84,488,480 programs installed

Should I remove ToolbarFR?

What percent of users and experts removed it?
83% remove it17% keep it
Overall Sentiment
Bad
What do people think about it?
(click star to rate)
How common is it?
Global Rank #7,086
United States Rank #26,512
Reach 0.0603%
Lifespan of installation (until removal)
< 263.83 days
1083.69 days >
Average installed length: 569.40 days

Versions

VersionDistribution
1.0.0 100.00%

ToolbarFR

What is ToolbarFR?

This is a potentially unwanted ad-supported (adware) web browser toolbar for Orange.

Overview

ToolbarFR is a program developed by ReSoft. Upon installation and setup, it defines an auto-start registry entry which makes this program run on each Windows boot for all user logins. It adds a Browser Helper Object (BHO) to Internet Explorer. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). The software is designed to connect to the Internet and adds a Windows Firewall exception in order to do so without being interfered with. The main program executable is browserhelper.exe. Typically most users end up uninstalling this just after a few days. The software installer includes 280 files and is usually about 19.47 MB (20,414,464 bytes). 3dviaplayerupdater.exe is the automatic update component of the software designed to download and apply new updates should new versions be released. In comparison to the total number of users, most PCs are running the OS Windows 7 (SP1) as well as Windows 10. While about 90% of users of ToolbarFR come from France, it is also popular in the United States and United Kingdom.
  • Possible malware installed by this program
  • Automatically starts with Windows
  • Loads into the web browser
  • Difficult to remove as it will reinstall itself
  • Typically distributed through a pay-per-install bundle
  • The experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in ToolbarFR.
browserhelper.exe (697943b11eb0974c32acc82f585d8abb) has been flagged by the following 3 scanners:
Anti-Virus softwareVersionDetection
ESET-NOD32 8.9339 a variant of MSIL/Toolbar.Linkury.A
TrendMicro-HouseCall 7.2.26 TROJ_GEN.F47V1225
VIPRE Antivirus 25820 Adware.Linkury (fs)
smartbar.exe (593eb3b509c6e91690f5ebf5bac9f03a) has been flagged by the following 5 scanners:
Anti-Virus softwareSoftware versionDetection
Dr.Web 7.00.7.12100 Adware.Linkury.1
ESET-NOD32 9190 a variant of Win32/Toolbar.Linkury.A
Kingsoft AntiVirus 2013.04.09.267 Win32.Troj.Generic.a.(kcloud)
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.F47V1021
VIPRE Antivirus 24764 Adware.Linkury (fs)
ToolbarFR has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.

Program detailsProgram details

Displayed publisher: Orange
Installation folder: C:\users\user\appdata\Local\smartbar
Uninstaller: MsiExec.exe /X{A047FE02-C91C-41CB-898C-4ED21B86025A}
(The Windows Installer is used for the installation, maintenance, and removal.)
Estimated size: 19.47 MB
Language: French (France)

