SearchWords is a spyware program disguised as a toolbar add-on for your browser.  It was first discovered on June 29 of 2005.  It is distributed by Consulting First, Inc. and is powered by the web servers, SearchWords.com and http://search.careon.com/.

SearchWords is installed on your computer either manually by an ActiveX installer or as part of an ad-supported freeware bundle.  It tricks the user into downloading it by convincing him that it provides a convenient service.  The services that it offers, however, are redundant.

It also has spyware capabilities.  It has data mining capabilities so it collects information about the sites you visit and search terms you enter.  It uploads this data to one of its servers to deliver targeted advertising.

This advertising is delivered by pop-ups and by redirecting your browser.  Whenever you enter a search term, it directs you to one of its servers.  The pop-ups are often unrelated to your preferences.

If you are infected with SearchWords, you should remove it immediately with SpyZooka.

Also Known As:
Adware.Win32.SearchWords Toolbar, Adware.SearchWords, SearchWords Toolbar

Spyware Type: Toolbar, Data Miner, Browser Hijacker

Associated Files:
%Windir%\Downloaded Program Files\swbar.dll
%ProgramFiles%\Dynamic Toolbar\SWBAR\Cache\SWBARhome.bmp
%ProgramFiles%\Dynamic Toolbar\SWBAR\Cache\SWBARsearch.bmp
%ProgramFiles%\Dynamic Toolbar\SWBAR\Cache\SWBARTBO.cfg
HKEY_CLASSES_ROOT\CLSID\{4e7bd74f-2B8D-469e-c0ff-fd7ba7d5fa7d}
HKEY_CLASSES_ROOT\CLSID\swbar.SWBAR
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units
\{4e7bd74f-2B8D-469e-c0ff-fd7ba7d5fa7d}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files
/swbar.dll
HKEY_ALL_USERS\SOFTWARE\Visicom Media\SWBAR
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar {4e7bd74f-2B8D-469e-c0ff-fd7ba7d5fa7d}
HKEY_ALL_USERS\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser {4e7bd74f-2B8D-469e-c0ff-fd7ba7d5fa7d}