Threat Description



Aliases: bho, Adware.bho., Adware.win32.bho, Gen:variant.adware.bho.[variant], Adware.bho.bprotector.[variant]
Category: Spyware
Type: Adware
Platform: W32


This program delivers advertising content to the user in a manner or context that may be unexpected and/or unwanted. It is usually annoying but harmless, unless it is combined with spyware or trackware.


Manual Removal

If the user is aware of the presence, functionality and potential security issues related to a BHO and wishes to continue using it, they may elect to whitelist the desired program. To do so, see:

If the user elects to remove the BHO, it can be manually uninstalled from the web browser. Please refer to the relevant product documentation for the specific version of your web browser for further instructions.

Technical Details

This is the family detection for Browser Helper Objects (BHOs) that display advertisements. These BHOs may be distributed bundled together with other software. Upon installation, this particular family of BHOs will connect to predetermined Internet servers, in order to retrieve advertising material to display.


BHOs are, in general, useful utility programs that add functionality to the Microsoft Internet Explorer (IE) browser, and run automatically each time IE is launched.

For more information about BHOs, see Terminology: Browser Helper Object (BHO).

Registry Modifications

Creates these keys:

  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\


Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Submit a sample

Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)

Learn More

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More