Ron Paul ToolBar

If the message system is whats giving you grief, please keep the toolbar installed and use the yahoo search to benefit the grassroots - but get rid of the messager.

click on the 'hope for america' image and click on Layout Manager.

Then remove the "Message" component.

You shouldn't have any more problems after that!

Oyyyyyy....now the mailbox dropdown thing is stuck in the open position with no way of closing it! This is pretty funny, in a way.

I'm just going to have to figure out a way how to delete it, it isn't working for me.
 
Okay, please just let me know an easy way to remove this from my computer. I don't want to randomly and unknowingly delete stuff from my computer that I might need and use.

It's just not working for me. I tried it.
 
Okay, please just let me know an easy way to remove this from my computer. I don't want to randomly and unknowingly delete stuff from my computer that I might need and use.

It's just not working for me. I tried it.

can you please take a screenshot of the problem so that I can give it to the tech guys - you can uninstall it by going to tools > addons
 
:confused:

We don't collect any personal information about you.

The only information that is collected is:

1) the sponsored links you click on
2) the ip address that the click came from

this is so that Yahoo can know how much to pay, and to make sure the clicks are fraudulent.

so again, I understand you being concerned, but we've explained it pretty well and given lots of opportunity to personally chat with us about it.

Please refrain from making accusations that we are 'data mining' and installing malware or spyware.

Thanehand - I'm glad you know how to look for suspicious activity - don't you think we've tested and made sure that our toolbar is safe? If you don't believe us then just test it yourself instead of scaring people and smearing our name and our efforts.

I'm pretty disappointed right now that a lot of people think we're installing spyware on their computers because of a select few who keep saying that we're doing something fishy.

We've given you our personal phone numbers to call us and chat about this - we've tried to give you as much information as possible, there's nothing else we can do.

Either you chose to trust us, or you chose not to trust us.

It feels like some of you have obviously made up your minds that the toolbar is not safe and just refuse to accept that it is one of the most powerful tools to fund the revolution out there.

For those who are still open-minded to the toolbar but have questions, 864-325-6400 is Chris's phone number. If you have any questions, call Chris Lawton - thats his cell phone and he's happy to talk to anyone!

For those who are supporting the toolbar, thank you so very much! We're doing awesome, downloads are growing every day and we'll be soon making our first donations (the end of the month). Keep telling everyone you know about the toolbar and help us get 100,000 Ron Paul Supporters to install this toolbar FREE on their computers so we can donate $300,000 per month!

P.S.

This is why I hate post counts...maybe Chris only has 8 posts on here because he's spent every spare minute of the last 6 months of his life dedicated to getting Ron Paul elected elsewhere, Chris has over 6000 posts on his meetup group.

Please people, enough with the accusations, you're only hurting the grassroots - this is a brilliant idea, and it should be embraced.
 
Ok, and bTW the easiest way to UNinstall is to go into add and remove programs from control panel, and remove entry called "Ron Paul" with some numbers behind it.
 
HELLO & WELCOME EVERYONE OF YOU, WHOM FROM THIS DAY FORWARD, WILL BE KNOW AS, THE RON PAUL TOOL BAR FOUNDING MEMBERS!

THANK YOU! EACH OF YOU, FOR JOINING ON THE INITIAL PRE-LAUNCH OF THE RON PAUL TOOLBAR!

What occurs after we go FULLY operational, will STAGGER THE IMAGINATION!

This simple, safe, secure, fun tool bar on 100,000+ desktops, searching a couple of times per day, will generate over $300,000 per MONTH! This money will go to the Ron Paul Grassroots Efforts, where it's sent is decided by (YOU & I) the GRASSROOTS!

NO CAMPAIGN INVOLVEMENT! - AND NO TRICKY VOTING MACHINES!

You and I decide as a 'MASSIVE ONLINE MOVEMENT' - and NOT for any other reason than, that we are FREE to do so!

The simple knowledge that a lot of people doing a little bit can create such an excitement, is truly MAGNIFICENT!

We will be testing our first months closing on Feb. 1, 2008, as well as resetting the votes, resetting the 'Leader Board' with previous months totals still being displayed. We will keep YOUR past months efforts showcased on a graph below called 'January 2008 Leader Board', in March we will add a YTD (year to date total) for a 3rd graph.

ALSO, SOME MORE GREAT NEWS!

