OneToolbar Spyware Profile
Title: OneToolbar
Also Known as: Adware.Win32.OneToolbar, Adw.OneToolbar
Severity scale:
OneToolbar is a spyware program first discovered on November 9 of 2006. It professes to be a multipurpose browser enhancing toolbar. It professes to deliver world news, translate web pages, and get full information about the pages you surf. It also says that it blocks pop-up ads. There’s much more to this program than that, though.
According to the licensing agreement on their site, “You also grant onetoolbar.com permission to collect and store information of your Internet usage habit, including but not limited to information about every web page you view with the full Uniform Resource Locators, and the content of web page.” In other words, you let them spy on what you’re doing in exchange for using their toolbar.
Besides admittedly being spyware, OneToolbar has some other irritating features. It sets your home page, www.google.com, and www.yahoo.com to www.swoople.com, which is their search engine. It also redirects any error pages to Swoople. It is a weak search engine, and limited to OneToolbar’s affiliate pages.
The trouble you get with OneToolbar isn’t worth any supposed benefit you get from having it. It can slow down your browser, limits the pages you can browse and it monitors your browsing history. You’re better off without it, and SpyZooka will make that happen for you.
Also Known As:
Adware.Win32.OneToolbar, Adw.OneToolbar
Spyware Type: Toolbar, Browser Hijacker
Associated Files:
C:\Program Files\onetoolbar\Cache\news013.bmp
C:\Program Files\onetoolbar\Cache\onetoolbartb0401.cfg
C:\Program Files\onetoolbar\Cache\popupblocker001.bmp
C:\Program Files\onetoolbar\Cache\prescriptiondrug001.bmp
C:\Program Files\onetoolbar\Cache\prescriptiondrug002.bmp
C:\Program Files\onetoolbar\Cache\query.txt
C:\Program Files\onetoolbar\Cache\search005.bmp
C:\Program Files\onetoolbar\Cache\travel001.bmp
C:\Program Files\onetoolbar\Cache\virus001.bmp
C:\Program Files\onetoolbar\Cache\watch.txt
C:\Program Files\onetoolbar\Cache\world008.bmp
C:\Program Files\onetoolbar\onetoolbar.dll
C:\Program Files\onetoolbar\toolbar.ini
C:\Program Files\onetoolbar\uninstall.exe
C:\Program Files\onetoolbar\Cache\bundle.cfg
C:\Program Files\onetoolbar\Cache\business001.bmp
C:\Program Files\onetoolbar\Cache\COMBOSEARCH_BUTTON_2.acs
C:\Program Files\onetoolbar\Cache\computer001.bmp
C:\Program Files\onetoolbar\Cache\dating001.bmp
C:\Program Files\onetoolbar\Cache\dating002.bmp
C:\Program Files\onetoolbar\Cache\entertainment002.bmp
C:\Program Files\onetoolbar\Cache\ErrorLog.txt
C:\Program Files\onetoolbar\Cache\finance004.bmp
C:\Program Files\onetoolbar\Cache\games005.bmp
C:\Program Files\onetoolbar\Cache\lastalertdigest.txt
C:\Program Files\onetoolbar\Cache\logo.bmp
C:\Program Files\onetoolbar\Cache\newalertdigest.txt
Key: CLSID\{4E7BD74F-2B8D-469E-8EB0-FD60BB9AAE3A}
Key: CLSID\{4E7BD74F-2B8D-469E-8EB0-FD60BB9AAE3A}\InprocServer32
Value: ThreadingModel
Key: onetoolbar.ONETOOLBARMenu Button
Key: onetoolbar.ONETOOLBARMenu Button\Clsid
Key: CLSID\{4E7BD74F-2B8D-469E-8EB0-FD60BB9AAE3A}\ProgID
Key: CLSID\{4E7BD74F-2B8D-469E-8EB0-FD60BB9AAE39}
Key: CLSID\{4E7BD74F-2B8D-469E-8EB0-FD60BB9AAE39}\InprocServer32
Value: ThreadingModel
Key: onetoolbar.ONETOOLBARToggle Button
Key: onetoolbar.ONETOOLBARToggle Button\Clsid
Key: CLSID\{4E7BD74F-2B8D-469E-8EB0-FD60BB9AAE39}\ProgID
Key: CLSID\{4E7BD74F-2B8D-469E-8EB0-FD60BB9AAE38}
Key: CLSID\{4E7BD74F-2B8D-469E-8EB0-FD60BB9AAE38}\InprocServer32
Value: ThreadingModel
Key: onetoolbar.ONETOOLBAR
Key: onetoolbar.ONETOOLBAR\Clsid
Key: CLSID\{4E7BD74F-2B8D-469E-8EB0-FD60BB9AAE38}\ProgID
Key: Software\Microsoft\Windows\CurrentVersion\RunOnce\onetoolbar
Key: Software\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0
Key: Software\onetoolbar
Value: InsVer
Key: Software\ONETOOLBAR\Config
Key: Software\ONETOOLBAR\Config\onetoolbartb0401
Value: LastDown
Key: Software\ONETOOLBAR\Options
Value: PopupBlockerEnabled
Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\onetoolbar
Value: DisplayName
Key: Software\Microsoft\Internet Explorer\Toolbar
Value: {4E7BD74F-2B8D-469E-8EB0-FD60BB9AAE38}
Key: Software\onetoolbar
Value: ConfigCode
Key: Software\onetoolbar
Value: AddOpt
Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\onetoolbar
Value: DisplayIcon
Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\onetoolbar
Value: UninstallString
Key: Software\ONETOOLBAR
Value: FirstRun
Key: Software\ONETOOLBAR
Value: BarID
Key: Software\ONETOOLBAR\Config\onetoolbartb0401
Value: MaxAge
Key: Software\ONETOOLBAR
Value: BitmapVersion
Key: Software\Microsoft\Windows\CurrentVersion\RunOnce
Value: wextract_cleanup0
Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\onetoolbar
Value: DisplayIcon
Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\onetoolbar
Value: UninstallString
Key: Software\ONETOOLBAR
Value: firstCfg
Key: Software\ONETOOLBAR
Value: HomeUrl
Key: Software\ONETOOLBAR
Value: IE
Key: Software\ONETOOLBAR
Value: BarID
Key: Software\ONETOOLBAR
Value: HomeUrl
Key: Software\ONETOOLBAR
Value: LastLeft
Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\onetoolbar
Value: DisplayIcon
Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{4E7BD74F-2B8D-469E-8EB0-FD60BB9AAE38}\iexplore
Value: Type
Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{4E7BD74F-2B8D-469E-8EB0-FD60BB9AAE38}\iexplore
Value: Count
Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{4E7BD74F-2B8D-469E-8EB0-FD60BB9AAE38}\iexplore
Value: Time
Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{4E7BD74F-2B8D-469E-8EB0-FD60BB9AAE38}\iexplore
Value: Type
Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{4E7BD74F-2B8D-469E-8EB0-FD60BB9AAE38}\iexplore
Value: Count
Key: Software\ONETOOLBAR
Value: BarID
Key: Software\Microsoft\Internet Explorer\Toolbar\WebBrowser
Value: {4E7BD74F-2B8D-469E-8EB0-FD60BB9AAE38}
Key: Software\ONETOOLBAR\Config\onetoolbartb0401
Value: LastDown
