Bargainbuddy Malware & Adware

Barginbuddy malware is a bho (browser helper object) that aims to deliver advertisements in the form of pop up ads and or by re-directing searches made by an infected users pc. As with most adware and spyware today Bargainbuddy can be difficult to remove once installed on a computer.

Manual removal of barginbuddy involves cleaning out the registry and should not be attempted unless you know what your doing deep inside “the guts” of your operating system.

The best method for removing this unwanted malware is to use one of the free spyware scan programs mentioned on the homepage here. These program are capable to detecting malicious keyloggers, spyware, adware, dialer’s and bargain buddy. If you find that in fact your pc has been infected by bargain buddy you than can purchase the software for easy removal.

Possible process for bargain buddy may include (but are not limited to): birytx.exe, bargain4.exe, bbi8032.exe, bargains31.exe, bargain3.exe, autoheal.exe, inviteexact.exe, invbn.exe, manager.exe
dchuefy.exe, xctbn.exe, sprite.exe, package8032_siac[1].exe, nls555.exe as well as newupdate.exe and msxct.exe

BargainBuddy Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runapd
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runbullseyenetwork
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\epakucmzhc:\winnt\epakucmzh.exe
21c555b1-43b9-45e3-929f-258e64772372
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\bargainbuddy
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\bargainbuddydisplayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\bargainbuddyuninstallstring
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\cashback
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\whenusaveunivdisplayicon
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\whenusaveunivdisplayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\whenusaveunivdisplayversion
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\whenusaveunivhelplink
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\whenusaveunivpublisher
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\whenusaveunivuninstallstring
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\whenusaveunivurlinfoabout
HKEY_LOCAL_MACHINE\software\navisearch
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\zesoft
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runbargains
CE188402-6EE7-4022-8868-AB25173A3E14
F4E04583-354E-4076-BE7D-ED6A80FD66DA
CE31A1F7-3D90-4874-8FBE-A5D97F8BC8F1
CE31A1F7-3D90-4874-8FBE-A5D97F8BC8F1
Software\Microsoft\Windows\CurrentVersion\Run\Bargain Buddy\
Software\Microsoft\Windows\CurrentVersion\Run\Bargain Buddy\
Software\Microsoft\Windows\CurrentVersion\Run\Bargain Buddy
Microsoft\Windows\CurrentVersion\App Management\ARPCache\BargainBuddy
ADP.UrlCatcher
ADP.UrlCatcher.1
4EB7BBE8-2E15-424B-9DDB-2CDB9516E2A3
4EB7BBE8-2E15-424B-9DDB-2CDB9516C2E3
4EB7BBE8-2E15-424B-9DDB-2CDB9516B2C3
8EEE58D5-130E-4CBD-9C83-35A0564E5678
8EEE58D5-130E-4CBD-9C83-35A0564E2468
8EEE58D5-130E-4CBD-9C83-35A0564E1357
F4E04583-354E-4076-BE7D-ED6A80FD66DA
CE188402-6EE7-4022-8868-AB25173A3E14
8EEE58D5-130E-4CBD-9C83-35A0564EA119
eXactUtil
Bargains\Bargain Buddy
4EB7BBE8-2E15-424B-9DDB-2CDB9516A2A3
C6906A23-4717-4E1F-B6FD-F06EBED14177
Bargains
CE31A1F7-3D90-4874-8FBE-A5D97F8BC8F1
Apuc.UrlCatcher
Apuc.UrlCatcher.1