UpSpiral Toolbar Spyware Profile
Title: UpSpiral Toolbar
Also Known as: UpSpiralToolbar
Severity scale:
UpSpiral Toolbar is a spyware program disguised as a toolbar add-on for your browser. It was first discovered on April 15 of 2005. It was created by La Jolla Internet Properties and is distributed by the website, http://www.upspiral.com. This web site is currently shut down, but it is not indicative of the company going out of business or the removal of the UpSpiral Toolbar threat.
UpSpiral Toolbar is installed on your computer manually or as part of a freeware bundle supported by advertisements. It resets your browser’s home page to http://simplenter.com and redirects all searches to that website.
Any time the Browser is opened, it uploads user data to its server. It does this supposedly in order to deliver contextual advertising. There is, however, much potential for abuse.
The activity of UpSpiral Toolbar can seriously slow down your computer’s performance. It can also potentially cause your Internet browser to freeze or crash. Any supposed benefits it offers are not worth compromising the functionality of your computer, or your privacy.
If you are infected with this program, you should remove it immediately with SpyZooka. While there are other means to remove UpSpiral Toolbar, SpyZooka has proven to consistently and completely remove this threat from your computer.
Also Known As:
UpSpiralToolbar
Spyware Type:
Toolbar
Browser Hijacker
Trojan Downloader
Associated Files:
• %Windir%\Downloaded Program Files\upspiral.dll (detected as Adware.UpSpiralBar)
• %ProgramFiles%\Upspiral Toolbar\Uninstall.exe
• %ProgramFiles%\Upspiral Toolbar\Cache\ebay.bmp
• %ProgramFiles%\Upspiral Toolbar\Cache\highlight.bmp
• %ProgramFiles%\Upspiral Toolbar\Cache\home.bmp
• %ProgramFiles%\Upspiral Toolbar\Cache\logo.bmp
• %ProgramFiles%\Upspiral Toolbar\Cache\pop_on.bmp
• %ProgramFiles%\Upspiral Toolbar\Cache\search.bmp
• %ProgramFiles%\Upspiral Toolbar\Cache\spamarrest.bmp
• %ProgramFiles%\Upspiral Toolbar\Cache\Thumbs.db
• %ProgramFiles%\Upspiral Toolbar\Cache\tools.bmp
• %ProgramFiles%\Upspiral Toolbar\Cache\upspiraltb0300.cfg
• %Windir%\tbinstall.exe (detected as Adware.UpSpiralBar)
• %Windir%\unist2.exe
HKEY_CLASSES_ROOT\CLSID\{4E7BD74F-2B8D-469E-D7F3-FA7EA480A97D}
HKEY_CLASSES_ROOT\CLSID\{4E7BD74F-2B8D-469E-DEFF-ED65A486AA28}
HKEY_CLASSES_ROOT\CLSID\{4E7BD74F-2B8D-469E-DEFF-ED65A486AA29}
HKEY_CLASSES_ROOT\CLSID\{4E7BD74F-2B8D-469E-DEFF-ED65A486AA2A}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion
\Explorer\Browser Helper Objects\{4E7BD74F-2B8D-469E-DEFF-ED65A486AA28}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion
\Uninstall\Upspiral
HKEY_CLASSES_ROOT\upspiral.UPSPIRAL
HKEY_CLASSES_ROOT\upspiral.UPSPIRALMenu Button
HKEY_CLASSES_ROOT\upspiral.UPSPIRALToggle Button
HKEY_CURRENT_USER\Software\Upspiral Toolbar
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar {4E7BD74F-2B8D-469E-DEFF-ED65A486AA28}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser {4E7BD74F-2B8D-469E-DEFF-ED65A486AA28}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats {4E7BD74F-2B8D-469E-DEFF-ED65A486AA28}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “snbupt” = “C:\Windows\snbupt.exe”
