| FavoriteMan removal| Spyware FavoriteMan Information |
|---|
Name: FavoriteMan
Category: Browser Helper Object
Date: 2005-04-10
Dangerous: Yes |
FavoriteMan is Browser Helper Object which is malware.
FavoriteMan is an IE Explorer Helper Object. Every so
often it connects to its controlling servers, which
may direct it to download & install other applications
& add entries to the IE Favorites menu.
Unsolicited commercial software installed by this parasite
may include:
VX2
NetPal
ClickTheButton
ezCyberSearch
toolbar
SideStep
BargainBuddy/Adp
NewDotNet
IGetNet
HotBar
n-Case [180solutions]
Mail.com Alerts [which also comes bundled with BargainBuddy/Apuc]
various homepage hijackers Installing it is highly not recommended.
This Browser Helper Object is also known as: • Adware/NetPals - named by Panda.
• ofrg (the name of the DLL program file). - named by a.
• TrojanDownloader.Win32.BHO - named by Kaspersky.
• TrojanDownloader.Win32.Rameh - named by a.
• Windows Help 4 Smrt Browsing.
>> Delete FavoriteMan automatically - Download Spyware Doctor
| FavoriteMan Removal Instructions |
|---|
Unregister the following DLLs and reboot aess2.dll, atpartners.dll, atpart~1.dll, in10b6s.dll, pdfzzy.dll.
emesx.dll, f1.dll, favboot.dll, favman.dll, favorite.dll, fone.dll, gr02.dll, im64.dll, lwz.dll, mbr32.dll, mpz300.dll, n3tpa1p.dll, ofrg.dll, otw0i.dll, ss32.dll, sysldr.dll in Windows\system32\
emesx.dll, f1.dll, favboot.dll, favman.dll, favorite.dll, fone.dll, im64.dll, lwz.dll, n3tpa1p.dll, ofrg.dll, ss32.dll, sysldr.dll in Windows\system\
| Delete these registry entries HKEY_CLASSES_ROOT\clsid\{000000f1-34e3-4633-87c6-1aa7a44296da}
HKEY_CLASSES_ROOT\clsid\{00000ef1-0786-4633-87c6-1aa7a44296da}
HKEY_CLASSES_ROOT\clsid\{00000ef1-34e3-4633-87c6-1aa7a44296da}
HKEY_CLASSES_ROOT\clsid\{139d88e5-c372-469d-b4c5-1fe00852ab9b}
HKEY_CLASSES_ROOT\clsid\{ebbd88e5-c372-469d-b4c5-1fe00352ab9b}
HKEY_CLASSES_ROOT\f1.organizer
HKEY_CLASSES_ROOT\f1.organizer\curver f1.organizer.1
HKEY_CLASSES_ROOT\fone.organizer
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{000000da-0786-4633-87c6-1aa7a4429ef1}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{000000f1-34e3-4633-87c6-1aa7a44296da}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{00000ef1-0786-4633-87c6-1aa7a44296da}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{00000ef1-34e3-4633-87c6-1aa7a44296da}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{139d88e5-c372-469d-b4c5-1fe00852ab9b}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{ebbd88e5-c372-469d-b4c5-1fe00352ab9b}
HKEY_CLASSES_ROOT\typelib\{00000ef1-34e3-4633-87c6-1aa7a44296da}
HKEY_CLASSES_ROOT\typelib\{ebbd88e5-c372-469d-b4c5-1fe00352ab9b}
HKEY_CLASSES_ROOT\typelib\{ef100007-f409-426a-9e7c-cb211f2a9030}
HKEY_CLASSES_ROOT\typelib\{ef100607-f409-426a-9e7c-cb211f2a9030}
HKEY_CURRENT_USER\object\object
HKEY_CURRENT_USER\software\microsoft\windows\counter
HKEY_CURRENT_USER\software\microsoft\windows\server
HKEY_LOCAL_MACHINE\software\classes\clsid\{000000da-0786-4633-87c6-1aa7a4429ef1}
HKEY_LOCAL_MACHINE\software\classes\clsid\{000000f1-34e3-4633-87c6-1aa7a44296da}
HKEY_LOCAL_MACHINE\software\classes\clsid\{00000ef1-0786-4633-87c6-1aa7a44296da}
HKEY_LOCAL_MACHINE\software\classes\clsid\{00000ef1-34e3-4633-87c6-1aa7a44296da}
HKEY_LOCAL_MACHINE\software\classes\clsid\{139d88e5-c372-469d-b4c5-1fe00852ab9b}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{000000f1-34e3-4633-87c6-1aa7a44296da}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{00000ef1-0786-4633-87c6-1aa7a44296da}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{00000ef1-34e3-4633-87c6-1aa7a44296da}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{139d88e5-c372-469d-b4c5-1fe00852ab9b}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{b549456d-f5d0-4641-bced-8648a0c13d83}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{ebbd88e5-c372-469d-b4c5-1fe00352ab9b}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\f1
| Remove the following files adware.txt, aess2.dll, atpartners.dll, atpart~1.dll, in10b6s.dll, pdfzzy.dll.
emesx.dll, f1.dll, favboot.dll, favman.dll, favorite.dll, fone.dll, gr02.dll, im64.dll, lwz.dll, mbr32.dll, mpz300.dll, n3tpa1p.dll, ofrg.dll, otw0i.dll, ss32.dll, sysldr.dll in Windows\system32\
emesx.dll, f1.dll, favboot.dll, favman.dll, favorite.dll, fone.dll, im64.dll, lwz.dll, n3tpa1p.dll, ofrg.dll, ss32.dll, sysldr.dll in Windows\system\
|
Bookmark FavoriteMan page
|