BuenoSearch Toolbar

By CagedTech in Potentially Unwanted Programs

Threat Scorecard

Ranking:	1,848
Threat Level:	50 % (Medium)
Infected Computers:	52,396

First Seen:	October 22, 2013
Last Seen:	March 20, 2024
OS(es) Affected:	Windows

BuenoSearch Toolbar is a potentially bad toolbar that may integrate itself into Web browsers such as Internet Explorer, Google Chrome and Mozilla Firefox. BuenoSearch Toolbar may claim to improve the PC user's Internet surfing quality. BuenoSearch Toolbar may spread and install itself on the Web browser as an optional application through bundled free software that PC users can download from suspicious download websites. Upon installation, BuenoSearch Toolbar may modify the default homepage and search engine or a new tab window with an untrustworthy website. BuenoSearch Toolbar may also track the computer user's Internet browsing activity by recording browsing information and then transfer and use it for the purpose of delivering targeted ads. BuenoSearch Toolbar may insert a plug-in, add-on or browser extension, which may be used to show annoying pop-up advertisements and notifications on the PC. BuenoSearch Toolbar may strive to benefit from clicks on advertisements and notifications.

Table of Contents

SpyHunter Detects & Remove BuenoSearch Toolbar

File System Details

BuenoSearch Toolbar may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	buenosearch.exe	fe1bb2a4132a20d353a14cb7a3c648d9	4,287
Name: buenosearch.exe MD5: fe1bb2a4132a20d353a14cb7a3c648d9 Size: 543.66 KB (543664 bytes) Detections: 4,287 Type: Executable File Path: C:\Users\<username>\AppData\Local\buenosearch\buenosearch\1.3.8.2\buenosearch.exe Group: Malware file Last Updated: January 17, 2023
2.	buenosearch.exe	a08c26097dce6ac8fc86c84aa3fd24e3	1,110
Name: buenosearch.exe MD5: a08c26097dce6ac8fc86c84aa3fd24e3 Size: 514.4 KB (514408 bytes) Detections: 1,110 Type: Executable File Path: C:\Users\<username>\AppData\Local\buenosearch\buenosearch\1.3.12.9\buenosearch.exe Group: Malware file Last Updated: April 27, 2022
3.	buenosetup.exe	9b7445616c1e9912b64c0d8a8cd9c313	837
Name: buenosetup.exe MD5: 9b7445616c1e9912b64c0d8a8cd9c313 Size: 398.69 KB (398696 bytes) Detections: 837 Type: Executable File Path: C:\Users\<username>\AppData\Local\buenosearch\buenosearch\1.3.12.9\buenosetup.exe Group: Malware file Last Updated: September 15, 2022
4.	BuenoSearch.ico	a16077ad74d01d7ca79e291d1bb4b5c0	135
Name: BuenoSearch.ico MD5: a16077ad74d01d7ca79e291d1bb4b5c0 Size: 8.34 KB (8348 bytes) Detections: 135 Group: Malware file Last Updated: March 20, 2024
5.	buenosearch.exe	9032c1b79592d6dfeceb8b8b97dbed8a	98
Name: buenosearch.exe MD5: 9032c1b79592d6dfeceb8b8b97dbed8a Size: 436.07 KB (436072 bytes) Detections: 98 Type: Executable File Path: %LOCALAPPDATA%\buenosearch\buenosearch\1.3.12.2 Group: Malware file Last Updated: March 26, 2016
6.	buenosearch.exe	136826b7074ff132442d4b6930115dc8	79
Name: buenosearch.exe MD5: 136826b7074ff132442d4b6930115dc8 Size: 439.14 KB (439144 bytes) Detections: 79 Type: Executable File Path: %APPDATA%\buenosearch\buenosearch\1.3.12.4 Group: Malware file Last Updated: March 26, 2016
