McAfee > Theat Center > PUP Detail Page

Characteristics

McAfee(R) AVERT™ recognizes that this program may have legitimate uses in contexts where an authorized administrator has knowingly installed this application.  If you agreed to a license agreement for this, or another bundled application, you may have legal obligations with regard to removing this software, or using the host application without this software.

Please contact the software vendor for further information.

See http://vil.nai.com/vil/DATReadme.asp for a list of Program detections added to the DATs.

See http://vil.nai.com/vil/pups/configuration.htm for information about how to enable, disable and exclude detection of legitimately installed programs.

Summary:

This application changes the Microsoft search assistant, redirects mistyped urls and inserts a toolbar in Internet Explorer.

Installation:

File Name : searchnugget.exe
MD5         : 3747b4859e614c17cbe5de3a6ffef7d5

Filenames and locations may vary from version to version.
EULA is displayed as part of the installation.

Upon execution of this application the following files are dropped in these folders.

C:\Program Files\SearchNugget Toolbar 1.0\searchToolbar.exe.
C:\Windows\Downloaded Program Files\sbar.dll

sbar.dll is installed as a Browser Helper Object and loads the SearchNugget toolbar in Internet Explorer.

The following links are created in the Internet Explorer favorites menu:

Acez.com
Searchnugget.com

The Microsoft search assistant is changed to "searchnugget.com".
Mistyped urls are redirected to "searchnugget.com".

The following registry entries are added

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E7BD74F-2B8D-469E-C0FF-FD7FF4D5FA7F}] @="SBARMenu Button"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]"{4E7BD74F-2B8D-469E-C0FF-FD7FF4D5FA7D}"=hex:02

Removal

Aliases

Aliases

N/A