Spyware.BearShare - Spyware Detector

Spyware free software spyware removal Anti Spyware software free spyware check adware spyware remover anti virus download

Home/ Spyware Encyclopedia / Spyware.BearShare

Spyware.BearShare Technical Details

Category

Spyware

Discovered

7/22/2005 12:00:00 AM

Modified

9/13/2007 4:41:00 PM

Threat Level

Critical

Description

Any software that covertly gathers user information through the user's Internet connection without his or her knowledge, usually for advertising purposes. Spyware applications are typically bundled as a hidden component of freeware or shareware programs that can be downloaded from the Internet. Once installed, the spyware monitors user activity on the Internet and transmits that information in the background to someone else. Spyware can also gather information about e-mail addresses and even passwords and credit card numbers

Summary

The hosts file was updated with the following url-to-ip mappings: n/a
The following http urls were started: n/a
Generated smtp traffic: n/a
Connection(s) established with remote IRC Server: n/a
The following hidden entries created: n/a
The following internet connection was established: n/a

When the Spyware is executed, it creates the following files:

Name	Version	Publisher	Signature (MD5)	File Size (in Bytes)
..\bearshare.lnk
..\bearshare.lnk
..\bearshare\imwebcontrol.dll			3866990c5e07fffbf9d5c16be5808d7a
..\bearshare\launcher.exe			c507f01dc734db54e52cd275453848ea
..\bearshare \portablemediadevicewrapper.dll			cf10556870a747495fbef6acb2dc4b04
..\bearshare\resourcesloc.dll			54962a387e42590f942b6fba0c01676e
..\bearshare\updateinst.exe			c09803ab736d09282939fc09cd1b710b
..\db\gwebcache.dat			099d8f5479de4480a6abcee96db7d90c
..\db \library.2.db.lastgoodload.bak			eae7903bf5b215fecdf5fc32c85ddc7d
..\db\library.db.lastgoodload.bak			b3737c82cc305850bf965f32e03313c4
..\bearshare\gnetwiz.exe	1.0.0.11	toncitech, inc.	b7d9876908ca7c5017d003d104adfe69	108544
..\installer\bsproinstall.exe			d5dddc7e2518cb9920d71d0c30a640eb
..\temp\tmpbsinstall5.2.5.1.dat				632
..\temp \tmpbsinstall5.2.5.1.dat.bak			40284bbafc4b4699a6fb8b08edafb764	632
..\temp\tmpbsinstall5.2.5.1.exe			aef94817e4deb8e5b34b24e16c233aab
..\temp\tmpbsinstall5.2.5.1.tiger				1000
..\bearshare\webstats.exe			8578501042ea5616a235dedef83b5c9f	360448
..\url1\save-castminst.exe			E76F88BC8F04FEDC2BB3722CC9472240
..\desktop \bearshare downloads.lnk
..\desktop\bearshare.lnk
..\5ae49276.exe			f3e132478c167279d383955a12518c70
..\6eff3049.exe			8bf62e540f4803b561c0fead1bb555fc
..\mediabar.exe			e8a2fefa4c6a8b80feed5415e46af0b3

When the Spyware is executed, it creates the following Registry entries:

•	..\AppEvents\EventLabels\BearShareChatNotifyMsg
•	..\AppEvents\Schemes\Apps\BearShare
•	..\software\bearshare
•	..\software\microsoft\internet explorer\main\search bar\"http://search.bearshare.com/search/index.html?src=ssb"
•	..\software\microsoft\internet explorer\main\search bar\"http://search.bearshare.com/sidebar.html?src=ssb"
•	..\software\microsoft\internet explorer\main\search page\"http://search.bearshare.com/sidebar.html?src=ssb"
•	..\SOFTWARE\BearShare
•	..\software\classes\appid\bearshare.exe
•	..\software\classes\applications\bearshare.exe
•	..\software\classes\bearshare.audiocd
•	..\software\classes\bearshare.file
•	..\software\classes\bearshare.launchereventhandler
•	..\software\classes\bearshare.launchereventhandler.1
•	..\SOFTWARE\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}\"(Default)"
•	..\software\classes\clsid\{7c3b01bc-53a5-48a0-a43b-0c67731134ba}
•	..\Software\Classes\clsid\{9f95f736-0f62-4214-a4b4-caa6738d4c07}
•	..\software\classes\clsid\{a7a4a19a-00ac-473c-8225-1b97d1fdd43e}
•	..\software\classes\clsid\{d3dee18f-db64-4beb-9ff1-e1f0a5033e4a}
•	..\software\classes\clsid\{efde11a9-fe0b-4548-b876-5eac0a6ce86f}
•	..\software\classes\clsid\{f42c7b47-5234-4bf5-8882-daac0d64870e}
•	..\software\classes\clsid\{f8ab43ed-ec88-4de7-b213-f89157d29c63}
•	..\software\classes\clsid\{f97da966-f09d-4cab-bf29-75a0026986ea}
•	..\software\classes\ed2k\shell\open\ddeexec\topic\(Default)\"urlhandler"
•	..\software\classes\imweb.imwebcontrol

Recommendation to remove Spyware.BearShare

Spyware Detector can remove Spyware.BearShare, and thousands of other Spyware definitions, automatically and instantly. Click here to download Spyware Detector and scan for free.

	Personalized e-Mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback.

	Speed up your computer and increase browsing performance by deleting Spyware & Adware

	Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software.

	Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes.

Search Threats

Testimonials

Information Desk

	Spyware & Adware Categories we scan

	List of Spyware & Adware we remove


	Submit a Threat Submit a threat to be reviewed by our research team Submit a Threat