Quick Links: SpywareGuide Greynets Blog | SpywareGuide Product Database | SpywareGuide Company Database | SpywareGuide Categories
Search SpywareGuide Database & Site
Security Email Alerts & Updates
SpywareGuide powered by FaceTime Security Labs
Full Name:
BookedSpace Websearch   Read More
Type: Adware
Also Known as: Remanent BS2 BS3 Booked Space
Created by: BookedSpace
SG Index: 4 [Explain]
Removal tools: List of products that detect/remove/protect against BookedSpace:
  • Control IM and P2P use, block spyware and other malware: RTGuardian
  • Endpoint Spyware Remediation: Greynet Enterprise Manager
  • IM, P2P control, malware prevention and web filtering in single appliance: Unified Security Gateway
  • Category Description: Program that delivers advertisements on your PC.

    Note that many websites have their own advertising, unrelated to adware.

    Adware is any software application in which advertising is displayed while the program is running. The authors of these applications include additional code that delivers the ads, which can be viewed through pop-up windows or through a bar that appears on a computer screen and sometimes through text links or in integrated search results. Adware may or may not track personal information. It may also gather information anonymously or in aggregate only. Users should check the EULA and Privacy policy to ensure if the adware on their machines conforms to their standards.
    Official Description: BookedSpace is an Internet Explorer Browser Helper Object used to show advertising.
    Comment: BookedSpace/Remanent: early variant (around July 2003) with filename rem00001.dll, controlling server 66.225.192.199.

    BookedSpace/BS2 and BookedSpace/BS3: newer revisions (August 2003) with filename bs2.dll or bs3.dll, controlling server www.bookedspace.com.

    BookedSpace/Remanent is silently installed by MThree MP3 to WAV converter. BookedSpace/BS2 is silently installed by FreeWire's FreeMP3Player. The origin of BookedSpace/BS3 is currently unknown.

    BookedSpace can contact its controlling server when a new page is visited, which may direct it to open pop-up ads. When the controlling server is contacted, the URL of the current page is passed along with a user ID for tracking purposes.
    Information URL: http://www.bookedspace.com/
       
    Manual removal: Open a DOS command prompt windows (from Start->Programs->Accessories), and enter the following commands, for the Remanent variant:

    cd "%WinDir%\System"
    regsvr32 /u "..\rem00001.dll"
    Or, for the BS2 variant:

    cd "%WinDir%\System"
    regsvr32 /u "..\bs2.dll"
    Or, for the BS3 variant:

    cd "%WinDir%\System"
    regsvr32 /u "..\bs3.dll"
    Properties:
  •  Autostarts/Stays Resident
  •  Changes browser
  •  Shows Advertisements
  • Related Products
    Product Category Comment
  •  enBrowser
  • Adware BookedSpace is installed with this program.
  •  W32.Licat Worm
  • Worm

    Click here to leave feedback for this product

    Help with the BUST!
    Click here and give us what details you have and let our international research team take it from there. If you desire your report will remain anonymous.
    Recent Blog Posts
  • A Year In Security
  • Youtube Comment Bot Spams In Waves
  • VGA Awards Trailers Used As Bait For Spam Offers
  • Fake Visa Electronic Report Serves Up Zbot Data Stealer
  • Banned Console Owners Beat The System - With Stickers
  • Spot The Hack
  • The Futility Of EULAs
  • Auto Whaler Spears Phishers
  • Fake Porn Grabbers Snag Nothing But Malware
  • Console DDoS Botnets - A Thriving Industry
  • Recent Modifications
    2010-3-11  Email Threats
    2010-3-9  WeBuying
    2010-3-9  HappytoFind
    2010-3-5  PaintBrush
    2010-3-5  Downloader-Tadpu
    2010-3-4  Unclassified Trojans
    2010-3-2  ParisVoyeur
    2010-3-2  CoolWebSearch
    2010-2-23  Dialers
    2010-2-19  NetPumper 1.2
     

    Site EULA | Site Map | Contact Us | About Us | Site and Spyware FAQ | Advertise | RSS Feeds  | Link To Us | SpywareGuide Japan Japanese

    © Copyright 2007, FaceTime Communications, Inc. All rights reserved.