About BookedSpace
Variants: Remanent, BS2, BS3
BookedSpace is an Internet Explorer Browser Helper Object
used to show advertising. BookedSpace can contact its
controlling server when a new page is visited, which may
direct it to open pop-up ads. When the controlling server is
contacted, the URL of the current page is passed along with a
user ID for tracking purposes.
BookedSpace/Remanent : early variant (around July 2003) with
filename rem00001.dll, controlling server 66.225.192.199.
BookedSpace/BS2 and BookedSpace/BS3 : newer revisions
(August 2003) with filename bs2.dll or bs3.dll, controlling
server www.bookedspace.com.
Removal Instructions
Automatic Removal:
BookedSpace can be detected and removed Automatically
by SpyEraser.
Manual Removal:
Follow these steps to remove BookedSpace from
your machine. Begin by backing up your registry and your
system, and/or setting a Restore Point, to prevent trouble if
you make a mistake.
- Go to the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run.
If you find the value bsx3, delete it and reboot
the machine immediately. If you find the value bxss5,
delete it and reboot the machine immediately. If
you find the value bxsx5, delete it and reboot
the machine immediately.
- Unregister these DLLs with Regsvr32, then reboot:
systemroot+\bs2.dll
systemroot+\bs3.dll
systemroot+\bsx5.dll
systemroot+\bxxs5.dll
systemroot+\oo4.dll
systemroot+\system32\bs2.dll
systemroot+\system32\bs3.dll
systemroot+\system32\bsx5.dll
systemroot+\system32\bxsx5.dll
systemroot+\system32\bxxs5.dll
systemroot+\system32\oo4.dll
systemroot+\system32\rem00001.dll
systemroot+\system\bs2.dll
systemroot+\system\bs3.dll
systemroot+\system\bsx5.dll
systemroot+\system\bxsx5.dll
systemroot+\system\bxxs5.dll
systemroot+\system\oo4.dll
systemroot+\system\rem00001.dll
- Remove these registry items (if present) with RegEdit:
HKEY_CLASSES_ROOT\bookedspace.extension
HKEY_CLASSES_ROOT\bookedspace.extension.5
HKEY_CLASSES_ROOT\clsid\{0019c3e2-dd48-4a6d-ab2d-8d32436313d9}
HKEY_LOCAL_MACHINE\clsid\{a85c4a1b-bd36-44e5-a70f-8ec347d9b24f}
HKEY_LOCAL_MACHINE\software\bookedspace
HKEY_LOCAL_MACHINE\software\classes\clsid\{0019c3e2-dd48-4a6d-ab2d-8d32436313d9}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer
\browser helper objects\{0019c3e2-dd48-4a6d-ab2d-8d32436313d9}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer
\browser helper objects\{0019c3e2-dd48-4a6d-abcd-8d32436313d9}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer
\browser helper objects\{0019c3e2-dd48-4a6d-abcd-8d32436323d9}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer
\browser helper objects\{2b3452c5-1b9a-440f-a203-f6ed0f64c895}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer
\browser helper objects\{392be62b-e7de-430a-8859-0afe677de6e1}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer
\browser helper objects\{a85c4a1b-bd36-44e5-a70f-8ec347d9b24f}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
\bookedspace
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\bsx3
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\bxss5
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\bxsx5
HKEY_LOCAL_MACHINE\software\remanent
- Remove these files (if present) with Windows Explorer:
systemroot+\bs2.dll
systemroot+\bs3.dll
systemroot+\bsx5.dll
systemroot+\bxxs5.dll
systemroot+\oo4.dll
systemroot+\system32\bs2.dll
systemroot+\system32\bs3.dll
systemroot+\system32\bsx5.dll
systemroot+\system32\bxsx5.dll
systemroot+\system32\bxxs5.dll
systemroot+\system32\oo4.dll
systemroot+\system32\rem00001.dll
systemroot+\system\bs2.dll
systemroot+\system\bs3.dll
systemroot+\system\bsx5.dll
systemroot+\system\bxsx5.dll
systemroot+\system\bxxs5.dll
systemroot+\system\oo4.dll
systemroot+\system\rem00001.dll
Sponsored Links:
Removal Instructions for Other Adwares &
Spywares
|