Uni ToolBar

Uni ToolBar is an adware application that installs a browser helper object (BHO) in the form of a toolbar in Internet Explorer.VersaSearch displays links to sponsored sites in the toolbar based on users' search queries.0

General information:

Malware Name: Uni ToolBar
Malware Type: Toolbar
Company Name: Widpia
Company URL: http://toolbar.widpia.com/
Threat Level: Elevated Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

Widpia provides you the software Uni ToolBar that has a search function installed in the browser. You can just enter your search terms directly into the toolbar and press the enter key or click the go button for more searching.

Spyware Description:

Uni ToolBar is an adware application that installs a browser helper object (BHO) in the form of a toolbar in Internet Explorer.VersaSearch displays links to sponsored sites in the toolbar based on users' search queries.0

Characteristics/Symptoms:

    -> It adds an extra toolbar (that looks similar to the IE address bar) to the web browser. -> It shows popup ads. -> It slows the browser and changes the default settings. -> It may track browsing and search queries in order to display contextually relevant search results and ads.0

Additional information might be found here:

google Search at Google for Uni ToolBar
bing Search at Bing for Uni ToolBar
yahoo Search at Yahoo for Uni ToolBar

Processes Running:

updateunibar.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\windowsunibar\License.txt 6769 Text Document
C:\Program Files\windowsunibar\uninstall.exe 130143 Application
C:\Program Files\windowsunibar\updateunibar.ini 1112 Configuration Settings

Folder information Created after Installation:

Folder Location
C:\Program Files\windowsunibar
C:\Program Files\windowsunibar\temp

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindowsCurrentVersionUninstallWindowsUNIbar DisplayName
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindowsCurrentVersionUninstallWindowsUNIbar UninstallString
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WindowsUNIbar