Home Malware Programs Browser Hijackers Only Toolbar

Only Toolbar

Posted: October 17, 2013

Threat Metric

Ranking: 3,779
Threat Level: 5/10
Infected PCs: 45,655
First Seen: October 17, 2013
Last Seen: March 10, 2025
OS(es) Affected: Windows

Only Toolbar Screenshot 1Only Toolbar is an unwanted toolbar, which may enter the computer when the PC user downloads freeware, visits questionable websites or opens spam email attachments. Often, freeware has integrated into or bundled with tools like Only Toolbar. When Only Toolbar is installed on the PC, it may alter the default browser settings in an attempt to perform browser redirects or display advertisements. Only Toolbar may cause slow PC performance. Only Toolbar may compromise the web browser and lead to unwanted browser redirects to ad-filled websites. Dubious websites associated with Only Toolbar may display random pop-up ads or ads pertaining to the web user's surfing habits. Only Toolbar may gather browsing habits and transmit the data to third parties.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Windows.old.000\Users\<username>\AppData\Local\onlysearch\onlysearch\1.3.18.2\onlysearch.exe File name: onlysearch.exe
Size: 629.6 KB (629608 bytes)
MD5: 366be5359ff95a3396f240a87033e42a
Detection count: 1,480
File type: Executable File
Mime Type: unknown/exe
Path: C:\Windows.old.000\Users\<username>\AppData\Local\onlysearch\onlysearch\1.3.18.2\onlysearch.exe
Group: Malware file
Last Updated: October 7, 2023
%SystemDrive%\Users\Ana File name: Ana
Size: 29.66 KB (29666 bytes)
MD5: 211d2e65a8827a62053aba0e5ee60755
Detection count: 36
Path: %SystemDrive%\Users
Group: Malware file
Last Updated: September 24, 2014
C:\Users\<username>\AppData\Local\Temp\OnlyTB.exe File name: OnlyTB.exe
Size: 734.57 KB (734576 bytes)
MD5: 6d8834a7524229fd96e45a16442ad78f
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\Temp\OnlyTB.exe
Group: Malware file
Last Updated: September 25, 2024

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{EB97FF56-D384-40C6-ABCC-1B5A62988ADB}File name without pathhttp_www.only-search.com_0.localstoragehttp_www.only-search.com_0.localstorage-journalOnly-search.lnkRegexp file mask%WINDIR%\System32\Tasks\Only-search%WINDIR%\System32\Tasks\Only-search Udpater%WINDIR%\System32\Tasks\Only-search UpdaterHKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\DOMStorage\only-search.comSoftware\Microsoft\Internet Explorer\DOMStorage\www.only-search.comSOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BBDF7726-B08A-4051-8F78-6BDD0C248ECC}Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\onlysearch.exeSoftware\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\onlysetup.exeSOFTWARE\Microsoft\Internet Explorer\Toolbar\{2DEE5825-8CD4-4F53-A197-E469128546AE}SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Only-searchSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Only-search UdpaterSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Only-search UpdaterSOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{7ECD5132-756F-46C5-A0CA-19DE6999DAE4}Software\Microsoft\Windows\CurrentVersion\Run\Only-searchSoftware\Microsoft\Windows\CurrentVersion\Run\onlysearchSoftware\OnlyToolbarSoftware\onlytoolbar LTDSOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{2DEE5825-8CD4-4F53-A197-E469128546AE}SOFTWARE\Wow6432Node\OnlyToolbarHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}onlysearch

Additional Information

The following directories were created:
%APPDATA%\onlysearch%LOCALAPPDATA%\onlysearch%PROGRAMFILES%\onlysearch%PROGRAMFILES(x86)%\onlysearch%ProgramFiles%\OnlyToolbar%ProgramFiles(x86)%\OnlyToolbar
The following URL's were detected:
only-search

Related Posts

Loading...