cb.exe is monitoring user's web history and sends the data to analysis. It may display related advertisements and prompt pop-up windows.
cb.exe
Adware.W32.BargainBuddy
Warning! Potential Security Hazard!
System process cb.exe is reported as a spyware!
Brief description of process cb.exe
Process cb.exe named “Adware.W32.BargainBuddy” is unsafe executable application of Adware.W32.BargainBuddy software, produced by eXact Advertising LLC. Process cb.exe is reported as a spyware. Process cb.exe is classified as potentially dangerous and is highly recommended to remove it from computer quickly.
cb.exe
Additional information about cb.exe
cb.exe is monitoring user's web history and sends the data to analysis. It may display related advertisements and prompt pop-up windows.
Default file locations
C:\Program Files\bargain buddy\bin\cb.exe
How to remove cb.exe?
Kill these processes:
- cb.exe
- installer_cashback.exe
- flash.exe
- cashback.exe
Remove these entries from registry. Use regedit tool:
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CashBack
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\%Windir%/DownloadedProgramFiles/installer_cashback.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs=%Windir%DownloadedProgramFilesinstaller_cashback.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CB.UrlCatcher.1
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CB.UrlCatcher
- HKEY_LOCAL_MACHINE\SOFTWARE\CashBack\
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\CashBack
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ExtStats\{CE188402-6EE7-4022-8868-AB25173A3E14}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CE188402-6EE7-4022-8868-AB25173A3E14}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4EB7BBE8-2E15-424B-9DDB-2CDB9516E2A3}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C6906A23-4717-4E1F-B6FD-F06EBED12468}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8EEE58D5-130E-4CBD-9C83-35A0564E2468}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CE188402-6EE7-4022-8868-AB25173A3E14}
- HKEY_LOCAL_MACHINE\SOFTWAR\EClasses\CB.UrlCatcher.1
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CB.UrlCatcher
- HKEY_LOCAL_MACHINE\SOFTWARE\CashBack
- HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionRunCashBack
- cb.exe
- installer_cashback.exe
- flash.exe
- cashback.exe
Remove this folder permanently:
- C:\Program Files\bargain buddy
Reported as a virus
No
Reported as a trojan horse
No
Reported as a spyware
Yes, it is a spyware!
Safe to end the process
Yes
Safe to disable the process
Yes
Safe to remove the process
Yes
Developer
Part of
Adware.W32.BargainBuddy
Related news
Showing news related to process “cb.exe”
November 6, 2009 4:08:48 PM CET
Adware:W32/Adware – This program delivers advertising content to the user. It is usually annoying but harmless, unless it is combined with spyware or trackware.
