Tuesday, April 24, 2012

Remove Bandoo.com that redirects Google results to annoying pages instead of providing emoticons

Bandoo.com promises free smiles and winks. It is featured as a method of conveying human emotions in instant messengers by means of funny emoticons.
In the meantime, unwanted redirect application, as it often happens, may come bundled with the updates for your instant messenger, be it ICQ, MSN, Yahoo Messenger, Gtalk, Skype etc.
Moreover, it often comes instead of the expected emoticons. Once user has downloaded the content, allegedly an update to instant messenger and tries applying it so as to send the advanced winks and smiles, here comes, instead of the lovely face, a link to visit, which is a malicious online script. The link, if visited, drops a redirect virus..
Removal of Bandoo.com is thus reasonably considered as extermination of relevant Bandoo redirect. The redirect typically deals with Google, namely with search results, as an attempt to open any of the results returned by Google is blocked with some out-of-context ad.
Get rid of Bandoo.com related infection, and please be careful installing seemingly harmless programs as they often conceal a threat – free scanner available here will exterminate adware without disabling useful features of your applications, including the extended emoticons for instant messengers.



Bandoo manual removal guide:


Delete the followin files:
C:\Program Files\Bandoo\Plugins
C:\Program Files\Bandoo\Resources
C:\Program Files\Bandoo\Bandoo.exe
C:\Program Files\Bandoo\BandooGo.exe
C:\Program Files\Bandoo\BandooRes.dll
C:\Program Files\Bandoo\BandooUI.exe
C:\Program Files\Bandoo\BndCore.exe
C:\Program Files\Bandoo\BndHook.dll
C:\Program Files\Bandoo\ChromePackage.crx
C:\Program Files\Bandoo\CrashRpt.dll
C:\Program Files\Bandoo\ExtensionsManager.exe
C:\Program Files\Bandoo\ffext.exe
C:\Program Files\Bandoo\FlashAnimator.dll
C:\Program Files\Bandoo\ftalk.ico
C:\Program Files\Bandoo\GIFAnimator.dll
C:\Program Files\Bandoo\InstallerNsisHelper.dll
C:\Program Files\Bandoo\libungif4.dll
C:\Program Files\Bandoo\license.rtf
C:\Program Files\Bandoo\Plugins.ini
C:\Program Files\Bandoo\uninstaller.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Bandoo\Bandoo Extensions
C:\Documents and Settings\All Users\Start Menu\Programs\Bandoo\Bandoo Tutorial
C:\Documents and Settings\All Users\Start Menu\Programs\Bandoo\License Agreement

Delete the following registry entries:
HKEY_CLASSES_ROOT\AppID\BandooCore.EXE
HKEY_CLASSES_ROOT\BandooCoordinator.BandooCoordinator
HKEY_CLASSES_ROOT\BandooCoordinator.PlugInNotifier
HKEY_CLASSES_ROOT\BandooCore.BandooCore
HKEY_CLASSES_ROOT\BandooCore.ResourcesMngr
HKEY_CLASSES_ROOT\BandooIEPlugin.BandooIEPlugin
HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions "ffox@bandoo.com"
HKEY_LOCAL_MACHINE\SOFTWARE\Bandoo
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\BandooCoordinator.EXE
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\BandooCore.EXE
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BandooCoordinator.BandooCoordinator
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BandooCoordinator.PlugInNotifier
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BandooCore.BandooCore
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BandooCore.SettingsMngr
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BandooIEPlugin.BandooIEPlugin
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Bandoo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bandoo Coordinator

No comments: