Home Malware Programs Browser Hijackers Only Toolbar

Only Toolbar

Posted: October 17, 2013

Threat Metric

Ranking: 4,415
Threat Level: 5/10
Infected PCs: 45,022
First Seen: October 17, 2013
Last Seen: October 16, 2023
OS(es) Affected: Windows

Only Toolbar Screenshot 1Only Toolbar is an unwanted toolbar, which may enter the computer when the PC user downloads freeware, visits questionable websites or opens spam email attachments. Often, freeware has integrated into or bundled with tools like Only Toolbar. When Only Toolbar is installed on the PC, it may alter the default browser settings in an attempt to perform browser redirects or display advertisements. Only Toolbar may cause slow PC performance. Only Toolbar may compromise the web browser and lead to unwanted browser redirects to ad-filled websites. Dubious websites associated with Only Toolbar may display random pop-up ads or ads pertaining to the web user's surfing habits. Only Toolbar may gather browsing habits and transmit the data to third parties.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Users\<username>\AppData\Local\onlysearch\onlysearch\1.3.12.9\onlysearch.exe File name: onlysearch.exe
Size: 514.92 KB (514920 bytes)
MD5: 46edee81ddd111fa2024ac77f2be26a7
Detection count: 6,736
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\onlysearch\onlysearch\1.3.12.9\onlysearch.exe
Group: Malware file
Last Updated: January 2, 2022
%LOCALAPPDATA%\onlysearch\onlysearch\1.3.12.4\onlysearch.exe File name: onlysearch.exe
Size: 439.65 KB (439656 bytes)
MD5: 69bf76edb86ffd3103305b0e4e9c7006
Detection count: 1,246
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\onlysearch\onlysearch\1.3.12.4
Group: Malware file
Last Updated: October 7, 2023
%APPDATA%\onlysearch\onlysearch\1.3.15.4\onlysearch.exe File name: onlysearch.exe
Size: 527.36 KB (527360 bytes)
MD5: 81a2f410824dad44d5819ca35de0b043
Detection count: 384
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\onlysearch\onlysearch\1.3.15.4
Group: Malware file
Last Updated: March 22, 2016
%LOCALAPPDATA%\onlysearch\onlysearch\1.3.15.1\onlysearch.exe File name: onlysearch.exe
Size: 533.86 KB (533864 bytes)
MD5: 0255d76e8acb081cc3d5b48ef8d66755
Detection count: 361
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\onlysearch\onlysearch\1.3.15.1
Group: Malware file
Last Updated: March 22, 2016
%SystemDrive%\Users\Ana File name: Ana
Size: 29.66 KB (29666 bytes)
MD5: 211d2e65a8827a62053aba0e5ee60755
Detection count: 36
Path: %SystemDrive%\Users
Group: Malware file
Last Updated: September 24, 2014
C:\Users\<username>\AppData\Local\Temp\OnlyTB.exe File name: OnlyTB.exe
Size: 734.57 KB (734576 bytes)
MD5: 6d8834a7524229fd96e45a16442ad78f
Detection count: 23
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\Temp\OnlyTB.exe
Group: Malware file
Last Updated: August 17, 2022

Registry Modifications

The following newly produced Registry Values are:

CLSID{EB97FF56-D384-40C6-ABCC-1B5A62988ADB}File name without pathhttp_www.only-search.com_0.localstoragehttp_www.only-search.com_0.localstorage-journalOnly-search.lnkRegexp file mask%WINDIR%\System32\Tasks\Only-search%WINDIR%\System32\Tasks\Only-search Udpater%WINDIR%\System32\Tasks\Only-search UpdaterHKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\DOMStorage\only-search.comSoftware\Microsoft\Internet Explorer\DOMStorage\www.only-search.comSOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BBDF7726-B08A-4051-8F78-6BDD0C248ECC}Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\onlysearch.exeSoftware\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\onlysetup.exeSOFTWARE\Microsoft\Internet Explorer\Toolbar\{2DEE5825-8CD4-4F53-A197-E469128546AE}SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Only-searchSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Only-search UdpaterSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Only-search UpdaterSOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{7ECD5132-756F-46C5-A0CA-19DE6999DAE4}Software\Microsoft\Windows\CurrentVersion\Run\Only-searchSoftware\Microsoft\Windows\CurrentVersion\Run\onlysearchSoftware\OnlyToolbarSoftware\onlytoolbar LTDSOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{2DEE5825-8CD4-4F53-A197-E469128546AE}SOFTWARE\Wow6432Node\OnlyToolbarHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}onlysearch

Additional Information

The following directories were created:
%APPDATA%\onlysearch%LOCALAPPDATA%\onlysearch%PROGRAMFILES%\onlysearch%PROGRAMFILES(x86)%\onlysearch%ProgramFiles%\OnlyToolbar%ProgramFiles(x86)%\OnlyToolbar
The following URL's were detected:
only-searchonlytoolbar

Related Posts

Loading...