7.	buenosetup.exe	421250c5c3111206ef45daec3d3fc38f	55
Name: buenosetup.exe MD5: 421250c5c3111206ef45daec3d3fc38f Size: 392.7 KB (392704 bytes) Detections: 55 Type: Executable File Path: %LOCALAPPDATA%\buenosearch\buenosearch\1.3.12.9 Group: Malware file Last Updated: March 26, 2016
8.	buenosearch.exe	7a03fe17c708a63fc25701280a5d5ece	36
Name: buenosearch.exe MD5: 7a03fe17c708a63fc25701280a5d5ece Size: 508.41 KB (508416 bytes) Detections: 36 Type: Executable File Path: %LOCALAPPDATA%\buenosearch\buenosearch\1.3.12.9 Group: Malware file Last Updated: March 26, 2016
9.	buenosetup.exe	5c28a91eb05bec8710973066b42ef329	35
Name: buenosetup.exe MD5: 5c28a91eb05bec8710973066b42ef329 Size: 334.69 KB (334696 bytes) Detections: 35 Type: Executable File Path: C:\Users\<username>\AppData\Local\Temp\buenosetup.exe Group: Malware file Last Updated: September 23, 2022
10.	buenosetup.exe	ac114077bef75a768d002614cc8cc99a	31
Name: buenosetup.exe MD5: ac114077bef75a768d002614cc8cc99a Size: 334.18 KB (334184 bytes) Detections: 31 Type: Executable File Path: C:\Users\<username>\AppData\Local\buenosearch\buenosearch\1.3.12.2\buenosetup.exe Group: Malware file Last Updated: May 12, 2022
11.	buenosearch.dll	5176f89533ced0dd0918071079443c11	3
Name: buenosearch.dll MD5: 5176f89533ced0dd0918071079443c11 Size: 280.98 KB (280984 bytes) Detections: 3 Type: Dynamic link library Path: %PROGRAMFILES%\buenosearch LTD\buenosearch\1.8.28.7\bh Group: Malware file Last Updated: June 17, 2014
12.	buenosearch.exe	165dcb113637d58be0bf35f5a45530e0	3
Name: buenosearch.exe MD5: 165dcb113637d58be0bf35f5a45530e0 Size: 543.66 KB (543664 bytes) Detections: 3 Type: Executable File Path: %LOCALAPPDATA%\buenosearch\buenosearch\1.3.8.2 Group: Malware file Last Updated: March 26, 2016
13.	buenosearch.exe	08c5babcf60dcead08e01d175278cdf9	1
Name: buenosearch.exe MD5: 08c5babcf60dcead08e01d175278cdf9 Size: 550.31 KB (550316 bytes) Detections: 1 Type: Executable File Path: %LOCALAPPDATA%\buenosearch\buenosearch\1.3.8.2 Group: Malware file Last Updated: March 26, 2016
14.	buenosearch.exe	bc7dfc517436254d580aea27295f67d8	1
Name: buenosearch.exe MD5: bc7dfc517436254d580aea27295f67d8 Size: 543.66 KB (543664 bytes) Detections: 1 Type: Executable File Path: %LOCALAPPDATA%\buenosearch\buenosearch\1.3.8.2 Group: Malware file Last Updated: March 26, 2016
15.	buenosearch.exe	52a1703b62dc2aa09247dab503a78e17	1
Name: buenosearch.exe MD5: 52a1703b62dc2aa09247dab503a78e17 Size: 543.66 KB (543664 bytes) Detections: 1 Type: Executable File Path: %APPDATA%\buenosearch\buenosearch\1.3.8.2 Group: Malware file Last Updated: March 26, 2016
16.	buenosearch.exe	797c2943ced8a2edf38c9da850f7f318	1
Name: buenosearch.exe MD5: 797c2943ced8a2edf38c9da850f7f318 Size: 585.13 KB (585136 bytes) Detections: 1 Type: Executable File Path: %LOCALAPPDATA%\buenosearch\buenosearch\1.3.8.2 Group: Malware file Last Updated: March 26, 2016

Registry Details

BuenoSearch Toolbar may create the following registry entry or registry entries:

