Adware.BonusPack Detection and Removal

Adware.BonusPack is a piece of adware that installs itself as a browser helper object, in this case an icon in Korean characters in the top right-hand corner of Microsoft Internet Explorer.

Programs that try to sneak into a computer as BHOs (browser helper objects) do so in order to avoid detection by firewalls and less-advanced anti-spyware programs.  These programs simply detect Adware.BonusPack and related adware, as though the malicious program were part of the browser.

All of the links and pages that Adware.BonusPack opens are in Korean.  Other than that, little else is known about it at present.  A free scan with ZookaWare PC Cleaner can detect this and other threats to computer and Internet security.

Relative File Contents:
* %Program Files%\bonuspack\bonuspack.dll
* %Program Files%\bonuspack\bpacks.exe
* %Program Files%\bonuspack\bpack_atx.ini
* %Program Files%\bonuspack\bpack_icon1.ico
* %Program Files%\bonuspack\bpack_icon2.ico
* %Program Files%\bonuspack\bpack_menu.ini
* %Program Files%\bonuspack\bpack_micon.bmp
* %Program Files%\bonuspack\bpconfig.ini
* %Program Files%\bonuspack\exclist.qbl
* %Program Files%\bonuspack\losslist.qbl
* %Program Files%\bonuspack\rebag.dll
* %Program Files%\bonuspack\uninst_bpack.exe
* %Program Files%\bonuspack\urllist.qbl
* %Program Files%\bonuspack\urllist2.qbl
Registry Entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bonuspack
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bpacks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1AD3A632-7E9D-4458-9995-566505CE3609}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bonuspack.TInfoButton
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1AD3A632-7E9D-4458-9995-566505CE3609}\InprocServer32

Download Free Scan
ZookaWare runs on Windows Vista, 7, 8 and 10. It has no ads, popups or bundled software and fully uninstalls by clicking Start > All Programs > select ZookaWare and click Uninstall.

Leave a Reply

Your email address will not be published. Required fields are marked *

css.php