Emsisoft Malware-Info

Name: Adware.Win32.Brother Bear

Risklevel: High Risk

Company: pages.sssnet.com - http://pages.sssnet.com/

Description:

Brother Bear is an adware bundler that installs the adwares like Adware-BonziBuddy.dr, Adware-Ezula and iLookup and NDotNet (New.net).iLookup adds its own toolbar and search button to the Microsoft Internet Explorer Web browser, Adware.Ezula alters Web pages viewed in Internet Explorer and can add extra links to certain keywords that are targeted by advertisers. This adware also runs under the name TopText. Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content.

Removal instructions for Adware Brother Bear:

To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware Brother Bear.

Run a full scan on all drives and move all detected items to the quarantine.

More details about this danger:

Characteristics:

  • It installs the adwares like Adware-BonziBuddy.dr, Adware-Ezula and iLookup and NDotNet (New.net).
  • iLookup adds its own toolbar and search button to the Microsoft Internet Explorer Web browser, Adware.Ezula alters Web pages viewed in Internet Explorer and can add extra links to certain keywords that are targeted by advertisers. This adware also runs under the name TopText. Adware.NDotNet is an adware program that associates non-existent domain names with sponsored content.

Installation: Installed through EXE

Process: Brother Bear.scr

Screenshots:

Brother BearBrother BearBrother BearBrother BearBrother BearBrother BearBrother BearBrother BearBrother BearBrother BearBrother BearBrother Bear

Used folders:

  • C:\Program Files\Lycos
  • C:\Program Files\Lycos\Sidesearch
  • C:\Program Files\NewDotNet
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Brother Bear
  • C:\Documents and Settings\[USER]\Start Menu\Programs\FileSubmit
  • C:\WINDOWS\iLookup
  • C:\WINDOWS\Lycos
  • C:\Program Files\FileSubmit\Brother Bear

Used files:

  • C:\WINDOWS\iLookup\TTIL.exe
    [65536 Bytes] Application
  • C:\Program Files\FileSubmit\Brother Bear\bonzi.exe
    [117511 Bytes] Application
  • C:\bbicon
    [3,638 bytes] Icon
  • C:\WINDOWS\system32\ssconfig.exe
    [28672 Bytes] Application
  • C:\WINDOWS\Lycos\ss_IGN1_setup.exe
    [107848 Bytes] Application
  • C:\WINDOWS\WSST_Screen_Saver.ini
    [40 Bytes] Configuration Settings
  • C:\WINDOWS\UninstallWSST.exe
    [180224 Bytes] Application
  • C:\WINDOWS\UninstallLog2.log
    [399 Bytes] Text Document
  • C:\WINDOWS\UninstallLog1.log
    [399 Bytes] Text Document
  • C:\WINDOWS\UninstallLog0.log
    [357 Bytes] Text Document
  • C:\WINDOWS\Brother Bear.scr
    [466944 Bytes] Screen Saver
  • C:\WINDOWS\Brother Bear.dat
    [2616242 Bytes] DAT File
  • desktop+\FREE BonziBUDDY.url
    [151 Bytes] Internet Shortcut
  • C:\Documents and Settings\[USER]\Start Menu\Programs\FileSubmit\Uninstall Brother Bear.lnk
    [1599 Bytes] Shortcut
  • C:\Documents and Settings\[USER]\Start Menu\Programs\FileSubmit\Install Brother Bear.lnk
    [1595 Bytes] Shortcut
  • C:\Program Files\FileSubmit\Brother Bear\fsi_uninstall.ico
    [766 Bytes] Icon
  • C:\WINDOWS\system32\sporder.dll
    [8464 Bytes] Application Extension
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Brother Bear\Uninstall Brother Bear.lnk
    [560 Bytes] Shortcut
  • C:\Program Files\FileSubmit\Brother Bear\dmbbss.zip
    [2881330 Bytes] WinZip File
  • C:\Program Files\FileSubmit\Brother Bear\fsi_install.ico
    [766 Bytes] Icon
  • C:\Program Files\FileSubmit\Brother Bear\INSTALL.LOG
    [1776 Bytes] Text Document
  • C:\Program Files\FileSubmit\Brother Bear\nnez_388.exe
    [196608 Bytes] Application
  • C:\Program Files\FileSubmit\Brother Bear\UNWISE.INI
    [29 Bytes] Configuration Settings
  • C:\Program Files\NewDotNet\uninstall3_88.exe
    [36864 Bytes] Application
  • C:\Program Files\Lycos\Sidesearch\sidesearch.dll
    [139264 Bytes] Application Extension
  • C:\Program Files\Lycos\Sidesearch\Uninst.exe
    [39036 Bytes] Application
  • C:\Program Files\NewDotNet\newdotnet3_88.dll
    [167936 Bytes] Application Extension
  • C:\Program Files\NewDotNet\readme.txt
    [3522 Bytes] Text Document
  • C:\Program Files\Lycos\Sidesearch\offline.htm
    [1967 Bytes] HTML Document
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Brother Bear\Brother Bear.lnk
    [574 Bytes] Shortcut

Additional information might be found here:

Search at Google for Adware Brother Bear Search at Google for Adware Brother Bear
Search at Bing for Adware Brother Bear Search at Bing for Adware Brother Bear
Search at Yahoo for Adware Brother Bear Search at Yahoo for Adware Brother Bear

How can I protect myself from Adware Brother Bear?

Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers. This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.

Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!

Only $40 for the security of your computer.

Buy Emsisoft Anti-Malware online:

Buy Emsisoft Anti-Malware now

Trust only on the best protection software!

Spring Offer!

Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.

Only a few days left! Order here

Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - Q1-Q3 2011
More independent reviews of anti-malware software