|
BrowserAid Browser Plug-in Information
| Name: |
BrowserAid |
| Category: |
Browser Plug-in |
| Alias: |
- Alias: Free Scratch and Win, Free-Scratch-Cards, Free Scratch Cards |
| Advice: |
Remove |
| Risk: |
Moderate Risk
Moderate threats may profile users online habits or broadcast data back to a server with 'opt-out' permission. In most cases this type of threat is more along the lines of commercial type adware that offer a premium service in exchange for tracking your user online performance. |
| Description:
|
BrowserAid is a group of Internet Explorer software toolbars which are installed without the users consent (most).
BrowserAid can be downloaded and installed from the manufacturer's site, but it is more likely to come as an affiliate's drive-by-download (ActiveX install). For instance, a simple visit to LetsSearch.com will automatically install it.
Variants:
BrowserAid.ABCSearch
BrowserAid.BrowserPal
BrowserAid.CashToolbar
BrowserAid.Featured-Results
BrowserAid.FindIt-Quick
BrowserAid.LetsSearch
BrowserAid.Quicklaunch
BrowserAid.RunDLL16
BrowserAid.SearchandClick
BrowserAid.Startium
BrowserAid.X
BrowserAid/Featured-Results
BrowserAid/Quicklaunch
BrowserAid/RunDLL16
BrowserAid/Startium
BrowserAid/ABCSearch offers a 'Power Search' feature when right-clicking a selection.
BrowserAid/CashToolbar, BrowserAid/LetsSearch and BrowserAid/QuickLaunch are minor variations on an adware theme. The script at this site cannot tell them apart and detects them only as 'BrowserAid'. The toolbar opens untargeted pop-up adverts periodically when IE is open. LetsSearch hijacks home page and search settings to point to searchmadesafe.com; QuickLaunch points at quicklaunch.com.
BrowserAid/BrowserPal offers pop-up blocking features. It is a later version of BrowserAid/pStopper, a pop-up blocker which is not known to have been stealth-installed and is not targeted by the script at this site.
BrowserAid/Rundll16 is a smaller parasite that only opens pop-ups; it does not include a toolbar component. It hides in the Windows folder under the name 'rundll16', which is not a system file, but is a filename also used by other malware (eg. SubSeven trojan, Roron worm, ZMorph virus).
BrowserAid/FeaturedResults is a search result hijacker. Perform a search at Google and it will pop up a window with no browser controls from featured-results.com, containing advertiser links dressed up to look like Google search results.
BrowserAid/StlbDist and StlbAd are simple toolbars containing just a search box, and homepage/search hijacking function.
BrowserAid/WebDownload is a downloader ActiveX control for the StlbDist and StlbAd variants.
The CashToolbar, ABCSearch and QuickLaunch and LetsSearch variants are suspected of having been installed by ActiveX drive-by download on pop-up adverts.
BrowserAid/QuickLaunch and (possibly also LetsSearch) are pointed to by junk e-mails purporting to be an IE toolbar update or virus removal tool from Microsoft.
BrowserAid/BrowserPal was installed by the FavoriteMan parasite from March 2003.
The method of distribution of the Rundll16 variant is currently unknown. BrowserAid/FeaturedResults and BrowserAid/SearchToolbar are believed to be installed by BrowserAid/Rundll16.
|
| Signatures:
|
process: quicklaunch.exe: MD5 Hash: 60a2fe9306fe497f5c9...
process: uptodate.exe: MD5 Hash: 1e51ccb4669f06ea7b8...
process: rundll16.exe: MD5 Hash: 8e96fee763673d71a8c...
process: letssearch.exe: MD5 Hash: ...
process: mwsvm.exe: MD5 Hash: ...
process: uptodate.exe: MD5 Hash: ...
process: CashToolbar.exe: MD5 Hash: ...
process: letssearch.exe: MD5 Hash: ...
process: rundll16.exe: MD5 Hash: ...
process: QuickLaunch.exe: MD5 Hash: ...
process: uptodate.exe: MD5 Hash: bed39e954ce657cd489.. |
| Type: |
Browser Plug-in - Adware is generally software that displays advertisements. Some advertisers may covertly install adware on your system and generate a stream of unsolicited advertisements that can clutter your desktop and affect your productivity. The advertisements may also contain pornographic or other material that you might find inappropriate. The extra processing required to track you or to display advertisements can tax your computer and hurt your system performance. |
Top Browser Plug-in Visited Pages:
3721.com Chinese Keywords - Alias: 3721.com Chinese Keywords browser Spyware - 75 visits
Sexxxpassport Plug-in - Alias: Sexxxpassport.com, SEXXXPASSPORT - 52 visits
FavoriteMan - Alias: TrojanDownloader.Win32.Rameh, Windows Help 4 Smart Browsing, F1Organizer, ATPartners - 43 visits
Netster SmartBrowse - Alias: Netster SmartBrowse Toolbar - 40 visits
MapQuest Toolbar - 39 visits
My Way Speedbar - Alias: MyWayToolbar, MyWay Search Bar - 39 visits
Trojan.BHO.NameShifter.T - 36 visits
Kugoo - 35 visits
EZSearch - Alias: ezSearching, ctavp - 34 visits
Esyndicate - Alias: Esyndicate.BHO - 32 visits
Random Browser Plug-in Pages:
AroundWeb - Alias: AroundWeb Toolbar
Unclassified.Spyware.BHO.H
PKings-IEHelper
Cytron - Alias: Burnaby, TargetingSource, Troj/Ortyc
Trojan.BHO.NameShifter.A
KeenValue
WindUpdates
CWS.sdkvt32 - Alias: CoolWebSearch.sdkvt32
BHO.WStart
FreeScratchAndWin - Alias: Free Scratch and Win, Free-Scratch-Cards, Free Scratch Cards
|
