1
   

Popup Warning about Spyware and Adware

 
 
TulsaTV
 
  1  
Reply Sun 2 May, 2004 08:59 pm
New info: I downloaded the new build of AdAware 6, 6.181. I ran a scan with it, and turned up something called "BookedSpace". This parasite had the following files installed under C:\Windows: bsx32.ini, bsx5.dll and bs3.dll. Also something called Virtumundo that had reference to one of these files. Hmmmm; all I had turned up with AdAware previously had been DataMiner cookies.

I quarantined everything related to this bs stuff. AdAware cut the legs out from under this browser hijacker, but when rebooting, got 3 messages about trying unsuccessfuly to load some of the "bs" files.

I searched the Registry and found remaining a couple of Registry keys that referenced a couple of the bs files. A reboot turned up no error messages.

I bet this got it, but I'll report back if I have any more occurances.

Who or what is "BookedSpace"? Now that I found it, here is a link about it: http://www.doxdesk.com/parasite/BookedSpace.html

A third-party product installs it as this Symantec link explains: http://sarc.com/avcenter/venc/data/adware.bookedspace.html

I believe I got it via installation of this freeware: MThree MP3 to WAV converter (see http://www.pestpatrol.com/PestInfo/b/bookedspace.asp).

Hope this is helpful!
0 Replies
 
merstar
 
  1  
Reply Thu 6 May, 2004 11:01 pm
THANKS!!!
TulsaTV,
You did it! You figured out the solution! I downloaded the new build of AdAware 6, 6.181 as you suggested, then did a scan. I haven't seen that annoying popup in two days. Thanks sooooooo much!
0 Replies
 
merstar
 
  1  
Reply Fri 7 May, 2004 10:04 pm
POPUP is back
UPDATE: Well, unfortunately, after 3 days of no popup, the damn thing appeared again a few seconds ago. This time it's in a black window instead of yellow. I am sooooooo frustrated!
0 Replies
 
timberlandko
 
  1  
Reply Sat 8 May, 2004 05:42 pm
merstar, have you run CWShredder while in safemode?
0 Replies
 
merstar
 
  1  
Reply Sun 9 May, 2004 07:18 pm
timberlandko wrote:
merstar, have you run CWShredder while in safemode?


timberlandko,
I don't have CWShredder, and have been hesitant about downloading it, since I heard you have to be fairly computer savvy to run it, which I'm not. Not sure if this is so or not. I also don't know how to run anything in safemode. Can you give me some guidance on this? Thanks.
0 Replies
 
 

Related Topics

YouTube Is Doomed - Discussion by Shapeless
So I just joined Facebook.... - Discussion by DrewDad
Internet disinformation overload - Discussion by rosborne979
Participatory Democracy Online - Discussion by wandeljw
OpenDNS and net neutrality - Question by Butrflynet
Internet Explorer 8? - Question by Pitter
 
Copyright © 2024 MadLab, LLC :: Terms of Service :: Privacy Policy :: Page generated in 0.04 seconds on 09/28/2024 at 10:28:28