Power Search

It includes Elevated threats that are typically installed without adequate notice and consent, and may make unwanted changes to our system, such as reconfiguring our browser’s homepage and search settings. These threats may install advertising-related add-ons, including toolbars and search bars, or insert advertising-related components into the Winsock Layered Service Provider chain. These new add-ons and components may block or redirect our preferred network connections, and can negatively impact our computer’s performance and stability. Elevated threats may also collect, transmit, and share potentially sensitive data without adequate notice and consent.0

General information:

Malware Name: Power Search
Malware Type: Toolbar
Company Name: BestToolBars.net
Company URL: http://www.besttoolbars.net/
Threat Level: Elevated Risk
Operating System: WIN XP
Installation Type: Installed through ActiveX
Operation: Time of After Installation.

Company Description:

BestToolBars.net provides Power Search toolbar. The Toolbar has an external program interface. We can access toolbar properties (to read or write) via JavaScript and also pass this information to the server in response to the user clicking a button or menu item in the toolbar. The amount of customization and dynamic abilities of this toolbar are incredible. BestToolBars.net quickly solved any programming issues we had with their great support team. The toolbar has the following features: Stop Popup-blocker, Searches the word Highlighting, Dynamic Configuration Files, Automatic Toolbar Upgrade, Catcher for Explorer Address Bar, ToolbarStudio Visual Interface and Save screenshot of current Web page in Clipboard, or into the file

Spyware Description:

It includes Elevated threats that are typically installed without adequate notice and consent, and may make unwanted changes to our system, such as reconfiguring our browser’s homepage and search settings. These threats may install advertising-related add-ons, including toolbars and search bars, or insert advertising-related components into the Winsock Layered Service Provider chain. These new add-ons and components may block or redirect our preferred network connections, and can negatively impact our computer’s performance and stability. Elevated threats may also collect, transmit, and share potentially sensitive data without adequate notice and consent.0

Characteristics/Symptoms:

    -> It has a search function and provides search results for paid advertisers -> Track browsing habits -> Adds a third-party utility bar to the web browser -> Changes browser0

Additional information might be found here:

google Search at Google for Power Search
bing Search at Bing for Power Search
yahoo Search at Yahoo for Power Search

Processes Running:

File information Created after Installation:

File Location Size (Bytes) Type
C:\WINDOWS\Downloaded Program Files\logo.bmp 3448 BMP File
C:\WINDOWS\Downloaded Program Files\powersearch_toolbar1.crc 143 CRC File
C:\WINDOWS\Downloaded Program Files\powersearch_toolbar1.inf 1515 INF File

Folder information Created after Installation:

Folder Location

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_CURRENT_USER \Software\XBTB03439\Toolbar\tb_items Widthcombo11
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindowsCurrentVersionUninstallXBTB03439.XBTB03439Toolbar DisplayName
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XBTB03439.XBTB03439Toolbar UninstallString