Program filesFiles installed by ToolbarFR

Program executable:browserhelper.exe (Malware detected)
Name:BrowserHelper
Path:C:\users\user\appdata\Local\smartbar\application\browserhelper.exe
MD5:697943b11eb0974c32acc82f585d8abb
Additional files:
  • axinterop.wmplib.dll
  • googlechromeremoteplugin.dll - GoogleChromeRemotePlugin (nprt)
  • interop.shdocvw.dll - Assembly imported from type library 'SHDocVw'.
  • interop.wmplib.dll - Assembly imported from type library 'WMPLib'.
  • maconfservice.exe (by CybelSoft) - Ma-Config.com (Service de détection matériel)
  • mactrackbarlib.dll
  • mcatlactivex.dll (by CybelSoft) - ActiveX détection matériel
  • mcbcl.dll - Ma-Config.com factory
  • mcnoyau.dll - Moteur de détection matériel
  • mcrypt.dll - Module de cryptage ma-config.com
  • mcsettings.exe - Préferences Ma-Config.com
  • ndde.dll (by Brian Gideon) - NDde
  • newtonsoft.json.dll (by Newtonsoft) - Json.NET (Json.NET .NET 2.0)
  • nphardwaredetection.dll (by Cybelsoft) - Ma-Config.com plugin (Plugin NPAPI Ma-Config.com)
  • productsremovaltool.exe - Smartbar.Resources.ProductsRemovalTool
  • sgml.dll - sgmu
  • sgmu.dll
  • sidb.dll (by Microsoft) - sipb
  • siem.dll
  • sipb.dll (by Microsoft) - Client
  • sismlp.dll - sismlp
  • smartbar.gui.controls.dll - Smartbar.GUI.Controls
  • smartbar.gui.docking.dll - Smartbar.GUI.Docking
  • smartbar.gui.mainclient.dll - Smartbar
  • smartbar.infrastructure.businessentities.dll - Smartbar.Infrastructure.BusinessEntities
  • smartbar.infrastructure.core.dll - SmartbarProxy
  • smartbar.infrastructure.plugins.chromelocalplugin.dll
  • smartbar.infrastructure.plugins.firefoxlocalplugin.dll
  • smartbar.infrastructure.plugins.internetexplorerlocalplugin.dll - InternetExplorerLocalPlugin
  • smartbar.infrastructure.utilities.dll - SmartbarGUI
  • smartbar.personalization.common.dll - Smartbar.Personalization.Common
  • smartbar.personalization.servicesplugins.dmp.dll - DefaultMailProvider
  • smartbar.personalization.servicesplugins.messengerplugin.dll - MessengerPlugin
  • smartbar.personalization.servicesplugins.notepadplugin.dll - NotepadPlugin
  • smartbar.personalization.servicesplugins.screencaptureplugin.dll - ScreenCapturePlugin
  • smartbar.personalization.servicesplugins.weatherplugin.dll - WeatherPlugin
  • smartbar.personalization.servicesplugins.wordplugin.dll (by xxx) - WordPlugin
  • smartbar.resources.historyandstatswrapper.dll - Smartbar.Resources.HistoryAndStatsWrapper
  • smartbar.resources.languagesettings.dll - Smartbar.Resources.LanguageSettings
  • smartbar.resources.languagesettings.resources.dll
  • smartbar.resources.socialnetssharer.dll - Smartbar.Resources.SocialNetsSharer
  • smartbar.resources.socialnetssharer.xmlserializers.dll
  • smartbar.resources.translations.dll - Smartbar.Resources.Translations
  • smartbarfirefoxremoteplugin_24.dll
  • smartbarinternetexplorerbho.dll - SmartbarInternetExplorerBHO
  • smartbarinternetexplorerextension.dll - Snap.Do
  • smartbarversionshelper.exe - SmartbarVersionsHelper
  • spbe.dll - spbe
  • spbl.dll - spbl
  • sppsm.dll - sppsm
  • spsm.dll - spsm
  • spup.dll - spup
  • spusm.dll - spusm
  • sqlite3.dll
  • srau.dll - srau
  • srbhu.dll - srbhu
  • srbs.dll - srbs
  • srgu.dll - srgu
  • srns.dll - srns
  • srpdm.dll - srpdm

