Buenosearch

Buenosearch

Known Adware

by Pay-by-Ads Ltd

What is Buenosearch?

Buenosearch is software application developed by Pay-by-Ads Ltd. It is most commonly found on computers running Windows 7 with nearly 71.82% of installations running this operating system. Buenosearch's installer is typically 1.00 MB in size and installs around 2 files.

Buenosearch is most popular in the United States with 16.01% of installations residing in this country.

Buenosearch adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

About Buenosearch?

Buenosearch is a web browser application that displays banner ads and contextual link ads injected into web pages. The ads are presented by the web browser plugin and can appear on any website, regardless of affiliation with the publisher. Users may encounter up to 10 intext ads and/or 4 banner ads and/or a transitional ad on web pages. This application is typically bundled with 3rd-party download managers that use deceptive advertising techniques to install the software. Furthermore, the program can modify browser settings, potentially compromising security settings, changing the home page, and altering the search provider (web browser hijacking). Moreover, the extension reports user behavior on the internet, tracking visited URLs and domains, as well as the ads displayed and clicked on. Buenosearch is often bundled with other potentially unwanted programs through 3rd party download managers. It's important to note that adware can create a disruptive browsing experience and compromise user privacy.

Multiple virus scanners have detected malware in Buenosearch.

buenosearch.exe (MD5: fe1bb2a4132a20d353a14cb7a3c648d9) has been flagged by 8 scanners:
Scanner Software Result
AVG Paybyads
AVware Trojan.Win32.Generic!BT
ByteHero BDV Virus.Win32.Heur.n
ESET-NOD32 a variant of Win32/Toolbar.Montiera.K
Malwarebytes PUP.Optional.PayByAds.A
McAfee Artemis!FE1BB2A4132A
McAfee-GW-Edition Artemis!FE1BB2A4132A
VIPRE Antivirus Trojan.Win32.Generic!BT

Software Behaviors

Scheduled tasks:
  • buenosearch.exe is scheduled as a task named 'Buenosearch' (Next runs on 25/06/2014 at 2:10 PM).

Startup Entries

Registry entries:
  • buenosearch.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'buenosearch' and executes as C:\users\user\appdata\Local\buenosearch\buenosearch\1.3.8.2\buenosearch.exe.

Software Details

URL:
Support:
Installation path:
C:\users\user\appdata\local\buenosearch\buenosearch\1.3.8.2
Uninstaller:
"C:\users\user\appdata\Local\buenosearch\buenosearch\1.3.8.2\buenosearch.exe" /uninstl
Size:
1.00 MB
Language:
English

Buenosearch Executable Details

Primary executable:
buenosearch.exe
Name:
Buenosearch
Path:
C:\users\user\appdata\local\buenosearch\buenosearch\1.3.8.2\buenosearch.exe
MD5:
fe1bb2a4132a20d353a14cb7a3c648d9
SHA-1:
SHA-256:
Files installed by Buenosearch
File Type Filename MD5
EXE
59271c345dbdccca05e37abbe19d58e0
EXE
fe1bb2a4132a20d353a14cb7a3c648d9