Starware Lottery Toolbar

Starware Lottery Toolbar is a toolbar that makes unwanted changes browser, such as reconfiguring browser’s search settings. It tracks browsing and search queries. It also adds a toolbar to the web browser.

General information:

Malware Name: Starware Lottery Toolbar
Malware Type: Toolbar
Company Name: Starware
Company URL: http://www.starware.com/
Threat Level: Moderate Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

Starware provides you the software Starware Lottery Toolbar.

Spyware Description:

Starware Lottery Toolbar is a toolbar that makes unwanted changes browser, such as reconfiguring browser’s search settings. It tracks browsing and search queries. It also adds a toolbar to the web browser.

Characteristics/Symptoms:

    -> It adds a toolbar to the web browser. -> It has a search function and provides search results for paid advertisers. -> It tracks browsing and search queries.

Additional information might be found here:

google Search at Google for Starware Lottery Toolbar
bing Search at Bing for Starware Lottery Toolbar
yahoo Search at Yahoo for Starware Lottery Toolbar

Processes Running:

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\[USER]\Application Data\Starware365\Layouts\ToolbarLayout.xml.backup 3040 BACKUP File
C:\Documents and Settings\[USER]\Application Data\Starware365\Movies\MoviesOptions.xml.backup 3392 BACKUP File
C:\Documents and Settings\[USER]\Application Data\Starware365\ToolbarSearch\ToolbarSearchOptions.xml.backup 8304 BACKUP File

Folder information Created after Installation:

Folder Location
C:\Documents and Settings\[USER]\Application Data\Starware365\Movies\image
C:\Documents and Settings\[USER]\Application Data\Starware365\ScreensaversMarketingSitePager\images\defaul

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_CURRENT_USER \Software\Starware365\OriginalSearchAssistant Use Custom Search URL
HKEY_LOCAL_MACHINE \SOFTWARE\Classes\CLSID\{45A4902E-4479-4EAE-A186-8D0F7E4C78DE}\InprocServer32 ThreadingModel
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Internet Explorer\Toolbar {9FB3908C-6565-4CB0-95F8-E9F85258723C}