YelloPages Toolbar

YelloPages Toolbar is a contact searching toolbar that uses the yellopages.com to search the contacts. The toolbar shows ads and changes the browser settings.0

General information:

Malware Name: YelloPages Toolbar
Malware Type: Toolbar
Company Name: Visicom Media Inc.
Company URL: http://www.yellowpages.com/
Threat Level: High
Operating System: WIN XP
Installation Type: Installed through ActiveX (Further to update the Toolbar one should have to download the installer Application, Sometimes if the older version of toolbar is not present on the user’s system the updater cannot install the toolbar as a fresh Installation)
Operation: Time of After restarting browser.

Company Description:

The YelloPages toolbar is a contact searching toolbar that uses the yellopages.com to search the contacts available. “The YELLOWPAGES.COM Toolbar is the quickest and easiest way to access the YELLOWPAGES.COM listings directory”.

Spyware Description:

YelloPages Toolbar is a contact searching toolbar that uses the yellopages.com to search the contacts. The toolbar shows ads and changes the browser settings.0

Characteristics/Symptoms:

    -> Keeps watch on the users browsing activity -> Shows popup ads -> Installs in stealth mode -> Automatically updates itself -> Works in background -> Slows the browser -> Changes the browser settings0

Additional information might be found here:

google Search at Google for YelloPages Toolbar
bing Search at Bing for YelloPages Toolbar
yahoo Search at Yahoo for YelloPages Toolbar

Processes Running:

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\yptoolbar\Cache\sun2.bmp 824 Bitmap Image
C:\Program Files\yptoolbar\Cache\ypc_textlayout3.bmp 6072 Bitmap Image
C:\Program Files\yptoolbar\Cache\yptoolbartb0401.cfg 10230 CFG File

Folder information Created after Installation:

Folder Location
C:\Program Files\yptoolbar
C:\Program Files\yptoolbar\Cache

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_CURRENT_USER \Software\yptoolbar\Stat
HKEY_LOCAL_MACHINE \SOFTWARE\Classes\CLSID\{4E7BD74F-2B8D-469E-99FF-FD60BB9AAE2D}
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\yptoolbar