Parasite: BrowserToolbar

This record last updated Tue Sep 20 2005 00:34:15

PLEASE NOTE: Due to the overwhelming extent of this problem and the unbelievable volume of email we have received, we regret that we cannot respond to questions about browser parasites at this time. If you have attempted to contact us about this parasite please accept our apology for not responding. "Thank you's" are always appreciated ;-)

Description

BrowserToolbar is an IE toolbar object which comes with various other components that act as adware and spyware.

Also known as

ausvc (after the filename of one of its components), Backdoor.Autoupder (Kaspersky Anti-Virus), Downloader-W (McAfee), BrowseEvt (after the spyware component it installs), TROJ_SUA.A (Trend Anti-Virus).

Distribution

Can be downloaded and installed from the manufacturer’s site, but it more likely to come as an affiliate’s drive-by-download (ActiveX install). BrowserToolbar is known to have been installed at least once by exploiting a security flaw in Internet Explorer.

What it does

Advertising

Yes. Opens pop-up adverts.

Privacy violation

Unknown. It has been alleged that the BrowseEvt component spies on URLs visited, but this was not working when I tested the software as the manufacturer’s servers were not responding.

Security issues

Yes. BrowserToolbar downloads and installs updates to all its components silently, without code-signing.

Stability problems

Unknown.

Removal

You could try the downloadable uninstaller from browsertoolbar.com. Alternatively Spybot S&D 0.95b6 and many anti-virus packages can remove it.

Manual removal

See the AV vendors’ pages below for manual removal info.