ToolbarFR

ToolbarFR

Known Toolbar

by ReSoft Ltd.

What is ToolbarFR?

ToolbarFR is software application developed by ReSoft Ltd.. It is most commonly found on computers running Windows 7 with nearly 55.09% of installations running this operating system. ToolbarFR's installer is typically 19.00 MB in size and installs around 109 files.

ToolbarFR is most popular in France with 90.18% of installations residing in this country.

ToolbarFR adds 5 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, ToolbarFR is known to create 4 firewall exceptions to allow inbound and outbound connectivity.

About ToolbarFR?

This software is a web browser toolbar designed for use with Orange. Please note that this software may display advertisements as part of its functionality.

Multiple virus scanners have detected malware in ToolbarFR.

browserhelper.exe (MD5: 697943b11eb0974c32acc82f585d8abb) has been flagged by 5 scanners:
Scanner Software Result
ESET-NOD32 a variant of MSIL/Toolbar.Linkury.A
TrendMicro-HouseCall TROJ_GEN.F47V1225
VIPRE Antivirus Adware.Linkury (fs)
Dr.Web Adware.Linkury.1
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
smartbar.exe (MD5: 593eb3b509c6e91690f5ebf5bac9f03a) has been flagged by 5 scanners:
Scanner Software Result
Dr.Web Adware.Linkury.1
ESET-NOD32 a variant of Win32/Toolbar.Linkury.A
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
TrendMicro-HouseCall TROJ_GEN.F47V1021
VIPRE Antivirus Adware.Linkury (fs)

Software Behaviors

Firewall:
  • facebookvideocalling.exe is added as a firewall exception for 'C:\Documents and Settings\user\Application Data\Facebook\Video\Skype\FacebookVideoCalling.exe'.
  • mynetview.exe is added as a firewall exception for 'C:\Program Files\Western Digital\My Net View\MyNetView.exe'.
  • maconfservice.exe is added as a firewall exception for 'C:\Program Files\ma-config.com\maconfservice.exe'.
  • hpwucli.exe is added as a firewall exception for 'C:\Program Files\HP\HP Software Update\HPWUCli.exe'.
Scheduled tasks:
  • javacpl.exe is scheduled as a task with the class '{4A96D4E3-15D0-4D39-A551-3EC96D94D3B5}' (runs on registration).
  • issch.exe is scheduled as a task named 'InstallShield software-updateservice' (runs weekly on Mondays at 10:00).
  • hpwuschd2.exe is scheduled as a task named 'hp digital imaging - hp all-in-one series MAGIX PCCT' (runs weekly on Wednesdays at 12:00 AM).
  • mynetview.exe is scheduled as a task with the class '{96622AC3-F62B-4C5A-8BBE-D2CF58A167E6}' (runs on registration).
  • ssbkgdupdate.exe is scheduled as a task named 'SSBkgdUpdate' (runs weekly on Mondays at 10:00).

Startup Entries

Startup tasks:
  • ssbkgdupdate.exe is automatically launched at startup through a scheduled task named 1.
Registry entries:
  • snapdo.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Browser Infrastructure Helper' and executes as C:\Documents and Settings\user\Application Data\Smartbar\Application\SnapDo.exe startup.
  • smartbar.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Browser Infrastructure Helper' and executes as C:\users\user\appdata\Local\Smartbar\Application\Smartbar.exe startup.

Software Details

URL:
https://www.snap.do
Support:
Installation path:
C:\users\user\appdata\Local\smartbar
Uninstaller:
MsiExec.exe /X{A047FE02-C91C-41CB-898C-4ED21B86025A}
Size:
19.00 MB
Language:
French

ToolbarFR Executable Details

Primary executable:
browserhelper.exe
Name:
ToolbarFR
Path:
C:\users\user\appdata\Local\smartbar\browserhelper.exe
MD5:
697943b11eb0974c32acc82f585d8abb
SHA-1:
SHA-256:
Files installed by ToolbarFR
File Type Filename MD5
DLL
429bd41fb61d8235fd380682bf9e0522
DLL
0e31ba8f8ca7137eff6c709e5f06eed0
DLL
a720604069455bb54cfde8807371bb15
DLL
34c2db4eb12e84f3433b792e167b7ac5
EXE
379752e32d0540d67196dae1b6a125f5
DLL
8275c7d25638a9d12a3f01c02d8fac00
DLL
1931ae3b11e116a91fa7878ef60ba2ac
EXE
3091a03ec33038ca4a459706b6057d82
DLL
1f9ce82ff5c89024f57b34a9b58cc69e
DLL
b91e6c4bf3358a821bb19e1bad73a11b