Home » Spyware Protection » Hijacked Browser Analysis » Re: HijackThisLog Analysis - Ben » 

Belt.exe

Process name: Spyware www.abetterinternet.com

Product: abetterinternet.com

Company: abetterinternet.com (A Better Internet)


ABetterInternet shows advertisements related the web pages you are visiting.
ABetterInternet hijacks the browser's error page, updates itself stealthily, installs third party software and adds links to your desktop.

From the developers Agreement:
By installing the Software, you understand and agree that the Software may, without any further prior notice to you, automatically perform the following: display advertisements of advertisers who pay a fee to BetterInternet; display links to and advertisements of related websites based on the information you view and the websites you visit; store non-personally identifiable statistics of the websites you have visited; redirect certain URLs including your browser default 404-error page to or through the Software; automatically update the Software and install added features or functionality conveniently without your input or interaction; and install desktop icons and installation files and third-party software.

A Better Internet manual removal:
Delete registry values:
'HKEY_LOCAL_MACHINE \ SOFTWARE \ Classes \ CLSID {000006B1-19B5-414A-849F-2A3C64AE6939}.
'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Browser Helper Objects {000006B1-19B5-414A-849F-2A3C64AE6939}.

Delete files:
bi.dll, host.dll, biprep.exe, Belt.exe, Belt.ini


Mail this pageMail this page