Adware Bonzi Spyware
Type: Adware (Previously called Spyware)
Publisher: BonziSystems Affected: Windows 95, Windows 98, Windows NT, Windows 2000, Windows XP, Windows Me
Systems Not Affected: DOS, Linux, Macintosh, OS/2, UNIX, Windows 3.x
This spyware threat can be detected only by free Spyware Scanner software that support expanded threats.
The Spyware's Behavior
Bonzi's adware is program that displays advertisements. It runs when you start Windows and sets your home page to bonzi.com/bonziportal/index.asp.The .exe spyware file tries to connect to various controlling servers, which can be used to download and execute arbitrary code.
Spyware files will be able to be detected as Adware under the file name(s) Bonzi.
Either a talking Monkey or Parrot, which is part of the adware's program, is displayed in and can be run from the system tray.
The spyware is bundled with other programs or can be downloaded from the publishers Web site.
File names: BonziTapFilters.dll; BonziBDY.exe
Adware 'Bonzi' displays advertisements and changes your default Internet settings. Most of the settings, which you can control, are changed during installation.
Other spyware programs usually install Adware Bonzi. The adware consists of two components:
One executable file, which is the executable adware component that downloads advertisements from a server and displays them.
One dynamic link library (.dll) spyware file, which is a browser helper object that monitors Internet use.
When Bonzi's Spyware is executed, the adware installer does the following:
Creates the folder, C:\Program Files\ BonziBUDDY, which contains various files.Adds the value:
"BonziBUDDY"
to the registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft
\Windows\CurrentVersion\Run
so that the adware runs when you start Windows.
We are not sure whether this threat sends Internet usage statistics to the server or downloads advertisements, as certain keywords are typed in Internet Explorer.
*Try uninstalling BonziBUDDY using the Add/Remove Programs utility.
*Make sure you run a full system spyware scan and delete all the spyware files detected as Adware under the file name(s) Bonzi.
Then delete the spyware value that was added to the registry.
For specific details on each of these steps, read the following instructions.
Uninstalling the Spyware
Do one of the following:On the Windows 98 taskbar:
Click Start > Settings > Control Panel.
In the Control Panel window, double-click Add/Remove Programs.
On the Windows Me taskbar:
Click Start > Settings > Control Panel.
In the Control Panel window, double-click Add/Remove Programs.
If you do not see the Add/Remove Programs icon, click "...view all Control Panel options."
On the Windows 2000 taskbar:
By default, Windows 2000 is set up the same as Windows 98. In that case, follow the Windows 98 instructions. Otherwise, click Start, point to Settings, point to Control Panel, and then click Add/Remove Programs.
On the Windows XP taskbar:
Click Start > Control Panel.
In the Control Panel window, double-click Add or Remove Programs.
Click BonziBUDDY.
Click Add/Remove, Change/Remove, or Remove (this varies with the operating system). Follow the prompts.
Scanning for and Deleting the Spyware files
Run your free Spyware Scanner and make sure that it is configured to scan all files.Run a full system spyware scan.
If any files are detected as spyware infected with the Adware Bonzi, click Delete.
Deleting the Spyware Values from the Registry
Click Start, and then click Run. (The Run dialog box appears.)Type regedit
Then click OK. (The Registry Editor opens.)
Navigate to the key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft
\Windows\CurrentVersion\Run
In the right pane, delete the value:
"BonziBUDDY"
Exit the Registry Editor.
You will find much more on this topic at WorldsLargestNetwork.com
 |
|
|
|
|
WorldsLargestNetwork.com
Free Spyware Scanner
PC Speed Boost
Create Website Easily
Computer Monitoring Software
Internet Education
Anti Spy Software
Stop Pop Ups
Scan PC for Spyware
Pop-up Eliminator
