RE: BargainBuddy

From: Malke (malke_at_nospoonnotreally.com)
Date: 03/04/05 

Date: Thu, 03 Mar 2005 18:49:48 -0800

mickeyd wrote:

> Adaware se latest version catches it and says it deleted it, but on
> reboot it's baaack, Spybot detects it and say it cannot delete it, and
> asks to run on startup, I let it and it still says it cannot delete
> the registry keys, if I let the system stay online for a while it will
> then also infect the machine
> with flashenhancer.BHO also. I assume the longer it is on and the
> more
> surfing done it will continue to try to install more crap. MS
> antispyware routinely catches things on bootup and says it stops the
> registry changes but I cannot get rid of the urlcatcher entries in the
> registry.
>

BargainBuddy is a tricky one to remove. Use HijackThis and post your log
in one of the forums below (not here, please). I highly recommend the
forum at AumHa - the regulars are expert and friendly. Please read the
posting FAQ first.

http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Jim
Eshelman
http://aumha.net - forums
http://spywarewarrior.com/viewforum.php?f=5 - Spyware Warrior HijackThis
forum
http://www.wilderssecurity.com/
http://forums.tomcoyote.org/

Malke 

-- 
MS MVP - Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"

Relevant Pages

  • Re: Good or Bad web site?
    ... I am not an MSVP but I have seen a few Hijack This forums this past year. ... There is also a link to download the HijackThis ... application startup listing utility on this site called "StartupList". ...
    (microsoft.public.windowsxp.security_admin)
  • Re: IE6 Problems
    ... by A NOVICE WHO POSTS THE LOGS TO THE HIJACKTHIS FORUMS FOR OTHERS TO SORT ... Before HijackThis we were doing it just fine; HJT made it easier for ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: IE6 - MSHTML.DLL browser keeps crashing!
    ... It is one of the most valuable troubleshooting tools and it can often point to still existing residual files that are left behind or broken by the malware or even sometimes removal tools. ... If you have already posted a HijackThis log, please post the link here in this thread to the forum where you posted it so that we can take a look and see what is happening and follow along with the progress. ... If you have not yet done so, please install and run the HiJackThis in Safe Mode with Hidden files enabled, create a log and post it to one of the following forums. ... Then,>> after the automatic updates updated the system, the problem came>> back. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: IE7 Uninstall & regedit
    ... That's what those specialty forums are for. ... Looked for the WORM and could not find it in safe mode. ... Apart from the cmd and other shortcuts not working Symantec will not ... Forums to Interpret HijackThis Logs: ...
    (microsoft.public.windowsxp.general)
  • Re: Ok, so Im a lazy moron - Explorer crashes at startup
    ... >> Reboot into Windows. ... >> run HijackThis (no other windows open) and save the log. ... >> AumHa Forums ...
    (microsoft.public.windowsxp.general)
Loading