NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Overview:
BargainBuddy is a BHO that displays advertisements when certain keywords are shown on websites. This can give you pop unders and checks for updated versions of itself every time your computer starts.

Some installations of this will have a removal tool in Add/Remove programs. You should always try this first.

Destroy Autorun:
Delete the following keys
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\apd
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\bargains
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\bullseye network
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\deskmateautoupdate

Reboot your system then:

Make sure you click start --> Run and type in msconfig. Then select the startup tab. Any references to the processes below should be deleted

End Processes (may or may not exist):
bargainbuddy.exe
bargains.exe
bbchk.exe
bbi8015.exe
bbi8018.exe
cb.exe
deskmateautoupdate.exe
manager.exe
msbb.exe
nnstp_bbi6009.exe
sprite.exe

Unregister DLLs:
Tip: this is only a list of known files/locations. You will want to do a search by the name of the file to see if they're on your system.
A while back I wrote a guide to Register/remove DLL or AX files which you will need if you don't know how to unregister these files.

Each file is in several locations so you'll need to search for them and unregister + delete them in every location you find.

about.dll
apuc.dll
mscb.dll
nvms.dll
popup.dll
msbbhook.dll
msbb.dll
msbb1.dll

Remove Directories:
programfiles\bargain buddy
programfiles\bullseye network
programfiles\cashback
programfiles\crazymates
programfiles\iemenuextension

Clean your Registry:

You should be back to normal IF this was your only problem. I suggest you post in our HJT forum since its not likely that this is your only bug. Read this first