentVersionUninstallonetoolbar DisplayIcon
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindowsCurrentVersionUninstallonetoolbar DisplayName
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\onetoolbar UninstallString