eXact.Cardcrazy
Title: eXact.Cardcrazy
Also Known as: CardCrazy itself
Severity scale:
eXact.Cardcrazy is a program that allows you to play free card games. By itself, it isn’t adware or spyware. However, it has been bundled with NaviSearch, also known as BargainBuddy and Bullseye Network. Both of these programs are known to be spyware programs.
eXact Advertising clearly states that you should use the Add/Remove Programs function in Windows to remove their programs because using antispyware programs won’t completely remove their software. Their website also states that they haven’t produced or distributed any software since the middle of 2006. This is a direct result of a class action lawsuit filed against them in 2005 by Shalov Stone & Bonner, LLP, in US District Court Southern District of New York on behalf of Yehuda Michaekli and others. The claims included Deceptive Acts and Practices, Trespass to Chattels, Negligence, False Advertising, and Unjust Enrichment, as well as several other complaints.
While the Add/Remove Programs function will remove the guise of the program, it will not remove the associated spyware. For that, you need an effective spyware removal tool. We have determined that SpyZooka is the best antispyware tool to remove all the spyware associated with these programs.
Associated files:
(CardCrazy itself)
process: installer_cardcrazy.exe: MD5 Hash: fd40ba7d7af944ae248…
process: cardcrazy.exe: MD5 Hash: a3148aa7bd1e56a67c1…
process: package8037_cardcrazy_arkadium.exe: MD5 Hash: d93d03b51d8ec0564c8..
(NaviSearch, also known as BargainBuddy)
nls.exe, nvms.dll, nls8041.exe, ad.dat, ub.dat, Uninstall.exe (in NaviSearch folder), HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
\{AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344}, HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
\{8EEE58D5-130E-4CBD-9C83-35A0564E1357}, HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
\{C6906A23-4717-4E1F-B6FD-F06EBED11357}, HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib
\{4EB7BBE8-2E15-424B-9DDB-2CDB9516C2E3}, HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NLS.UrlCatcher, HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NLS.UrlCatcher.1, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion
\Explorer\Browser Helper Objects
\{AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344}, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion
\Uninstall\NaviSearch, HKEY_LOCAL_MACHINE\SOFTWARE\NaviSearch, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\Ext\Stats\{AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344}
(Bullseye)
adv.exe;adx.exe;msbe.dll;bargains.exe;adp8043b.exe, Uninstall.exe (in Bullseye Network folder), HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
\{F4E04583-354E-4076-BE7D-ED6A80FD66DA}, HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
\{8EEE58D5-130E-4CBD-9C83-35A0564E5678},
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
\{C6906A23-4717-4E1F-B6FD-F06EBED15678},
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib
\{4EB7BBE8-2E15-424B-9DDB-2CDB9516B2C3},
HKEY_LOCAL_MACHINE\SOFTWARE\Bargains,
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ADP.UrlCatcher,
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ADP.UrlCatcher.1,
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion
\Explorer\Browser Helper Objects\{F4E04583-354E-4076-BE7D-ED6A80FD66DA},
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
\BargainBuddy,
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext
\Stats\{F4E04583-354E-4076-BE7D-ED6A80FD66DA}