CLSID

{0BDDE35F-64F7-49C3-99B2-404E899C49F7}

{24236608-609C-42C5-B13C-A8A3EC921850}

{28B1A706-4B97-4EB1-8B32-125042685AD9}

{33575A26-D9CF-40C6-8A3E-116F17201C7F}

{37EB75F2-7392-4DBE-B5AD-147EC6D7BF5F}

{4BDFD19F-93D7-49CE-B554-5C215FDC0136}

{4CC15FBA-46A4-4CB5-BFAF-F2335365AE76}

{5B6E533F-F78F-4525-B316-312BAF1295D1}

{67FCE87F-F3EF-4A3C-87C2-8BD46E68807B}

{7307CF0F-7173-4FBF-8649-B149916DD322}

{80A5E38C-5F6B-485F-BD97-0B5BE991FAD5}

{828DC97A-2277-4E10-92A9-4907FA0922A9}

{8322EB6E-B594-41F6-A30B-CF3F800E1874}

{9544D727-A26F-4D57-AF38-4496088640EA}

{AC4C30BF-7D5F-4EAB-9C2A-454178F079AA}

{BAB04997-93AD-4C13-805A-0409199700BB}

{BC6F9C26-93EA-4C6D-A4A7-C1FA333B4BBE}

{E6772887-C1E1-405E-94BB-D8760A1CF8DF}

{E975527B-ABE7-40B3-B5C1-385016913E3B}

{EFA4B5B1-6C76-4B20-BCDB-D41A93E79053}

{EFC32678-546B-4367-8B25-B40BF45CC1A3}

{F1C81E40-2485-4DB6-8C9D-04BD596B281E}

File name without path

Buenosearch.lnk

http_www.buenosearch.com_0.localstorage

http_www.buenosearch.com_0.localstorage-journal

Regexp file mask

%WinDir%\System32\Tasks\Buenosearch

%WINDIR%\System32\Tasks\EPUpdater

HKEY..\..\..\..{RegistryKeys}

Software\buenosearch

Software\buenosearch LTD

SOFTWARE\Classes\buenosearch.buenosearchappCore

SOFTWARE\Classes\buenosearch.buenosearchappCore.1

SOFTWARE\Classes\buenosearch.buenosearchdskBnd

SOFTWARE\Classes\buenosearch.buenosearchdskBnd.1

SOFTWARE\Classes\buenosearch.buenosearchHlpr

SOFTWARE\Classes\buenosearch.buenosearchHlpr.1

SOFTWARE\Classes\esrv.buenosearchESrvc

SOFTWARE\Classes\esrv.buenosearchESrvc.1

Software\Microsoft\Internet Explorer\Approved Extensions\{828DC97A-2277-4E10-92A9-4907FA0922A9}

Software\Microsoft\Internet Explorer\Approved Extensions\{8322EB6E-B594-41F6-A30B-CF3F800E1874}

Software\Microsoft\Internet Explorer\Approved Extensions\{F1C81E40-2485-4DB6-8C9D-04BD596B281E}

Software\Microsoft\Internet Explorer\DOMStorage\buenosearch.com

Software\Microsoft\Internet Explorer\DOMStorage\www.buenosearch.com

SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{708D0DD7-FBC0-4437-B525-C098F450A62C}

Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\buenosearch.com

Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.buenosearch.com

Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\buenosearch.exe

SOFTWARE\Microsoft\Internet Explorer\Toolbar\{828DC97A-2277-4E10-92A9-4907FA0922A9}

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Buenosearch

SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{F1C81E40-2485-4DB6-8C9D-04BD596B281E}

Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{828DC97A-2277-4E10-92A9-4907FA0922A9}

Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F1C81E40-2485-4DB6-8C9D-04BD596B281E}

Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{828DC97A-2277-4E10-92A9-4907FA0922A9}

Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F1C81E40-2485-4DB6-8C9D-04BD596B281E}

SOFTWARE\Microsoft\Windows\CurrentVersion\Run\buenosearch

SOFTWARE\Wow6432Node\buenosearch

SOFTWARE\Wow6432Node\buenosearch LTD

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{708D0DD7-FBC0-4437-B525-C098F450A62C}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{828DC97A-2277-4E10-92A9-4907FA0922A9}

SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{F1C81E40-2485-4DB6-8C9D-04BD596B281E}

HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}

Bueno Chrome Toolbar

buenosearch

Directories

BuenoSearch Toolbar may create the following directory or directories:

%ALLUSERSPROFILE%\buenosearch

%AppData%\buenosearch

%AppData%\buenosearch LTD

%LOCALAPPDATA%\buenosearch

%PROGRAMFILES%\buenosearch LTD

%PROGRAMFILES(x86)%\buenosearch LTD

%ProgramFiles%\buenosearch

%ProgramFiles(x86)%\buenosearch

%TEMP%\mt_ffx\buenosearch

%TEMP%\mt_ffx\buenosearch LTD

%USERPROFILE%\AppData\LocalLow\buenosearch LTD

%userprofile%\appdata\locallow\buenosearch

URLs

BuenoSearch Toolbar may call the following URLs:

http://www.buenosearch.com/?q

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

BuenoSearch Toolbar

Threat Scorecard

EnigmaSoft Threat Scorecard

SpyHunter Detects & Remove BuenoSearch Toolbar

File System Details

Registry Details

Directories

URLs

Submit Comment

Related Posts

Buenosearch.com

Trending

SaveFrom.net

Videovor.com

Softcnapp

Most Viewed

Discord Shows Black Screen when Sharing Screen

How To Fix 'Printer Driver is Unavailable' Error

What is Msedge.exe?