BargainBuddy or...?

S

Soren Lindgaard

Hi,

It seems like I have encountered a particularly nasty
instance of the hated BargainBuddy adware component. Every
reboot makes that annoying DOG icon pop up in just another
system tray. Seems like the spyware dropped some DLL files
into my Windows directory and keys into the registry that
trigger reinstallation even if I manage to delete it.
Microsoft Anti-spyware is uncapable of handling the
spyware. It could be that the reinstallation components
are difficult to track down...? I might succeed in
banishing the main components for my current session, but
as soon as I reboot, the spyware reinstalls.

I managed to get rid of the nasty thing from the
C:\WINDOWS\TEMP\VSC9F6.ECE, but after a reboot that little
creature showed up in a new folder with a different
name;C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\AHAF67.EXE.


Path: C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\AHAF67.EXE
Name: AHAF67.EXE
EXE Name:
EXE InternalName:
EXE LegalCopyright:
EXE Desc:
EXE Author:
OS: Windows XP
Windows:
Comments:
 
P

plun

-----Original Message-----
Hi,

It seems like I have encountered a particularly nasty
instance of the hated BargainBuddy adware component.

Hi

- Send a spywarereport about this to MS, menu tools.

- Restart in safe mode and try again. (press F8 during
reboot) Before you scan, choose deepscan, do step 1 and
2 in below URL.

- Maybe you also needs other tools/methods to overcome
this. Follow this.

http://aumha.org/a/quickfix.php
 
D

Danny Kile

Soren said:
Hi,

It seems like I have encountered a particularly nasty
instance of the hated BargainBuddy adware component. Every
reboot makes that annoying DOG icon pop up in just another
system tray. Seems like the spyware dropped some DLL files
into my Windows directory and keys into the registry that
trigger reinstallation even if I manage to delete it.
Microsoft Anti-spyware is uncapable of handling the
spyware. It could be that the reinstallation components
are difficult to track down...? I might succeed in
banishing the main components for my current session, but
as soon as I reboot, the spyware reinstalls.

I managed to get rid of the nasty thing from the
C:\WINDOWS\TEMP\VSC9F6.ECE, but after a reboot that little
creature showed up in a new folder with a different
name;C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\AHAF67.EXE.


Path: C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\AHAF67.EXE
Name: AHAF67.EXE
EXE Name:
EXE InternalName:
EXE LegalCopyright:
EXE Desc:
EXE Author:
OS: Windows XP
Windows:
Comments:



Try this site:

http://www.pchell.com/support/bargainbuddy.shtml

Danny
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top