Adware.Buddylinks

Updated: February 13, 2007 11:36:40 AM

Type: Adware

Publisher: PSD Tools LLC

Risk Impact: High

File Names: shell.exe; blaim.dll; blengine.exe; blengine.dll; game_dll.exe; game_install.exe

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

When Adware.Buddylinks is executed, it performs the following actions:

Creates the folder, %ProgramFiles%\buddylinks.net\

and creates the following files in this folder:
- Blpref.exe
- Uninst.exe
  
  Note: %ProgramFiles% is a variable that refers to the path to the program files folder. By default, this is C:\Program Files.
Creates the folder, %ProgramFiles%\Buddylinks.net\Games\Saddam Game\

and creates the following files in that folder:
- Disabled.jpg
- Down.jpg
- Mask.bmp
- Normal.jpg
- Over.jpg
- Saddam.swf
- Shell.exe (detected as Adware.Buddylinks)
- Skin.ini
- Uninst.exe
May create the folder %ProgramFiles%\Common Files\PSD Tools\

and create the following files into that folder:
- ChannelUp.exe
- Blaim.dll (detected as Adware.Buddylinks)
- Blengine.dll (detected as Adware.Buddylinks)
- Blengine.exe (detected as Adware.Buddylinks)
- Bldll.exe (detected as Adware.Buddylinks)
Adds the value:

"PSD Tools Channel"="%ProgramFiles%\Common Files\PSD Tools\ChannelUp.exe"

to the registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Runso that the adware runs when you start Windows.
Sends instant messages to members of your AOL Instant Messenger buddy list, if such a list exists. It may also send instant messages to members of buddy lists belonging to other instant messaging programs.
Adds the entry Programs/buddylinks.net to your Start menu.

Summary

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}