Cloudeight InfoAve - Adware Alert

"Starware" (MIVO) has threatened legal action if we do not remove this page. Wonder why? Read this article, their letter to us and our response.

We believe that being an informed consumer is your best defense in a cyberworld full of tricks, adware, spyware, hijackers and worse. This article is provided to keep you informed and help you make educated decisions.

Starware appeals those  looking for free recipes, especially during holiday seasons - like Christmas, New Year's, Valentines Day, 4th of July, Thanksgiving - or other local holidays where people are searching for new recipes to make for guests. The reason Starware (AKA "Smileytown" "Cursor Cafe", et. al.) is free is because it changes your browser settings, search settings, and displays advertisements*. Do you need more advertisements? Consider carefully the ramifications of installing the software bundle known by many names, including "Recipe toolbar", "Smiley Town", "Cursor Cafe" and possibly others.

If you see the ad below on the Web or in your email  Be alert - Read this entire article.  The links in the advertisement below have been disabled.

Much More than a "Recipe Toolbar" Starware is a bundle of software programs and is adware and browser/search manipulator*.

You get much more than a recipe toolbar when you install Starware- Take a look:

According to research done by Symantec, when "Adware.Starware" (Symantec's term) is installed, it performs the following actions:

Creates the following files:

%UserProfile%\Application Data\Starware\BrowserSearch\BrowserSearch.xml
%UserProfile%\Application Data\Starware\BrowserSearch\BrowserSearch.xml.backup
%UserProfile%\Application Data\Starware\ErrorSearch\ErrorSearchOptions.xml
%UserProfile%\Application Data\Starware\ErrorSearch\ErrorSearchOptions.xml.backup
%UserProfile%\Application Data\Starware\Layouts\PreferencesLayout.xml
%UserProfile%\Application Data\Starware\Layouts\PreferencesLayout.xml.backup
%UserProfile%\Application Data\Starware\Layouts\ToolbarLayout.xml
%UserProfile%\Application Data\Starware\Layouts\ToolbarLayout.xml.backup
%UserProfile%\Application Data\Starware\Manager\ManagerOptions.xml
%UserProfile%\Application Data\Starware\Manager\ManagerOptions.xml.backup
%UserProfile%\Application Data\Starware\PopupBlocker\PopupBlockerOptions.xml
%UserProfile%\Application Data\Starware\PopupBlocker\PopupBlockerOptions.xml.backup
%UserProfile%\Application Data\Starware\ProductMessaging\ProductMessaging.xml
%UserProfile%\Application Data\Starware\ProductMessaging\ProductMessaging.xml.backup
%UserProfile%\Application Data\Starware\Reference\ReferenceOptions.xml
%UserProfile%\Application Data\Starware\Reference\ReferenceOptions.xml.backup
%UserProfile%\Application Data\Starware\RelatedSearch\RelatedSearchOptions.xml
%UserProfile%\Application Data\Starware\RelatedSearch\RelatedSearchOptions.xml.backup
%UserProfile%\Application Data\Starware\SearchMatch\SearchMatchOptions.xml
%UserProfile%\Application Data\Starware\SearchMatch\SearchMatchOptions.xml.backup
%UserProfile%\Application Data\Starware\SimpleUpdate\SimpleUpdateConfig.xml
%UserProfile%\Application Data\Starware\SimpleUpdate\SimpleUpdateConfig.xml.backup
%UserProfile%\Application Data\Starware\SmileyTown\SmileyTownOptions.xml
%UserProfile%\Application Data\Starware\SmileyTown\SmileyTownOptions.xml.backup
%UserProfile%\Application Data\Starware\Timers\Timers.xml
%UserProfile%\Application Data\Starware\Timers\Timers.xml.backup
%UserProfile%\Application Data\Starware\Toolbar\TBProductsOptions.xml
%UserProfile%\Application Data\Starware\Toolbar\TBProductsOptions.xml.backup
%UserProfile%\Application Data\Starware\ToolbarLogo\ToolbarLogoOptions.xml
%UserProfile%\Application Data\Starware\ToolbarLogo\ToolbarLogoOptions.xml.backup
%UserProfile%\Application Data\Starware\ToolbarSearch\ToolbarSearchOptions.xml
%UserProfile%\Application Data\Starware\ToolbarSearch\ToolbarSearchOptions.xml.backup
%UserProfile%\Application Data\Starware\TravelSearch\TravelSearchOptions.xml
%UserProfile%\Application Data\Starware\TravelSearch\TravelSearchOptions.xml.backup
%UserProfile%\Application Data\Starware\Weather\WeatherOptions.xml
%UserProfile%\Application Data\Starware\Weather\WeatherOptions.xml.backup
%UserProfile%\Cookies\LocalUser@overture[2].txt
%UserProfile%\Local Settings\Temp\ICD1.tmp\setup.inf
%UserProfile%\Local Settings\Temp\ICD1.tmp\Starware_305.exe
%ProgramFiles%\Starware\bin\Starware.dll
%ProgramFiles%\Starware\brand.bmp
%ProgramFiles%\Starware\contexts\Error.xml
%ProgramFiles%\Starware\contexts\Related.xml
%ProgramFiles%\Starware\contexts\Travel.xml
%ProgramFiles%\Starware\icons\star_16.ico
%ProgramFiles%\Starware\StarwareConfig.xml
%ProgramFiles%\Starware\StarwareUninstall.exe
%ProgramFiles%\Starware\Products

Note:
%UserProfile% is a variable that refers to the current user's profile folder. By default, this is C:\Documents and Settings\<Current User> (Windows NT/2000/XP).
%ProgramFiles% is a variable that refers to the program files folder. By default, this is C:\Program Files.


