Home > Support > Global Security Advisor 

Spyware Detail

BargainBuddy

Date Published:
Monday, August 16, 2004

Threat Assessment

Overall Risk: Very Low
Privacy: Very Low
Productivity: Very Low
System Integrity:

Description


Summary

BargainBuddy is a Browser Helper Object that watches the pages your browser requests and the terms you enter into a search engine web form. If a term matches a preset list of sites or keywords, BargainBuddy will display an ad. A process that is invoked at machine startup will check a remote server for updates to the software and ads that will be displayed.Bargain Buddy consists of an IE Browser Helper Object, and a process set to run at startup. The BHO monitors web pages requested and terms entered into forms. If there is a match with a preset list of sites and keywords, an advertisement may be shown. The process can contact its maker's server to download updates to the list of adverts and to the software itself.

Alias

Acup (internal name)
Bargains (process name)
eXact.CashBack
Ikena (the server it connects to)
adp.exe (after the installer included with some versions)
Spyware/BargainBuddy[Panda]
Adware/ExactSearch[Panda]
Bargain Buddy
Bullseye Network

Vendor Description

"The eXact Advertising Network has been in existence since 2000 as the advertising sales division of Net2Phone Inc. In May 2002, the management team that ran the Net2Phone Ad Network completed a buyout of the division. What was born was a new company with years of experience & success as its foundation." [ source]

'Bargain Buddy is installed on your computer and delivers relevant contextual information to you in the form of advertisements based on URLs and/or search terms you enter when navigating the Internet.' --- From the End User License Agreement.

Category

Adware:  Software that displays pop-up/pop-under advertisements when the primary user interface is not visible, or which do not appear to be associated with the product.

Browser Helper Object:  (BHO). A component that Internet Explorer will load whenever it starts, shares IE's memory context, can perform any action on the available windows and modules. A BHO can detect events, create windows to display additional information on a viewed page, monitor messages and actions. Microsoft calls it "a spy we send to infiltrate the browser's land." BHOs are not stopped by personal firewalls, because they are seen by the firewall as your browser itself. Some exploits of this technology search all pages you view in IE and replace banner advertisements with other ads. Some monitor and report on your actions. Some change your home page.

Search Hijacker:  Any software that resets your browser's settings to point to other sites when you perform a search. Hijacks may reroute your info and address requests through an unseen site, capturing that info. In such hijacks, your browser may behave normally, but be slower. Search results when such a hijacker is running will sometimes differ from non-hijacked results.

Toolbar:  A group of buttons which perform common tasks. A toolbar for Internet Explorer is nomally located below the menu bar at the top of the form. Toolbars may be created by Browser Helper Objects.



Variants

BargainBuddy/adp Stores its BHO in \program files\adp DLL is apuc.dll
BarginBuddy/Apuc Stores its BHO in \program files\Bargain Buddy DLL is apuc.dll
BargainBuddy/CC_Versn Stores its updater in \program files\Bargain Buddy DLL is cc_versn.dll
·

Reasons For Retention

Changes browser settings other than homepage, without user permission.

Immediate Protection Info

 
DAT Release Product DAT Version
OriginaleTrust PestPatrol v5
eTrust PestPatrol v4
CA Antispyware v9
eTrust PestPatrol v8
CA Antispyware v9
08 11 2004
08 11 2004
08 11 2004
08 11 2004
02 17 2009
LatesteTrust PestPatrol v5
eTrust PestPatrol v4
eTrust PestPatrol v8
CA Antispyware v9
07 09 2009
01 11 2007
07 09 2009
11 09 2009
 


View Full Details

CA Global Security Advisor

Current threat condition: Low
Low
Find Threats
Viruses Spyware
Vulnerabilities All
 
 
Page Tools