McAfee > Theat Center > Virus Detail Page

Overview

This is a Potentially Unwanted Program (PUP) detection. It is not a virus or trojan. PUPs are any piece of software which a reasonably security-or privacy-minded computer user may want to be informed of.

Aliases

• Adware/BlazeFind (Panda)

Characteristics

This is not a virus or trojan. This program installs itself as a Browser Helper Object and redirects search queries to blazefind.com.

Installation

Upon execution, the application installs itself into the %Windir% directory as 5_0_1browserhelper5.dll .

(Where %Windir% is the Windows directory, for example C:\WINDOWS)

For example:

C:\Winnt\5_0_1browserhelper5.dll   (218,182 bytes)

The following Registry key is added to execute the DLL :

HKEY_CLASSES_ROOT\CLSID\{FBED6A02-71FB-11D8-86B0-0002441A9695}\InprocServer32

Two other files are dropped into the %Windir% folder:

• UnstSA5.exe - 416,979
• Key5.txt - 236,715 bytes

Users who would like to check for the presence of potentially unwanted programs on their system should run the command line scanner with the /PROGRAM switch. Please note that VirusScan 7, and higher, has an option that enables users to detect this kind of program automatically (see below).

The 4380 DAT files incorrectly flag the uninstaller for this application as 'trojan or variant AdClicker'. This will be fixed in the 4381 DAT release.

Symptoms

N/A This is not a virus or trojan

Method of Infection

N/A This is not a virus or trojan

Removal

Instructions on Enabling/Disabling Detection and Removal of Potentially Unwanted Programs

Variants

Variants

N/A

All Information

Overview -

This is a Potentially Unwanted Program (PUP) detection. It is not a virus or trojan. PUPs are any piece of software which a reasonably security-or privacy-minded computer user may want to be informed of.

Aliases

• Adware/BlazeFind (Panda)

Characteristics

Characteristics -

This is not a virus or trojan. This program installs itself as a Browser Helper Object and redirects search queries to blazefind.com.

Installation

Upon execution, the application installs itself into the %Windir% directory as 5_0_1browserhelper5.dll .

(Where %Windir% is the Windows directory, for example C:\WINDOWS)

For example:

C:\Winnt\5_0_1browserhelper5.dll   (218,182 bytes)

The following Registry key is added to execute the DLL :

HKEY_CLASSES_ROOT\CLSID\{FBED6A02-71FB-11D8-86B0-0002441A9695}\InprocServer32

Two other files are dropped into the %Windir% folder:

• UnstSA5.exe - 416,979
• Key5.txt - 236,715 bytes

Users who would like to check for the presence of potentially unwanted programs on their system should run the command line scanner with the /PROGRAM switch. Please note that VirusScan 7, and higher, has an option that enables users to detect this kind of program automatically (see below).

The 4380 DAT files incorrectly flag the uninstaller for this application as 'trojan or variant AdClicker'. This will be fixed in the 4381 DAT release.

Symptoms

Symptoms -

N/A This is not a virus or trojan

Method of Infection

Method of Infection -

N/A This is not a virus or trojan

Removal -

Removal -

Instructions on Enabling/Disabling Detection and Removal of Potentially Unwanted Programs

Variants

Variants -

N/A