SearchWords Toolbar

The toolbar is an IE search Toolbar. The toolbar gathers information about the user’s browsing habits and communicates with the host. The toolbar also shows popup ads and contains links to various other sites also.The toolbar slows the browser and changes the browser search settings.0

General information:

Malware Name: SearchWords Toolbar
Malware Type: Toolbar
Company Name: SEARCHWORDS.COM
Company URL: http://search.careon.com/
Threat Level: High
Operating System: WIN XP
Installation Type: Installed through ActiveX
Operation: Time of After Browser Restart.

Company Description:

The toolbar is an IE search Toolbar. The toolbar gathers information about the user’s browsing habits and communicates with the host. The toolbar also shows popup ads and contains links to various other sites also.

Spyware Description:

The toolbar is an IE search Toolbar. The toolbar gathers information about the user’s browsing habits and communicates with the host. The toolbar also shows popup ads and contains links to various other sites also.The toolbar slows the browser and changes the browser search settings.0

Characteristics/Symptoms:

    -> Collects information about the pages visited -> Slows the browser -> Can change the default search settings -> Communicates with the host server -> Runs in the background -> Redirects Searches and shows redundant results0

Additional information might be found here:

google Search at Google for SearchWords Toolbar
bing Search at Bing for SearchWords Toolbar
yahoo Search at Yahoo for SearchWords Toolbar

Processes Running:

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\Dynamic Toolbar\SWBAR\Cache\SWBARTB0.cfg 1860 CFG File
C:\Program Files\Dynamic Toolbar\SWBAR\Cache\SWBARsearch.bmp 1334 Bitmap Image
C:\Program Files\Dynamic Toolbar\SWBAR\Cache\T11953.tmp unknown TMP File

Folder information Created after Installation:

Folder Location
C:\Program Files\Dynamic Toolbar
C:\Program Files\Dynamic Toolbar\SWBAR

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Classes\swbar.SWBAR
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Code Store Database\Distribution Units\{4E7BD74F-2B8D-469E-C0FF-FD7BA7D5FA7D}\Contains\Files
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/swbar.dll