TBPS.exe

[krimo]

Hi,

I have recently installed MAS and ran a scan. MAS detected
a couple of spywares. I know that TBPS.exe is considered
by MAS as a threat, but I have been hesitant to get rid of
it since it is part of a startup value in the registry.
Thru MAS I have blocked this extension so it does not run
during startup. But because I have blocked TBPS.exe from
running, when turning my computer on I receive a message
telling me that TPBS.exe cannot be found.

What I need to know is Should I still remove this threat
and not pay attention to the message when starting the
computer? will the removal of this threat affect the
system? Or is there any other alternative?

For the time being the threat is blocked by MAS


The path where this threat was found is as below:

A startup value (TBPS:C:\PROGRA~1\Toolbar\TBPS.exe /boot)
has been denied permission to be added to your startup
registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersio
n\RunOnce. This program is in the user's blocked startup
file list.

Thank you

 

[Bill Sanderson]

Reading here:

http://securityresponse.symantec.com/avcenter/venc/data/adware.clickdloader.b.html

about this one, it looks like it spends most of its time getting rid of the
competition--it may have done you a favor.

I'd go right ahead and permanently remove it.

If, on the next startup, you get a message about a missing file, I'd
recommend doing another scan with Microsoft Antispyware--that takes care of
a similar message about a different product.