Bargain Buddy
Bargain Buddy consists of an IE Browser Helper Object (BHO). The BHO monitors web pages requested and terms entered into forms. If there is a match with a preset list of sites and keywords, an advertisement may be shown.Bargain Buddy is distributed
as a bundle with other adware/free softwareâs on the internet. BargainBuddy is also installed by some versions of FreeWire, LimeWire, MThree MP3 tools.0
General information:
| Malware Name: |
Bargain Buddy |
| Malware Type: |
Browser Helper Object |
| Company Name: |
eXact Advertising LLC |
| Company URL: |
http://www.exactadvertising.com/
|
| Threat Level: |
High |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE. (Installed from setup of FreeWire) |
| Operation: |
Time of After installation |
Company Description:
eXact delivers a client-side, privacy-protecting platform that provides consumers with free applications and cash back rebates in exchange for laser-targeted marketing messages. In exchange, company provides consumers with marketing messages that
are directly related to their real-time online usage, while protecting consumer privacy and identity.
Spyware Description:
Bargain Buddy consists of an IE Browser Helper Object (BHO). The BHO monitors web pages requested and terms entered into forms. If there is a match with a preset list of sites and keywords, an advertisement may be shown.Bargain Buddy is distributed
as a bundle with other adware/free softwareâs on the internet. BargainBuddy is also installed by some versions of FreeWire, LimeWire, MThree MP3 tools.0
Characteristics/Symptoms:
-> Slows the Browser -> Shows frequent popup ads -> Monitors the users surfing activity -> Transfers collected data to host server -> Uses stealth techniques0
Additional information might be found here:
Processes Running:
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Program Files\Bargain Buddy\ ub.dat |
unknown |
DAT |
| C:\Program Files\Bargain Buddy\bin2\ apuc.dll |
69 |
DLL |
| C:\Program Files\Bargain Buddy\bin2\ bargains.exe |
249 |
EXE |
Folder information Created after Installation:
| Folder Location |
| C:\Program Files\Bargain Buddy |
| C:\Program Files\Bargain Buddy\bin |
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Bargain Buddy |
|
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Bargains |
|
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Bargain Buddy |
|