Creates the following registry keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2D51D869-C36B-42bd-AE68-0A81BC771FA5}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7BED0340-176B-44bc-915E-C21C1DD6F617}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CA356D79-679B-4b4c-8E49-5AF97014F4C1}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D49E9D35-254C-4c6a-9D17-95018D228FF5}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CA356D79-679B-4b4c-8E49-5AF97014F4C1}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Starware
HKEY_CURRENT_USER\Software\Starware


Adds the value:

"{D49E9D35-254C-4c6a-9D17-95018D228FF5}" = "Starware"

in the registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar


Adds the value:

"{D49E9D35-254C-4C6A-9D17-95018D228FF5}" = <values>

in the registry key:

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser

Modifies the value:

"SearchAssistant" = "http://as.starware.com/dp/search?x=wKX1ILEOi+Vh7AfA98Gm4Me69ZMbubcDzJ8gIalwXowzPM
zwyWNB1EcT8FvMQFUnKLIqaeNL06cRjR3z5HduUp6v3ufZrrU5Gavo
MMhuCkekNPNgVxm4YHwzk3UBtE56"

in the registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search

Creates a search bar in Internet Explorer.

If you receive or see an advertisement like the one at the top of the page in a spam email or other advertisement, consider carefully before you install it. You may get a lot more than you bargain for.  The Starware toolbar is more than a "recipe finder" it is, in fact a search engine manipulator, and, according to many sites*, it is adware.

The last thing most of us on our need is a toolbar that bundles other software (like Smileytown, Cursor Cafe, among others) with it and that's exactly what Starware does. According to many anti-spyware/adware sites the user does not give Starware explicit permission to install other programs. Either Starware or its affiliates send spam email. We never signed up to receive any emails from Starware yet we received several emails which contained the advertisement you see above.

A Google search performed on February 27, 2007 for the search-term "Starware+Spyware" yielded 257,000 results.

Starware is apparently offended by this article, and demands we remove it. Why?

This article contains only facts based on several trusted sources including Safer-Networking.org, Symantec, and Computer Associates among dozens of others. Do your own research and see if anything we've said in this article is not backed-up by other sites.

We're not taking this page down because there is nothing on this page that isn't true and which isn't backed up by other sources. This page will remain where it is because an informed consumer is a wise consumer. We certainly hope that the information here will help you make an informed decision should you ever be confronted with an advertisement for the "Recipe Toolbar" or any other Starware product. Why does Starware insist we take this page down? What are they afraid of? We report the facts and you can decide for yourself.

Here are some screen caps taken on 2/27/2007 with the well-respected McAfee SiteAdvisor running:

*Here are some links to more information about Starware.

http://www.spywareremove.com/removeStarware.html

http://www.safer-networking.com/removeStarware.php

http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453097305

http://www.tenebril.com/src/info.php?id=451147312

http://www.spywareguide.com/product_show.php?id=2009

http://411-spyware.com/remove-starware/

http://64.233.167.104/custom?q=cache:3OHYCRULUqQJ:www.newnet66.org/ID/Resources/IDCaseStudy2.pdf+starware%2Bspyware&hl=en&ct=clnk&cd=13&gl=us&client=pub-0926893595949110
 

(Graphics, illustrations and text from the Starware advertisement and its trademarks and logos are used without permission and solely for the education of the Internet consumer.)

SpywareGuide Rates Starware a Risk and a Search Engine Manipulator (from SpywareGuide) "This adware program is in the form of a browser plug-in. This toolbar program makes www.starware.com your IE browser's start page. Using this toolbar to search will give the user places where they can buy products from their affiliates. Even when you do not use this search engine for you searches (such as google.com), it will monitor the search behavior and display advertisements at the bottom on your IE browser."

"Starware" (MIVO) has threatened legal action if we do not remove this page. Wonder why? Read this article, their letter to us and our response.

(Graphics, illustrations and text from the Starware advertisement and its trademarks and logos are used without permission and solely for educational purposes.)

Spyware Doctor. Save 20% on this Cloudeight endorsed and recommended product.

Spyware Doctor Detects And Removes Starware
Spyware Doctor is an advanced adware- and spyware-removal utility that detects and cleans thousands of potential Trojan horses, keyloggers, cookies, spy bots, and trackware, spyware, and adware programs and other malware from your PC. The remover tool allows you to remove, ignore, or quarantine identified spyware. It has an option to immunize the system against hundreds of privacy threats and can perform fast detection on Windows start-up to alert you with a list of potential threats.

Scan your computer and find out if you're infected. The scan is completely free.

Learn more about and try Spyware Doctor right now - free! If you decide to purchase Spyware Doctor, you must use the special Cloudeight 20% OFF coupon code on this page in order to get the discount! Spyware Doctor is Cloudeight recommended and endorsed and has won numerous industry awards!

Scan your computer and find out if you're infected. The scan is completely free.


Close This Window