BargainBuddy Removal
Overview:
BargainBuddy is a BHO that displays advertisements when certain keywords are
shown on websites. This can give you pop unders and checks for updated versions
of itself every time your computer starts.
Some installations of this will have a removal tool in Add/Remove programs. You should always try this first.
Destroy Autorun:
Delete the following keys
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\apd
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\bargains
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\bullseye
network
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\deskmateautoupdate
Reboot your system then:
Make sure you click start --> Run and type in msconfig. Then select the startup tab. Any references to the processes below should be deleted
End
Processes (may or may not exist):
bargainbuddy.exe
bargains.exe
bbchk.exe
bbi8015.exe
bbi8018.exe
cb.exe
deskmateautoupdate.exe
manager.exe
msbb.exe
nnstp_bbi6009.exe
sprite.exe
Unregister DLLs:
Tip: this is only a list of known files/locations. You will want to do a
search by the name of the file to see if they're on your system.
A while back I wrote a guide to
Register/remove DLL or AX
files which you will need if you don't know how to unregister these files.
Each file is in several locations so you'll need to search for them and unregister + delete them in every location you find.
about.dll
apuc.dll
mscb.dll
nvms.dll
popup.dll
msbbhook.dll
msbb.dll
msbb1.dll
Remove Directories:
programfiles\bargain buddy
programfiles\bullseye network
programfiles\cashback
programfiles\crazymates
programfiles\iemenuextension
You should be back to normal IF this was your only problem. I suggest you post in our HJT forum since its not likely that this is your only bug. Read this first