ZeroPopUpBar

It is an Internet Explorer toolbar with a pop-up advert-blocking feature, which also hijacks homepage and search settings to znext.com every time IE is started. ZeroPopUpBar, to distinguish it from the earlier standalone commercial popup-killer of the same name, by the same author. Note there is no connection to the similarly-named 'ZeroPopup' by 'Tooto Technologies'. ZeroPopUpBar is distributed by viral marketing: some versions, when installed, send an endorsement purporting to be from you to everyone in your e-mail address book. ZeroPopUpBar is also installed by ActiveX drive-by-download on the search bar pointed to by some variants of the TinyBar parasite (also by the same author).0

General information:

Malware Name: ZeroPopUpBar
Malware Type: Toolbar
Company Name: ZeroPopUp Search Bar
Company URL: http://zeropopup.com/
Threat Level: Elevated Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

ZeroPopUp Search Bar is use to harness the power of next generation search technology from anywhere on the web. It is simply download and install. The ZeroPopUp Search Bar is free to download and appears every time we open a new internet explorer browser window. Search the web without any annoying popup ads.

Spyware Description:

It is an Internet Explorer toolbar with a pop-up advert-blocking feature, which also hijacks homepage and search settings to znext.com every time IE is started. ZeroPopUpBar, to distinguish it from the earlier standalone commercial popup-killer of the same name, by the same author. Note there is no connection to the similarly-named 'ZeroPopup' by 'Tooto Technologies'. ZeroPopUpBar is distributed by viral marketing: some versions, when installed, send an endorsement purporting to be from you to everyone in your e-mail address book. ZeroPopUpBar is also installed by ActiveX drive-by-download on the search bar pointed to by some variants of the TinyBar parasite (also by the same author).0

Characteristics/Symptoms:

    -> It has a search function and provides search results for paid advertisers -> Track browsing habits -> Adds a third-party utility bar to the web browser -> Changes browser -> Shows Advertisements0

Additional information might be found here:

google Search at Google for ZeroPopUpBar
bing Search at Bing for ZeroPopUpBar
yahoo Search at Yahoo for ZeroPopUpBar

Processes Running:

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\ZeroPopUpBar\uninstall.log 395 Text Document
C:\Program Files\ZeroPopUpBar\version.txt 27 Text Document
C:\Program Files\ZeroPopUpBar\zeropopupbar.dll 135168 Application Extension

Folder information Created after Installation:

Folder Location

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_CURRENT_USER \Software\zeropopup\all\Misc LastTimeChecked
HKEY_CURRENT_USER \Software\zeropopup\all\Misc Sound
HKEY_CURRENT_USER \Software\zeropopup\all\Misc Version