Program behaviorsBehaviors exhibited

Autoplay Handler
  • acdsee.exe is registered as an AutoPlay event handler named 'ACDSee31ShowPicturesOnArrival' with the ProgID of 'ACDSee.AutoPlayHandler.3.1' and the action verb 'Open.
3 Google Chrome Plugins
  • npfacebookvideocalling.dll is loaded in the Google Chrome web browser as 'npFacebookVideoCalling.dll'.
  • nphardwaredetection.dll is loaded in the Google Chrome web browser as 'nphardwaredetection.dll'.
  • np3dviaplayer.dll is loaded in the Google Chrome web browser as 'np3DVIAplayer.dll'.
Internet Explorer BHO
  • jp2ssv.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'Java(tm) Plug-In 2 SSV Helper' with the class of {DBC80044-A445-435b-BC74-9C25C1C588A9}.
3 Mozilla Plugins
  • npfacebookvideocalling.dll is loaded into Mozilla Firefox under the product name '@Skype Limited.com/Facebook Video Calling Plugin' with a plugin key of '@Skype Limited.com/Facebook Video Calling Plugin'.
  • nphardwaredetection.dll is loaded into Mozilla Firefox under the product name '@ma-config.com/HardwareDetection' with a plugin key of '@ma-config.com/HardwareDetection' for all users of the PC.
  • np3dviaplayer.dll is loaded into Mozilla Firefox under the product name 'Virtual Machine' with a plugin key of '@3dvia.com/3DVIAVirtualMachine' for all users of the PC.
5 Scheduled Tasks
  • javacpl.exe is scheduled as a task with the class '{4A96D4E3-15D0-4D39-A551-3EC96D94D3B5}' (runs on registration).
  • issch.exe is scheduled as a task named 'InstallShield software-updateservice' (runs weekly on Mondays at 10:00).
  • hpwuschd2.exe is scheduled as a task named 'hp digital imaging - hp all-in-one series MAGIX PCCT' (runs weekly on Wednesdays at 12:00 AM).
  • mynetview.exe is scheduled as a task with the class '{96622AC3-F62B-4C5A-8BBE-D2CF58A167E6}' (runs on registration).
  • ssbkgdupdate.exe is scheduled as a task named 'SSBkgdUpdate' (runs weekly on Mondays at 10:00).
Scheduled Task (Boot/Login)
  • ssbkgdupdate.exe is automatically launched at startup through a scheduled task named 1.
2 Startup Files (User Run)
  • snapdo.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Browser Infrastructure Helper' and executes as C:\Documents and Settings\user\Application Data\Smartbar\Application\SnapDo.exe startup.
  • smartbar.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Browser Infrastructure Helper' and executes as C:\users\user\appdata\Local\Smartbar\Application\Smartbar.exe startup.
5 Startup Files (All Users Run)
  • devdetect.exe is loaded in the all users (HKLM) registry as a startup file name 'Camera Detector' which loads as C:\Program Files1\ACDSYS~1\DEVDET~1\DEVDET~1.EXE -autorun.
  • ssbkgdupdate.exe is loaded in the all users (HKLM) registry as a startup file name 'SSBkgdUpdate' which loads as "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot.
  • issch.exe is loaded in the all users (HKLM) registry as a startup file name 'ISUSScheduler' which loads as "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start.
  • updater.exe is loaded in the all users (HKLM) registry as a startup file name 'ApnUpdater' which loads as "C:\Program Files\Ask.com\Updater\Updater.exe".
  • hpwuschd2.exe is loaded in the all users (HKLM) registry as a startup file name 'HP Software Update' which loads as C:\Program Files\HP\HP Software Update\HPWuSchd2.exe.
4 Windows Firewall Allowed Programs
  • facebookvideocalling.exe is added as a firewall exception for 'C:\Documents and Settings\user\Application Data\Facebook\Video\Skype\FacebookVideoCalling.exe'.
  • mynetview.exe is added as a firewall exception for 'C:\Program Files\Western Digital\My Net View\MyNetView.exe'.
  • maconfservice.exe is added as a firewall exception for 'C:\Program Files\ma-config.com\maconfservice.exe'.
  • hpwucli.exe is added as a firewall exception for 'C:\Program Files\HP\HP Software Update\HPWUCli.exe'.

How do I remove ToolbarFR?

You can uninstall ToolbarFR from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program ToolbarFR, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove ToolbarFR.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by ToolbarFR you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome

OS VERSIONS
Win 7 (SP1) 53%
Win 7 0%
 
HOW IT STARTS
Automatically starts? Yes
(Found in the run registry)
 
USER ACTIONS
Uninstall it 83%
Keep it 17%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 55.09%
Windows 10 18.25%
Windows Vista 17.24%
Windows XP 9.42%
Which OS releases does it run on?
Windows 7 Home Premium 45.97%
Windows Vista Home Premiu... 14.33%
Microsoft Windows XP 9.25%
Windows 10 Home 8.99%
Windows 7 Professional 5.85%
Windows 8.1 5.09%

Distribution by countryGeography

90.18% of installs come from France
Which countries install it?
  France 90.18%
  United States 5.09%
  United Kingdom 1.23%
  Germany 0.70%
  Netherlands 0.53%
  GP 0.26%
  Belgium 0.18%
  Switzerland 0.18%
  GF 0.18%
  MQ 0.18%
  YT 0.18%
  Austria 0.09%
  Australia 0.09%
  BG 0.09%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 26.55%
Acer 25.88%
ASUS 13.21%
Toshiba 9.84%
Dell 8.89%
Samsung 5.12%
GIGABYTE 3.50%
American Megatrends 2.96%
Packard Bell 1.89%
Lenovo 1.08%
Sahara 1.08%
Common models
HP Pavilion dv7 Notebook ... 6.91%
HP Pavilion g7 Notebook P... 4.86%
HP Pavilion dv6 Notebook ... 2.81%
Acer Aspire 7741 1.79%
HP G62 Notebook PC 1.79%
HP Pavilion 17 Notebook P... 1.79%

About (from ReSoft Ltd.)

Our vision is to become the leading provider of simple, smart web solutions and complementary applications dedicated to improving browsing efficiency and simplicity using existing technologies and user interfaces.
Publisher URL: www.snap.do

commentsComments

user comment
No one has commented yet. Help others learn more about this software, share your comments.