Malware or suspicious BHO?

Viruses and worms
1

See: hxxps://www.virustotal.com/url/aa51aad6ab8b1c25bbd624fd682872f2ab75ca33adb6da91e0b547e9a3b542e4/analysis/
Flagged as unknown_file_$_OUTDIR/waitBHOEnable.exe
Given clean here: hxxp://vscan.urlvoid.com/analysis/07d4557acec8522b6a19312088a3ebeb/d2FqYW0tYmxpbngtZXhl/
Consider this also: hxxp://www.threatexpert.com/files/blinkx.exe.html
Also see: hxxp://anubis.iseclab.org/?action=result&task_id=1ffc0b85ac01c6d54213e2482d8d62904&call=first
And found to be suspicious here: hxxp://camas.comodo.com/cgi-bin/submit?file=1db0f20faf08d3a88122bed0fb9641c27a56934a4560a83c21f9ba9aa0594a22
-wajam_121.crx packed by BINARY PACKAGE

-hxxp://download.wajam.com/download/wajam_blinx.exe/wajam_121.crx - archive BINARYRES
Also given suspicious here: hxxp://urlquery.net/report.php?id=20586

polonus

chocholo: removed active links

2

VirusTotal - wajam_blinx.exe - 0/43
https://www.virustotal.com/file/b5bf144bb5e4a5e262c4d1a9a8154f3e79ba036a7fc89e8428fd98f06f8e2202/analysis/1328981149/

First seen by VirusTotal 2012-02-10 23:18:33 UTC ( 18 timer, 8 minutter ago ) so… ???

ThreatExpert
http://www.threatexpert.com/report.aspx?md5=07d4557acec8522b6a19312088a3ebeb

3

Hi Pondus,

There must be a reason for this: hxxp://www.prevx.com/filenames/X3454108785344069036-X1/BLINX.EXE.html
It can be a website hijacker in a promotion tool for various scam products,

polonus

4

Danien,
You’ll find your answer here:
http://forum.avast.com/index.php?topic=93128.msg741603#msg741603

5

Hi bob3160,

Awfully good we have that,

pol