OUR searching has already earned $1300+ and with a little push this last few hours we anticipate to break the $1500 barrier + we are now over 3200 downloads, and checks will be 'PRINTED, ISSUED & MAILED VIA PRIORITY MAIL' right after Feb. 1st!

Since we are still in in the pre-launch phase - we made a decision to take the TOP 3 Voted projects for 50%, and the Top 10 Leader Board must submit via email to [email protected] your recommendations for your personal Top 3. They can be listed OR one of your personal favorite grass roots project not listed on the project ballot! This gives the TOP 10 Leader Board WINNERS a little more discretion - we'll also start a TOP 20 Leader Board conference call, that we'll announce next week!

The (2) RSS Feeds of Lew Rockwell & Ron Paul Official Blog should be on your NEWS button as well as RonPaulTV...we should also have http://ronpaulrevolutionradio.com/listen.shtml added shortly in the radio media section.

In addition, we will soon be listing the following TOP Ron Paul Websites in you drop down menu on toolbar for your convenience!

http://www.dailypaul.com/

http://www.ronpaulforums.com/

http://www.ronpaulforpresident2008.com/news/

http://ronpaulgraphs.com/

http://www.paulunteer.com/

http://paulcash.slact.net/

http://www.freedomsphoenix.com/Front-Page.htm

http://knowbeforeyouvote.com/

http://www.ronpaulreasons.com/

http://wiki.ronpaulpresshub.com/index.php?title=Polls#Active_Polls

We are also looking forward to giving YOU live statistical data on # of downloads & money earned with (hopefully) running graphs over at http://www.ronpaulgraphs.com/ btw - does anyone have any contacts over at http://www.ronpaulgraphs.com/? I'll need to talk to them once this LIVE COUNTER goes online!

We do have a small snag - If anyone of you have sent me a message via the feedback bar, it is sending me the same message over and over - please email me directly @ [email protected] until we correct this feature.

OH! Most importantly - for the skeptics over at Ron Paul Forums - We have a surprise for you!

We will be adding a 'Testimonial Page' with the pictures of the checks as well as the audio links or youtubes from the the recipients after they receive the money!!

And just for FUN, we are looking at adding a LIVE chat room for those that would like to chat unmoderated, but polite - middle of February!

Again ... THANKS everyone for being so patient, we look forward to funding the the R3VOLTION one search at a time!

SPREAD THE WORD - SPREAD THE WORD! THE QUICKER WE GET TO 100,000 THE MORE IMPACT WE CAN MAKE!

CAN ANY OF YOU IMAGINE A MILLION USERS?

If you have an urgent requests or questions, feel free to call me 9-9 EST
864-325-6400 or 800-790-7959

Chris Lawton

PS - once we go over 25,000 downloads the checks and voting will be GO WEEKLY!

PPS - Top 20 Leader Board Members - we'll need your physical addresses for that SPECIAL GIFT from http://ronpaulstickers.com/!
 
we've made our payments for January! Come on folks, everyone pitch in and download the toolbar for free lol
 
The RonPaul ToolBar is a virus, according to my Kaspersky antivirus and a person on ronpaulforum.com

Ross
 
You seem very suspicious to me with only 8 posts. Please assure us that what YOU are saying is true... give us proof buddy. If you don't, I will personally make sure no one installs this toolbar and those that have installed it, uninstalls it.

It is a virus,

My kaspersky antivirus detected it when I went to the site. It specifically logs credit card details and passwords according to my kaspersky AV.

Ross
 
Let's get ronpaulbillboards to set up a google toolbar and/or a yahoo one so we don't have to worry about it. ronpaulbillboards has been doing a great job with funds and is trusted.
 
The RonPaul ToolBar is a virus, according to my Kaspersky antivirus and a person on ronpaulforum.com

Ross


Are you sure? I would say that it's probably an FP with Kaspersky but I can't recreate their warning with their current def set (2008.02.11). If you're a customer you should send them an email and advise them of the FP.

I'm a malware researcher for a major AV/AS and I've dissected the program and I don't see any malicious components or activities.

Ron Paul.exe doesn't open any ports or create any backdoors. I don't see any keyboard, or other type of system hooks. The program does hook the search results but most toolbars do. The search hook is created by FreeCause (http://freecause.com/) and the program hooks the yahoo search engine.

