Home > Support > Global Security Advisor 

Spyware Detail

Begin2Search

Date Published:
Monday, August 16, 2004

Threat Assessment

Overall Risk: Very Low
Privacy: Very Low
Productivity: Very Low
System Integrity:

Description


Alias

Win32/QHosts.AntiAdware!Trojan[Computer Associates]
Win32.Qhosts.G[Computer Associates]
Trj/Qhost.U[Panda]
Adware-abetterintrnt.dr [McAfee]
Beginto.F.dropper.dropper [NORMAN]
Adware.BetterInternet [Symantec]

Category

Adware:  Software that displays pop-up/pop-under advertisements when the primary user interface is not visible, or which do not appear to be associated with the product.

Browser Helper Object:  (BHO). A component that Internet Explorer will load whenever it starts, shares IE's memory context, can perform any action on the available windows and modules. A BHO can detect events, create windows to display additional information on a viewed page, monitor messages and actions. Microsoft calls it "a spy we send to infiltrate the browser's land." BHOs are not stopped by personal firewalls, because they are seen by the firewall as your browser itself. Some exploits of this technology search all pages you view in IE and replace banner advertisements with other ads. Some monitor and report on your actions. Some change your home page.

Toolbar:  A group of buttons which perform common tasks. A toolbar for Internet Explorer is nomally located below the menu bar at the top of the form. Toolbars may be created by Browser Helper Objects.

Trojan:  Any program with a hidden intent. Trojans are one of the leading causes of breaking into machines. If you pull down a program from a chat room, new group, or even from unsolicited e-mail, then the program is likely trojaned with some subversive purpose. The word Trojan can be used as a verb: To trojan a program is to add subversive functionality to an existing program. For example, a trojaned login program might be programmed to accept a certain password for any user's account that the hacker can use to log back into the system at any time. Rootkits often contain a suite of such trojaned programs.



Reasons For Retention

Based on eTrust PestPatrolĀ® Spyware Scorecard v2.0, Begin2Search violates the following criteria: Installs or updates without user permission or knowledge at time of installation. Changes browser settings, for example the default search provider, home or error page(s) etc., without user permission at time of change. Silently connects to an unintended location to transmit personal information. Displays popup/popunder ads that are displayed when main product is not running or do not appear to be connected with the product.

Immediate Protection Info

 
DAT Release Product DAT Version
OriginaleTrust PestPatrol v5
eTrust PestPatrol v4
CA Antispyware v9
eTrust PestPatrol v8
CA Antispyware v9
08 11 2004
08 11 2004
08 11 2004
08 11 2004
02 17 2009
LatesteTrust PestPatrol v5
eTrust PestPatrol v4
eTrust PestPatrol v8
CA Antispyware v9
07 09 2009
01 11 2007
07 09 2009
11 09 2009
 


View Full Details

CA Global Security Advisor

Current threat condition: Low
Low
Find Threats
Viruses Spyware
Vulnerabilities All
 
 
Page Tools