WishBone Toolbar
0
General information:
Malware Name: |
WishBone Toolbar |
Malware Type: |
Toolbar |
Company Name: |
Wishbone Media Inc |
Company URL: |
http://toolbar.wishbone.com/
|
Threat Level: |
Elevated Risk |
Operating System: |
WIN XP |
Installation Type: |
Installed through ActiveX |
Operation: |
Time of After Installation |
Company Description:
Wishbone Media Inc provides you the software WishBone Toolbar that has an intelligent filtering technology stops unwanted pop-ups and counts the number of pop-ups stopped. It also can search from any web page and has an extended search options. It
is easy to install, use and remove.
Spyware Description:
0
Characteristics/Symptoms:
-> The toolbar shows advettisemtnts on the infected system. -> It track browsing and search queries in order to display contextually relevant search results and ads.
Additional information might be found here:
Processes Running:
File information Created after Installation:
File Location |
Size (Bytes) |
Type |
C:\WINDOWS\system32\WBM\v0048\Cache\COMMON.JS |
294 |
JScript Script File |
C:\WINDOWS\system32\WBM\v0048\Cache\Help\INDEX.HTM |
32224 |
HTML Document |
C:\WINDOWS\system32\WBM\v0048\Cache\TB.INI |
255 |
Configuration Settings |
Folder information Created after Installation:
Folder Location |
C:\WINDOWS\system32\WBM |
C:\WINDOWS\system32\WBM\v0048 |
Registry information Created after Installation:
Main Registry Key |
Sub Registry Key |
Key Value Name |
HKEY_CLASSES_ROOT |
\CLSID\{4FD85670-606A-42E9-BBA5-2BC63493B677} |
[NULL]0 |
HKEY_CLASSES_ROOT |
\CLSID\{4FD85670-606A-42E9-BBA5-2BC63493B677}\InprocServer32 |
ThreadingModel0 |
HKEY_CLASSES_ROOT |
\CLSID\{54A80613-6DD4-4BD3-A804-D3AAE3B950C9} |
[NULL]0 |