I see links to We the People Radio Network, Ron Paul Radio, Ron Paul Revolution Radio, Lew Rockwell and Daily Dose. I don't see any malicious traffic.

The installer creates 3 exes and 12 dll's, none of which appear malicious ( troubleshooter.exe, uninst.exe, updatetoolbar.exe, bookmarksplugin.dll, emailchecker_plugin.dll, helper.dll, imageconversion.dll, mimesniffer.dll, msgboxplugin.dll, radioplugin.dll, rssreader_plugin.dll, searchcomponent.dll, statplugin.dll, toolbar.dll, weatherplugin.dll) and only standard registry entries appear under:

HKCR fctb18497.
HKCU software\fctb18497
HKCR freecauseurlsearchhook.fctoolbarurlsearchhook
HKLM software\fctb18497
HKLM software\classes\fctb18497.fctb18497

A few CLSID's
HKLM software\classes\clsid\{0d343d34-0c2c-4392-9a2e-7a803d752814}
HKLM software\classes\clsid\{aacaef9a-17e4-4ee8-a9cc-613b785caec6}
HKLM software\classes\clsid\{ee51cd61-6dd8-4470-9e0c-c97d332b3742}
HKLM software\classes\clsid\{eeb79245-1236-424c-a5de-bd1a510a05a6}
HKLM software\classes\typelib\{6790cb65-6299-4e9e-b653-b657bf8fa4b5}
HKLM software\classes\typelib\{7019c732-e9f7-4faa-a617-5ac14769c72f}

And a BHO
software\microsoft\windows\currentversion\explorer\browser helper objects\{ee51cd61-6dd8-4470-9e0c-c97d332b3742}







VirusTotal.com comes back clean from everyone but Clam and their diagnosis appears to be an FP because this definitely isn't a FakeAlert.



File Ron_Paul.exe received on 02.11.2008 18:00:59 (CET)
Current status: finished
Result: 1/32 (3.12%)
Compact Compact
Print results Print results
Antivirus Version Last Update Result
AhnLab-V3 2008.2.12.10 2008.02.11 -
AntiVir 7.6.0.62 2008.02.11 -
Authentium 4.93.8 2008.02.11 -
Avast 4.7.1098.0 2008.02.10 -
AVG 7.5.0.516 2008.02.11 -
BitDefender 7.2 2008.02.11 -
CAT-QuickHeal None 2008.02.11 -
ClamAV 0.92 2008.02.11 Adware.Fakealert-21
DrWeb 4.44.0.09170 2008.02.11 -
eSafe 7.0.15.0 2008.02.11 -
eTrust-Vet 31.3.5527 2008.02.11 -
Ewido 4.0 2008.02.11 -
FileAdvisor 1 2008.02.11 -
Fortinet 3.14.0.0 2008.02.11 -
F-Prot 4.4.2.54 2008.02.11 -
F-Secure 6.70.13260.0 2008.02.11 -
Ikarus T3.1.1.20 2008.02.11 -
Kaspersky 7.0.0.125 2008.02.11 -
McAfee 5226 2008.02.08 -
Microsoft 1.3204 2008.02.11 -
NOD32v2 2865 2008.02.11 -
Norman 5.80.02 2008.02.11 -
Panda 9.0.0.4 2008.02.10 -
Prevx1 V2 2008.02.11 -
Rising 20.29.22.00 2008.01.30 -
Sophos 4.26.0 2008.02.11 -
Sunbelt 2.2.907.0 2008.02.09 -
Symantec 10 2008.02.11 -
TheHacker 6.2.9.216 2008.02.11 -
VBA32 3.12.6.0 2008.02.10 -
VirusBuster 4.3.26:9 2008.02.11 -
Webwasher-Gateway 6.6.2 2008.02.11 -
Additional information
File size: 388592 bytes
MD5: 8429624a39b08a5ce5a27650de36af97
SHA1: 2d4ea8c50eb25b8f5bd9b5ced5dc22621d489feb
PEiD: -
 
Last edited:
Are you sure? I would say that it's probably an FP with Kaspersky but I can't recreate their warning. If you're a customer you should send them an email and advise them of the FP.

I'm a malware researcher for a major AV/AS and I've dissected the program and I don't see any malicious components or activities.

Ron Paul.exe doesn't open any ports or create any backdoors. I don't see any keyboard, or other type of system hooks. The program does hook the search results but most toolbars do. The search hook is created by FreeCause (http://freecause.com/) and the program hooks the yahoo search engine.

