Home Malware Programs Browser Hijackers Bucksbee

Bucksbee

Posted: March 18, 2013

Threat Metric

Threat Level: 5/10
Infected PCs: 17,828
First Seen: March 18, 2013
Last Seen: January 9, 2023
OS(es) Affected: Windows

Bucksbee is a browser hijacker, which is advertised via other free software downloads, and when installed on the targeted PC, it adds a toolbar, changes the browser homepage and default search engine to srp.freecause.com. Bucksbee Search will display pop-up advertisements and sponsored links in hijacked search results, and may gather search terms from victimized search queries. Bucksbee Search invades the infected computer after a PC user has installed another free application or add-on that had bundled into their installer Bucksbee. For example, when a computer user installs vPlay, he/she will also agrees to change the default browser home page and default search engine to srp.freecause.com, and installs the Bucksbee Toolbar. However, when a computer user uninstall vPlay from the computer, the compromised web browser's default settings will not be restored.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%SYSTEMDRIVE%\Users\<username>\AppData\Roaming\FCTB000100815\Toolbar\Helper.dll File name: Helper.dll
Size: 378.88 KB (378880 bytes)
MD5: 0f8228b4c82112d0838aee04e0917489
Detection count: 9,181
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SYSTEMDRIVE%\Users\<username>\AppData\Roaming\FCTB000100815\Toolbar\Helper.dll
Group: Malware file
Last Updated: January 9, 2023
C:\Program Files (x86)\Bucksbee Loyalty Plugin - W3i\Helper.dll File name: Helper.dll
Size: 361.98 KB (361984 bytes)
MD5: 447bfb7e41fe9df766a5f711a0fa3819
Detection count: 5,043
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Program Files (x86)\Bucksbee Loyalty Plugin - W3i\Helper.dll
Group: Malware file
Last Updated: March 24, 2021
%SYSTEMDRIVE%\Users\<username>\AppData\LocalLow\FCTB000100493\Toolbar\Toolbar.dll File name: Toolbar.dll
Size: 1.61 MB (1610240 bytes)
MD5: 37ce4c2433f29278ec3395d28ce7b61c
Detection count: 3,520
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SYSTEMDRIVE%\Users\<username>\AppData\LocalLow\FCTB000100493\Toolbar\Toolbar.dll
Group: Malware file
Last Updated: December 2, 2020
Toolbar_production_100231.exe File name: Toolbar_production_100231.exe
Size: 314.48 KB (314488 bytes)
MD5: b3b7238e1c67ea77815e33d4a6741914
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: March 19, 2013
Toolbar_production_100229.crxbho.exe File name: Toolbar_production_100229.crxbho.exe
Size: 634.23 KB (634232 bytes)
MD5: 341cd852e0f3a8be4ca271a8e159083a
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: March 19, 2013
Loading...