Adware Bookedspace Spyware
Type: Adware (Previously called Spyware)
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XPSystems Not Affected: DOS, Linux, Macintosh, OS/2, UNIX, Windows 3.x
This spyware threat can be detected only by free Spyware Scanner software that support expanded threats.
The Spyware's Behavior
The Spyware 'Bookedspace' is equipped with an adware program that displays pop-up windows with advertisements while browsing the Internet.Causes large number of pop-up windows, even on sites where you would not expect to see any.
A third-party spyware product installs Bookedspace's adware, and is also responsible for the End User License Agreement. The adware is often installed without any indications or consent.
File names: oo4.dll; other names exist
During the spyware's installation, Adware 'Bookedspace' does not display any information on screen, the third-party product has control over that.
The Spyware 'Bookedspace' performs the following
Adds the value:"name of .dll file"="regsvr32.exe path to adware component, DllRun"
to the registry key:
HKLM\SOFTWARE\Microsoft\Windows
\CurrentVersion\Run
..So that Bookedspace's spyware executes each time Windows starts.
The adware displays pop-up windows with advertisements.
*Make sure you run a full system spyware scan and delete all the spyware files detected as Adware under the file name(s) Downreceive.
Then delete the spyware value that was added to the registry.
Unregister the .dll file.
Scanning for and Deleting the Spyware files
Run your free Spyware Scanner and make sure that it is configured to scan all files.Run a full system spyware scan.
If any files are detected as spyware infected with the Adware Downreceive, click Delete. If you see a message that a file cannot be deleted, skip that file and finish the spyware scan. Then, follow your free spyware scanner's instructions, restart the computer, and follow the steps to delete the '.dll' file.
Deleting the Spyware Values from the Registry
Click Start, and then click Run. (The Run dialog box appears.)Type regedit
Then click OK. (The Registry Editor opens.)
Navigate to the key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft
\Windows\CurrentVersion\Run
In the right pane, delete the value:
"name of .dll file"="regsvr32.exe path to adware component, DllRun"
Exit the Registry Editor.
Unregistering the Spyware's .dll file
Click Start > Run.Type command, and then click OK.
Click Browse, and then browse to and select the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
Select the regsvr32 file, and then click OK.
Add the following text to the end of the line:
/u "full path to adware component"
An example would look like:
regsvr32 /u "c:\windows\system32\006.dll"
Click OK.
Run another spyware scan, deleting any files detected as Adware 'Bookedspace'.
You will find much more on this topic at WorldsLargestNetwork.com
 |
|
|
|
|
WorldsLargestNetwork.com
Free Spyware Scanner
PC Speed Boost
Create Website Easily
Computer Monitoring Software
Internet Education
Anti Spy Software
Stop Pop Ups
Scan PC for Spyware
Pop-up Eliminator
