1. Skip to navigation
  2. Skip to content
  3. Skip to secondary-content

Where You Are

  1. Home
  2. Security
  3. Security Lab
  4. Latest Threats
  5. Spyware Descriptions
  6. Adware:W32/Bestofer

Adware:W32/Bestofer

Name : Adware:W32/Bestofer
Detection Names : Adware.Bestofer
Category:Spyware
Type:Adware
Platform:W32

Summary

This program delivers advertising content to the user. It is usually annoying but harmless, unless it is combined with spyware or trackware.

Additional Details

Adware:W32/Bestofer is one of the progams associated with "The Best Offer Networks" online advertising. When active, Bestofer contacts one of the "Best Offer Networks" servers to retrieve advertising content to display. 

Here's a sample screenshot of the adware information when it is installed:



Bestofer is distributed bundled together with several freeware applications.

Another adware that is related to this program is Adware:W32/BetterInternet.


Installation

During installation, the following files are created:

  • %windir%\tboninst.cfg
  • %windir%\TBONUnst.htm
  • %ProgramFiles%\tboninst.cfg
  • %ProgramFiles%\tbon.exe
  • %ProgramFiles%\Uninstall.exe

Where %WINDIR% refers to the Windows folder and the default installationpath is "C:\windows" (Windows 95/98/Me/XP) or "C:\Winnt" (Windows NT/2000). %ProgramFiles% refers to the program files directory and the default installation path is "c:\Program Files".


Registry

During installation, the following registry keys are created:

  • HKEY_CURRENT_USER\Software\tbonac
  • HKEY_CURRENT_USER\Software\Classes\tbonac
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uinstall\TBON
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    tbon = [adware file]