The FreeBar

The FreeBar.comThe FreeBar is an Interntet Explorer toolbar that provides user with the information of free offers on the web.The FreeBar Internet Explorer toolbar creates cookies, collects information which is used by thefreebar.com, it also watches the users browsing habits and show targeted popup ads. TheFreebar.com also shares the collected information with its advertisers. Characteristics/Symptoms: Search HijackerChanges settingsSlows the browserWorks in stealth modeShow targeted popup adsCollects your search keywords and other dataCreates cookies which are used by the The FreeBar.comDate of Found: 2006-01-30Security Level: HighOperating OS: WIN XPInstallation Type: Installed through EXE.Operation: After running the installer EXE (it doesn’t show any sign of installation after the EXE has been executed and installs the FreeBar)Time of Operation: After restarting the browser.Screenshot:2. Installation Sample and Image2.1. Installation Sample Origin URL: http://www.thefreebar.com/downl.html?ref=3. Changes after installation 3.1. Process Files and Location: The FreeBar IE Toolbar installer creates following Directories:C:\Program Files\TheFreeBarC:\Program Files\TheFreeBar\Cache3-2. ActiveX Information File location

General information:

Malware Name: The FreeBar
Malware Type: Browser Helper Object
Company Name: The FreeBar.com
Company URL: http://www.thefreebar.com/
Threat Level: High
Operating System: WIN XP
Installation Type: Installed through EXE.
Operation: Time of After restarting the browser.

Company Description:

The FreeBar is an Interntet Explorer toolbar that provides user with the information of free offers on the web.

Spyware Description:

The FreeBar.comThe FreeBar is an Interntet Explorer toolbar that provides user with the information of free offers on the web.The FreeBar Internet Explorer toolbar creates cookies, collects information which is used by thefreebar.com, it also watches the users browsing habits and show targeted popup ads. TheFreebar.com also shares the collected information with its advertisers. Characteristics/Symptoms: Search HijackerChanges settingsSlows the browserWorks in stealth modeShow targeted popup adsCollects your search keywords and other dataCreates cookies which are used by the The FreeBar.comDate of Found: 2006-01-30Security Level: HighOperating OS: WIN XPInstallation Type: Installed through EXE.Operation: After running the installer EXE (it doesn’t show any sign of installation after the EXE has been executed and installs the FreeBar)Time of Operation: After restarting the browser.Screenshot:2. Installation Sample and Image2.1. Installation Sample Origin URL: http://www.thefreebar.com/downl.html?ref=3. Changes after installation 3.1. Process Files and Location: The FreeBar IE Toolbar installer creates following Directories:C:\Program Files\TheFreeBarC:\Program Files\TheFreeBar\Cache3-2. ActiveX Information File location

Characteristics/Symptoms:

    -> Search Hijacker -> Changes settings -> Slows the browser -> Works in stealth mode -> Show targeted popup ads -> Collects your search keywords and other data -> Creates cookies which are used by the The FreeBar.com0

Additional information might be found here:

google Search at Google for The FreeBar
bing Search at Bing for The FreeBar
yahoo Search at Yahoo for The FreeBar

Processes Running:

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\TheFreeBar\favicon.ico 27 ICON
C:\Program Files\TheFreeBar\tfb_logo.png 3 PNG Image
C:\Program Files\TheFreeBar\tfb_topbkg.png 1 PNG Image

Folder information Created after Installation:

Folder Location
C:\Program Files\TheFreeBar

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Classes\XBTB07356.XBTB07356.1
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Internet Explorer\Extensions\{1CBF31FC-3C23-4BA6-AF16-2CEC501BD837}
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XBTB07356.XBTB07356Toolbar