StartNow Toolbar

StartNow Toolbar hijacks Internet Explorer search and homepage URLs. It also includes moderate risk threats that are often bundled with functionally unrelated software or installed without adequate notice and consent, and may display unwanted advertising on the user's desktop. Such threats may track users' online browsing habits and transmit non-personally identifying data back to a server in order to target advertising. These threats may be configured to start automatically with the operating system, use an auto-updater that the user cannot control, or install other functionally separate programs without adequate notice and consent.0

General information:

Malware Name: StartNow Toolbar
Malware Type: Toolbar
Company Name: StartNow
Company URL: http://startnow.com/
Threat Level: Moderate Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation.

Company Description:

StartNow makes search easy because it returns web pages that contain all the words in query, to narrow a search all need to do is add more words to the end of query. This gives a new query that will return a subset of the pages returned by the too-broad query. We can also exclude a word by putting the - operator immediately in front of the undesirable term. It protect our PC from Pop-Ups by eliminate annoying them.

Spyware Description:

StartNow Toolbar hijacks Internet Explorer search and homepage URLs. It also includes moderate risk threats that are often bundled with functionally unrelated software or installed without adequate notice and consent, and may display unwanted advertising on the user's desktop. Such threats may track users' online browsing habits and transmit non-personally identifying data back to a server in order to target advertising. These threats may be configured to start automatically with the operating system, use an auto-updater that the user cannot control, or install other functionally separate programs without adequate notice and consent.0

Characteristics/Symptoms:

    -> It has a search function and provides search results for paid advertisers -> Track browsing habits -> Adds a third-party utility bar to the web browser -> Changes browser0

Additional information might be found here:

google Search at Google for StartNow Toolbar
bing Search at Bing for StartNow Toolbar
yahoo Search at Yahoo for StartNow Toolbar

Processes Running:

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\Common Files\Hyperbar\HyperbarSS1.dll 147456 Application Extension
C:\Program Files\Common Files\Hyperbar\HyperbarSS2.dll 139264 Application Extension

Folder information Created after Installation:

Folder Location
C:\Program Files\Startnow
C:\Program Files\Startnow\Toolbar

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2F785BCB-2B25-4D13-81DC-9EC7EFD72D70} URLInfoAbout
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2F785BCB-2B25-4D13-81DC-9EC7EFD72D70} URLUpdateInfo
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2F785BCB-2B25-4D13-81DC-9EC7EFD72D70} UninstallString