I see links to We the People Radio Network, Ron Paul Radio, Ron Paul Revolution Radio, Lew Rockwell and Daily Dose. I don't see any malicious traffic.

The installer creates 3 exes and 12 dll's, none of which appear malicious and only standard registry entries appear under:

HKCR fctb18497.
HKCU software\fctb18497
HKCR freecauseurlsearchhook.fctoolbarurlsearchhook
HKLM software\fctb18497
HKLM software\classes\fctb18497.fctb18497

A few CLSID's
HKLM software\classes\clsid\{0d343d34-0c2c-4392-9a2e-7a803d752814}
HKLM software\classes\clsid\{aacaef9a-17e4-4ee8-a9cc-613b785caec6}
HKLM software\classes\clsid\{ee51cd61-6dd8-4470-9e0c-c97d332b3742}
HKLM software\classes\clsid\{eeb79245-1236-424c-a5de-bd1a510a05a6}
HKLM software\classes\typelib\{6790cb65-6299-4e9e-b653-b657bf8fa4b5}
HKLM software\classes\typelib\{7019c732-e9f7-4faa-a617-5ac14769c72f}

And a BHO
software\microsoft\windows\currentversion\explorer\browser helper objects\{ee51cd61-6dd8-4470-9e0c-c97d332b3742}







VirusTotal.com comes back clean from everyone but Clam and their diagnosis appears to be an FP because this definitely isn't a FakeAlert.



File Ron_Paul.exe received on 02.11.2008 18:00:59 (CET)
Current status: finished
Result: 1/32 (3.12%)
Compact Compact
Print results Print results
Antivirus Version Last Update Result
AhnLab-V3 2008.2.12.10 2008.02.11 -
AntiVir 7.6.0.62 2008.02.11 -
Authentium 4.93.8 2008.02.11 -
Avast 4.7.1098.0 2008.02.10 -
AVG 7.5.0.516 2008.02.11 -
BitDefender 7.2 2008.02.11 -
CAT-QuickHeal None 2008.02.11 -
ClamAV 0.92 2008.02.11 Adware.Fakealert-21
DrWeb 4.44.0.09170 2008.02.11 -
eSafe 7.0.15.0 2008.02.11 -
eTrust-Vet 31.3.5527 2008.02.11 -
Ewido 4.0 2008.02.11 -
FileAdvisor 1 2008.02.11 -
Fortinet 3.14.0.0 2008.02.11 -
F-Prot 4.4.2.54 2008.02.11 -
F-Secure 6.70.13260.0 2008.02.11 -
Ikarus T3.1.1.20 2008.02.11 -
Kaspersky 7.0.0.125 2008.02.11 -
McAfee 5226 2008.02.08 -
Microsoft 1.3204 2008.02.11 -
NOD32v2 2865 2008.02.11 -
Norman 5.80.02 2008.02.11 -
Panda 9.0.0.4 2008.02.10 -
Prevx1 V2 2008.02.11 -
Rising 20.29.22.00 2008.01.30 -
Sophos 4.26.0 2008.02.11 -
Sunbelt 2.2.907.0 2008.02.09 -
Symantec 10 2008.02.11 -
TheHacker 6.2.9.216 2008.02.11 -
VBA32 3.12.6.0 2008.02.10 -
VirusBuster 4.3.26:9 2008.02.11 -
Webwasher-Gateway 6.6.2 2008.02.11 -
Additional information
File size: 388592 bytes
MD5: 8429624a39b08a5ce5a27650de36af97
SHA1: 2d4ea8c50eb25b8f5bd9b5ced5dc22621d489feb
PEiD: -

Hi,

Disect the code on their website home page.

I am completely sure that kaspersky says that their website is detected as a phishing website which steals personal data, including according to kaspersky credit card details.
If you have kaspersky antivirus installed with web security features enabled try visiting the website and you will see that it is flagged as a phishing website for stealing credit card details, passwords etc.
When I got that warning I didn't install it.
Other people have reported that it redirected them away from ronpaul2008.com to spam sites. It wouldn't surprise me if it redirected search results to fake ron paul donation sites.
I doubt that any money generated from clicks goes to Ron Paul's candidacy.
See this site. http://www.ronpaulforum.com/showthread.php?t=303801

Ross
 
Hi,

Disect the code on their website home page.

