Home Malware Programs Adware BullsEye

BullsEye

Posted: March 28, 2006

BullsEye is application create by BullsEye network, the same who created bargainbuddy. Comes attached with Free Kazza id.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 bbchk.exe
    2 exdl.exe
    3 exul.exe
    4 msbe.dll
    5 mscb.dll
    6 nvms.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOTADP.UrlCatcherHKEY_CLASSES_ROOTADP.UrlCatcher.1HKEY_CLASSES_ROOTCB.UrlCatcherHKEY_CLASSES_ROOTCB.UrlCatcher.1HKEY_CLASSES_ROOTNLS.UrlCatcherHKEY_CLASSES_ROOTNLS.UrlCatcher.1HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunBullsEyeNetworkHKEY_LOCAL_MACHINESOFTWAREeXactUtil
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}4EB7BBE8-2E15-424B-9DDB-2CDB9516B2C38EEE58D5-130E-4CBD-9C83-35A0564E5678C6906A23-4717-4E1F-B6FD-F06EBED15678F4E04583-354E-4076-BE7D-ED6A80FD66DACE188402-6EE7-4022-8868-AB25173A3E14AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344
Loading...