Home Malware Programs Potentially Unwanted Programs (PUPs) iWon Toolbar

iWon Toolbar

Posted: July 24, 2009

Threat Metric

Ranking: 2,025
Threat Level: 2/10
Infected PCs: 64,843
First Seen: July 24, 2009
Last Seen: October 16, 2023
OS(es) Affected: Windows

The IWON Global Internet Explorer Toolbar (IWONGIE for short) was developed by Mindspark Interactive Network Inc. and was offered to users as a search enhancer. IWON has been deemed to be a Potentially Unwanted Program (PUP). As its name suggests IWON Global Internet Explorer Toolbar is designed to improve the search functionality of Internet Explorer. At the time of the release of IWON Global Internet Explorer Toolbar, the application was compatible with Microsoft's browser only. Later, versions of IWON were released publicly for Web surfers that proffered to use Google Chrome and Mozilla Firefox. The IWON app was created by Mindspark Interactive Network Inc. and it worked for more than two years until it was discontinued. The IWON project aimed to deliver personalized search results via Ask.com. Computer users that were not satisfied with how Google and Bing worked had the opportunity to install IWON and try a new search service. However, IWON did not offer anything new and redirected users to a modified version of Ask.com. Users could use IWON to access RSS-feeds from portals like bbc.com, nytimes.com, and reuters.com as well as load videos from YouTube on their new tab page. Computer researchers note that IWON needed access to the user's Internet history, software configuration and downloads log which many users did not approve.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES%\IWONGIE\bar\1.bin\vrbarsvc.exe File name: vrbarsvc.exe
Size: 28.76 KB (28766 bytes)
MD5: 72fac4e354065efd673a9d1dc0ee250e
Detection count: 1,555
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\IWONGIE\bar\1.bin
Group: Malware file
Last Updated: July 10, 2018
%PROGRAMFILES%\IWONGIE\bar\1.bin\vrbar.dll File name: vrbar.dll
Size: 643.07 KB (643072 bytes)
MD5: 6284dea44fbc27f8b8b856147390819b
Detection count: 1,536
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\IWONGIE\bar\1.bin
Group: Malware file
Last Updated: July 10, 2018
%PROGRAMFILES%\IWONGIE\bar\1.bin\vrSrcAs.dll File name: vrSrcAs.dll
Size: 49.15 KB (49152 bytes)
MD5: b464d1fe81cb5e15f53eea4bab27e1a0
Detection count: 1,520
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\IWONGIE\bar\1.bin
Group: Malware file
Last Updated: July 10, 2018
%PROGRAMFILES%\IWONGIE\bar\1.bin\vrbrmon.exe File name: vrbrmon.exe
Size: 20.48 KB (20480 bytes)
MD5: cc9dc72ce86ff34f4e1375b4378018df
Detection count: 1,480
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\IWONGIE\bar\1.bin
Group: Malware file
Last Updated: January 27, 2011

Registry Modifications

The following newly produced Registry Values are:

File name without pathiwon2ns.exe

Additional Information

The following cookies were detected:
iwon

Related Posts

Loading...