IShowBao Spyware Profile
Title: IShowBao
Also Known as: Adware.IShowBao, Adware.Win32.IShowBao
Severity scale:
IshowBao is a spyware program created by IshowBao, Inc. It is supported by the web page, www.ishowbao.com. It was first discovered on October 21 of 2006.
IshowBao is disguised as a browser enhancing toolbar. It is really a Trojan Downloader. Trojan Downloaders are highly dangerous, because they can bypass your firewall settings to download other files. These can be update files, advertisements, or more spyware or adware. They can even be viruses or worms. IshowBao downloads its files from www.ishowbao.com.
Also Known As:
Adware.IShowBao, Adware.Win32.IShowBao,
Adware-IShowBao, IshowBao B,
AdWare.Win32.AlexaBar.k [Kaspersky],
Googlebar
Associate Files:
adupdate.exe
googlebar.dll
hdusb.exe
ispvcr.sys
%system%googlebar.dll
%system%checknetwork.exe
%system%driversispvcr.sys
%system%driversispvcr.sys__
%system%googlebar.dll
%system%checknetwork.exe
hdusb.exe
adupdate.exe
HKEY_CLASSES_ROOTad.setad
HKEY_CLASSES_ROOTbrushalx.brashset
HKEY_CLASSES_ROOTbrushalx.brashset.1
HKEY_CLASSES_ROOTclsid{607e95a1-8f89-4343-b9bc-2efc2b291bb4}
HKEY_CLASSES_ROOTclsid{bcf4d74b-e6bd-4c8f-83d7-90d6439705b9}
HKEY_CLASSES_ROOTinterface{8409d387-4567-4476-9304-94442bd4bae9}
HKEY_CLASSES_ROOTinterface{8c2e9bc3-b172-4cc0-a74f-2ce206ea45ac}
HKEY_CLASSES_ROOTtypelib{1ffe957b-16db-43ef-9702-9cf40a9472ec}
HKEY_CLASSES_ROOTtypelib{fc387a2b-1103-4e9a-81a9-323c5dcfe671}
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorerbrowser helper objects{607e95a1-8f89-4343-b9bc-2efc2b291bb4}
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorerbrowser helper objects{bcf4d74b-e6bd-4c8f-83d7-90d6439705b9}
With the toolbar aspect, it limits the sites that can be viewed through it to affiliate websites for IshowBao. These sites may or may not be fraudulent and can lead to further spyware infections.
IshowBao offers nothing of real benefit to the user. It exposes you to more dangerous infections as a Downloader. It can also provide the annoyance of slower browsing speed, unstable browser performance, and possible annoyance of unsolicited ads.
Consequently, it should be removed immediately from your computer. The risk and annoyance of this infection far outweighs any potential benefit. While it is possible to remove this infection by manual methods, they should be discouraged. They are highly technical, time consuming, and can potentially harm your computer’s registry. They may also be ineffective.
Instead, you should use SpyZooka to remove IshowBao.
Since my computer was infected with IShowBao, lots of problems are occurring with it. The most annoying is that it keeps poping me out, stopping important process on my desktop. Every time when I try to access the internet,it redirects me to http://www.ishowbao.com. I’ve downloaded SpyZooka from my laptop and now it is gone. You are doing a great job here!