|
|
Detect and remove hidden rootkits using
UnHackMe
RegRun Security Suite = 24 system utilities for protecting your computer. Try now! |
 bmz.exe - Useless
It consists of a process, msbb.exe, that runs constantly with Windows and shows advertising. nCase is aware of the FlashTrack parasite and will disable it if it is running, to stop it showing competing adverts. Some versions also seem to connect to the Gator web servers occasionally, for unknown reasons. Bundled with a large range of applications, particularly file-sharing programs. nCase are known to send e-mail to software authors asking them to include the nCase bundle. Also installed by ActiveX drive-by downloads in adverts inserted on some free web hosting services, and also installed by the FavoriteMan and BookedSpace parasites. Looks for known URLs and keywords in URLs, and opens pop-up advertisements targeted at such sites. Also opens non-targeted pop-up adverts at arbitrary times during IE usage. Can add shortcut icons to the Start menu and Desktop if directed to by its controlling servers. nCase can download and execute code from its controlling servers, as an update feature. May cause an error message such as "msbb.exe file is linked to the missing export wininet.dll" on older systems without a WinInet library. Can also cause IE to be a bit slow to start up, and some versions are reported to generate page fault errors. Manual removal: Navigate ro the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run, and delete the entry "msbb". To delete nCase/Alert, also check for a randomly-named entry three or more letters long, pointing to a .EXE of the same name in the Windows folder. Delete this entry and the file it points to. Alternatively, wait for the next restart and it should prompt to you reinstall or remove itself. Restart the computer and delete the 'nCase' folder inside Program Files. Or in older versions without an 'nCase' folder, look in the System folder and delete msbb.exe. Also delete the registry keys HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\nCASE, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\msbb and HKEY_CURRENT_USER\Software\180solutions. Or try to use RegRun Startup Optimizer to automatically remove this adware.
Recommended software: RegRun Security Suite - removal and protection. http://www.regrun.com RegRun Reanimator - free removal tool. greatis.com/reanimator
What is hidden in MSDN? Why software developers prefer Win32.FreeTechSecrets.com? All Unix Manuals in Alphabetical Order C# controls for .NET in 3 simple steps. Constantly updated. Last update: May 12 2008
Interesting information about Vista programs... Need consultation? Would you like to add your opinion?
|
|