I am completely sure that kaspersky says that their website is detected as a phishing website which steals personal data, including according to kaspersky credit card details.
If you have kaspersky antivirus installed with web security features enabled try visiting the website and you will see that it is flagged as a phishing website for stealing credit card details, passwords etc.
When I got that warning I didn't install it.
Other people have reported that it redirected them away from ronpaul2008.com to spam sites. It wouldn't surprise me if it redirected search results to fake ron paul donation sites.
I doubt that any money generated from clicks goes to Ron Paul's candidacy.
See this site. http://www.ronpaulforum.com/showthread.php?t=303801

Ross

Ok, I read the post. He said he had problems getting to RonPaul2008.com because of a DNS error. This program didn't change any DNS settings and I can still access DailyPaul, RonPaulForums and Ron Paul 2008. So either they have changed the code for the installer or that guy was having other issues.

While I admire you for holding Kaspersky to such a high level, their website filter blocking the site is a far cry from saying that the program is malicious. If the site is blocked by Kaspersky wouldn't it make sense that the program would also be flagged by their system? You did see that all of the Major AV's detected the product as clean, didn't you?

Can you show any bit of evidence to back up your claim that this program is malicious? If not, then your signature just makes you look foolish.


I have absolutely NO connection to the company that distributes the program, but I do this exact type of work for a living and it just looks silly when people claim that things are malicious when in reality they don't even understand how malicious programs function.
 
FreeCause was created by several MIT grads for the purpose of enabling non-profit groups and charities to create online communities by utilizing their products.:
http://standupday.blogspot.com/2008/01/freecausecom-support.html

The product is used by many large companies including:
AnySoldier, The Denver Post, Kintera and Facebook
http://www.google.com/search?q=free...g.mozilla:en-US:official&hs=Aqx&start=10&sa=N

The 'Spam' traffic that you referred was more than likely to an address similar to this " http://s3.feedjit.com/router/?w=tra...//www.ronpaultoolbar.com/index.shtml&r=&t=Ron Paul Toolbar - Funding the Revolution One Search at a Time&sw=1024&sh=768&fjv=2&rand=637283649 "

But FeedJit is: FEEDJIT serves over 70 Million widgets every month. Visit our blog for news, see who's talking about us and check out our global feed to see who's using us.



They have some large customers to be malicious....
 
While I admire you for holding Kaspersky to such a high level, their website filter blocking the site is a far cry from saying that the program is malicious. If the site is blocked by Kaspersky wouldn't it make sense that the program would also be flagged by their system? You did see that all of the Major AV's detected the product as clean, didn't you?

Can you show any bit of evidence to back up your claim that this program is malicious? If not, then your signature just makes you look foolish.


I have absolutely NO connection to the company that distributes the program, but I do this exact type of work for a living and it just looks silly when people claim that things are malicious when in reality they don't even understand how malicious programs function.

Hi,

To be more precise it is an inbedded link on the toolbar website home page which is flagged up. The webmaster has inbedded on his homepage of the toolbar site a malicious link which alledgedly steals credit cards and other details. Kaspersky may not have come accross the toolbar yet to anylise it yet. If you search the source code of the home page you will find a link which contains "mp3" in it.
Also I have seen a number of people claim that the tool bar slows their computer down. An ordinary harmless toolbar should not make a computer lag, unless it was filtering data through a proxy server (thus you have to have blind faith in the author of the toolbar that he is not logging any data, if data is redirected through a proxy server).
I will leave my signiture up until someone can explain to me why people's computers lag. I know that there can be an innocent explaination for toolbars lagging computers but there can also be sinister reasons. Also the person who owns the toolbar needs to provide proof that all of the funds are going to the ron paul campaign.
The burdon of proof is not on me, it is on the creator of the toolbar.
Do you think that antivirus companies are crawling through reading ron paul forums all day long and are even aware of the "ron paul toolbar". I am going to submit the exe to kaspersky.

Here is the link to the DNS error that the guy on the previous forum spoke about.

http://www.freecause.com/yahoo/dns/...08&sc=-2146697211&type=18497&ourmark=1&dnss=1





He just has no clue how to work a computer.

Ok fair enough the DNS thing wasn't to do with the toolbar but kaspersky is still flagging the site as a phishing website and the toolbar lags people's computers, at least some people.
 
Last edited:
Back
Top