Home Malware Programs AOL Parasites BuddyLinks

BuddyLinks

Posted: March 28, 2006

BuddyLinks is a relatively harmless AOL spyware that sends advertising messages to all the contacts of AOL Instant Messenger. Such messages include a link to a web site distributing BuddyLinks and other unsolicited applications. The threat doesn't carry any destructive payload. It must be manually downloaded and installed. BuddyLinks runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 blaim.dll
    2 bldll.exe
    3 blengine.dll
    4 blengine.exe
    5 blpref.exe
    6 channelup.exe
    7 shell.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunPSDToolsChannel
Loading...