$_SERVER["REMOTE_ADDR"] = preg_replace('/.*,\s*/','', $_SERVER["HTTP_X_FORWARDED_FOR"]);
Notice: Undefined index: related in /data/www/spywareguide/product_show.php on line 49
Notice: Undefined variable: incprefix in /data/www/spywareguide/product_show.php on line 241
Program that delivers advertisements on your PC.
Note that many websites have their own advertising, unrelated to adware.
BrowserAid is a manufacturer of various Internet Explorer toolbars, most of which seem to be installed sneakily.
BrowserAid/ABCSearch offers a 'Power Search' feature when right-clicking a selection.
BrowserAid/CashToolbar, BrowserAid/LetsSearch and BrowserAid/QuickLaunch are minor variations on an adware theme.
The script at this site cannot tell them apart and detects them only as 'BrowserAid'. The toolbar opens untargeted pop-up adverts periodically when IE is open. LetsSearch hijacks home page and search settings to point to searchmadesafe.com; QuickLaunch points at quicklaunch.com.
BrowserAid/BrowserPal offers pop-up blocking features. It is a later version of BrowserAid/pStopper, a pop-up blocker which is not known to have been stealth-installed and is not targeted by the script at this site.
BrowserAid/Rundll16 is a smaller parasite that only opens pop-ups; it does not include a toolbar component. It hides in the Windows folder under the name 'rundll16', which is not a system file, but is a filename also used by other malware (eg. SubSeven trojan, Roron worm, ZMorph virus).
The software can download and execute arbitrary code from its controlling server, as an update feature.
The software installs into the 'Downloaded Program Files' folder, and puts its settings into a 'CashToolbar' folder in 'Program Files'. Before you can delete the files you must deregister the toolbar. Open a DOS command prompt window (Start->Programs->Accessories) and enter:
regsvr32 /u "..\Downloaded Program Files\CashToolbarIE.dll"
Then open the registry and find the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run. Delete the entry pointing to CashToolbar.exe. Restart the machine and you should be able to delete both 'Program Files\CashToolbar' and the Downloaded Program Files:
del "%WinDir%\Downloaded Program Files\CashToolbarIE.dll"
del "%WinDir%\Downloaded Program Files\CashToolbar.exe"
del "%WinDir%\Downloaded Program Files\CashToolbarConfig.ini"
del "%WinDir%\Downloaded Program Files\BrowserAidBarWnd.dll"