|
|
Detect and remove hidden rootkits using
UnHackMe
RegRun Security Suite = 24 system utilities for protecting your computer. Try now! |
 CTB.EXE - Useless
It runs as a process on startup (ctbclick.exe) and installs a number of extra DLLs. The ClickTheButton has had "legitimate" distribution channels, but now it being silently installed with other applications (eg. some releases of KaZaA). The ClickTheButton downloads parts of advertising pages when you visit a new web site. When a complete advertisement has arrived, it will be displayed, usually as a pop-up or pop-under window. ClickTheButton monitors visits of known shopping sites. Manual removal: Kill the 'ctbclick' process, delete 'CTB3_Shared' from the Windows directory, delete 'CTBHooks.dll' from the System directory (WINDOWS\SYSTEM or WINNT\System32). Delete the value HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ClickTheButton. You can also remove the registry key HKLM\SOFTWARE\CTB_BrandedClient, and every class in HKEY_CLASSES_ROOT that begins with 'CtbClient', 'CtbSession', 'CtbShopper' or 'CtbXML'. Remove these registry items (if present): HKEY_CLASSES_ROOT\clsid\{ab4dd0f0-38da-4f48-aafe-7de7323bb6b2} HKEY_LOCAL_MACHINE\software\ctb_brandedclient Use RegRun Startup Optimizer to quickly remove ClickTheButton.
Recommended software: RegRun Security Suite - removal and protection. http://www.regrun.com RegRun Reanimator - free removal tool. greatis.com/reanimator
What is hidden in MSDN? Why software developers prefer Win32.FreeTechSecrets.com? All Unix Manuals in Alphabetical Order C# controls for .NET in 3 simple steps. Constantly updated. Last update: May 12 2008
Interesting information about Vista programs... Need consultation? Would you like to add your opinion?
|
|
