WishBone Toolbar

0

General information:

Malware Name: WishBone Toolbar
Malware Type: Toolbar
Company Name: Wishbone Media Inc
Company URL: http://toolbar.wishbone.com/
Threat Level: Elevated Risk
Operating System: WIN XP
Installation Type: Installed through ActiveX
Operation: Time of After Installation

Company Description:

Wishbone Media Inc provides you the software WishBone Toolbar that has an intelligent filtering technology stops unwanted pop-ups and counts the number of pop-ups stopped. It also can search from any web page and has an extended search options. It is easy to install, use and remove.

Spyware Description:

0

Characteristics/Symptoms:

    -> The toolbar shows advettisemtnts on the infected system. -> It track browsing and search queries in order to display contextually relevant search results and ads.

Additional information might be found here:

google Search at Google for WishBone Toolbar
bing Search at Bing for WishBone Toolbar
yahoo Search at Yahoo for WishBone Toolbar

Processes Running:

File information Created after Installation:

File Location Size (Bytes) Type
C:\WINDOWS\system32\WBM\v0048\Cache\COMMON.JS 294 JScript Script File
C:\WINDOWS\system32\WBM\v0048\Cache\Help\INDEX.HTM 32224 HTML Document
C:\WINDOWS\system32\WBM\v0048\Cache\TB.INI 255 Configuration Settings

Folder information Created after Installation:

Folder Location
C:\WINDOWS\system32\WBM
C:\WINDOWS\system32\WBM\v0048

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_CLASSES_ROOT \CLSID\{4FD85670-606A-42E9-BBA5-2BC63493B677} [NULL]0
HKEY_CLASSES_ROOT \CLSID\{4FD85670-606A-42E9-BBA5-2BC63493B677}\InprocServer32 ThreadingModel0
HKEY_CLASSES_ROOT \CLSID\{54A80613-6DD4-4BD3-A804-D3AAE3B950C9} [NULL]0