Do you have Malware Bell?

This “Malware Bell Removal Guide” article will show you how to identify and remove Malware Bell. This guide will be updated as more information is available.

Malware Bell Detection Test

 Run SpyHunter’s Spyware Scanner to check for Malware Bell infections on your PC.

Malware Bell Description

Malware Bell 3.2, or MalwareBell, is a rogue anti-spyware program that is promoted on the Web through trojan video codecs. Malware Bell 3.2 sole intent is to take money from innocent computer users. The creators and their marketing affiliates propagate and install Malware Bell’s rogue anti-spyware application through a download that is bundled with Trojan.Zlob. Once your computer is infected with Zlob, it will display popups that look similar to Microsoft Windows system alert messages. These fake alert messages have titles such as “Warning!”, “Critical System Error!” or “Your Computer Is Infected” to convince you that your computer is in danger and that you must click on the ‘OK’ button to fix the problem. The fake alert message redirects to malwarebell.com or, in some cases, to other rogue websites, where there’s a free download of Malware Bell. Once you’ve downloaded Malware Bell, it will run a scan of your computer to give a threat report and upon completion a warning message will pop up that will prompt you to purchase the Malware Bell’s full version. You must avoid clicking on any popups or system messages related to MalwareBell or Zlob. No matter how legitimate Malware Bell or it’s website (www.malwarebell.com) may look you should not download or purchase the Malware Bell program. Malware Bell is meant to confuse you with it’s scare tactics and even use Microsoft’s look and feel to make you trust it. Look for ps16sys.dll and mbuninst.exe on your Windows directory to detect the presence of Malware Bell. Malware Bell comes from the same makers of IEDefender and Files Secure. Parasite Type: A cocktail of Rogue Anti-Spyware Programs & Trojans.

Malware Bell Method of Automatic Removal

The removal of spyware such as Malware Bell can be a difficult process. If you regularly run a spyware scan with a good spyware remover, you can automatically detect Malware Bell and other Spyware, Trojans, Rogue Anti-spyware, Adware, Browser Hijackers and other unwanted programs.

To quickly remove Malware Bell, follow the instructions below:

1. Download SpyHunter’s Spyware Scanner.

2. Select “Start Scan” to run a full system Malware Bell scan.

3. Reboot your computer.

4. Run another scan to pick up any remaining Malware Bell infections.

** SpyHunter’s Spyware Scanner only allows you to detect Malware Bell and other spyware. In order to remove Malware Bell, we advise you to buy the full-version of SpyHunter. Weekly Malware Bell file updates and technical support are available with SpyHunter’s spyware remover.

Malware Bell Method of Infection

Click on the “How Malware Bell Infects Your Computer” video to see a Malware Bell infection in action! See through the eyes of an unsuspecting Internet user while him/her is being victimized by Malware Bell. Tip: Turn your sound ON and watch the video in Full Screen mode to fully experience how Malware Bell infects a computer. In the “How Malware Bell Infects Your Computer” video, the following Malware Bell actions occur:

• The Internet user surfs the Web and visits a questionable website. A large amount of rogue anti-spyware programs like Malware Bell are mostly pushed through adult websites.

• The Internet user downloads a free video codec called “Video ActiveX Enhancement 2.07″ which comes bundled with Malware Bell. Freeware or shareware programs tend to come with other unwanted programs such as Malware Bell. Do not install any free software without reading its EULA. By simply reading a program’s EULA, you can determine whether a program you are installing has spyware bundled with it.

• The Internet user is infected with the rogue anti-spyware program Malware Bell. Malware Bell runs a scan on the computer and gives a false spyware report claiming that the computer is infected with spyware. Once the scan is completed, a warning message appears with two buttons, one that says “Repair” and the other “Remind Me Later”. This deceptive tactic is an attempt to scare the Internet user into clicking the “Repair” button.

• The Internet user closes all the fake Windows error messages and warnings and is unaware that Malware Bell is still running its malicious tasks in the background. Malware Bell reloads itself on a timer so if the Internet user closes the program it will only take a few moments until it opens again. The average Internet user does not realize when spyware has infected his/her computer until it is too late and the spyware problem has already spread throughout the computer.

• Internet user opens web browser and is redirected to a rogue website called MalwareBell.com. The Internet user is bombard with websites that pop up messages that tries to push a product on him/her. Ignore such messages! We recommend closing these windows by clicking on the X instead of the OK button.

Malware Bell Symptoms

The following Malware Bell symptoms occur:

• Malware Bell displays a fake system alert similar to a Windows notification message. A red or green flashing icon appears in your system tray. If you click on the icon, a fake system alert pops up and directs you to a rogue website called safetyuptodate.com. In some cases, even when you don’t click on the icon the fake system alert may still pop up. The fake system alert promises to give you a legitimate anti-spyware program that will help you fix spyware problems, but instead it really reports false information to try to trick you into purchasing the program.

• Malware Bell hijacks or modifies your homepage and displays new desktop shortcuts. Malware Bell changes your default homepage to a different homepage and creates new unnecessary shortcuts on your desktop. Sometimes Malware Bell won’t even allow you to change it back to your original homepage. Websites that redirects you to is asecurevalue.com and malwareburn.com.

• Malware Bell installs a rogue toolbar called Security Toolbar 7.1. Security toolbar 7.1 is a rogue toolbar that comes with two green bars, one that says “block adware” and the other “remove spyware”. If you click on either of them you’re directed to a rogue anti-spyware site such as Malwareburn.com which can install additional malware.

• Malware Bell bombards your PC with fake Windows warnings messages. Even after you’ve closed all the Malware Bell messages or your PC has been idle for awhile, you’ll still get constant alert popups appearing on your system tray or on your screen.

Malware Bell Anatomy

As new Malware Bell spyware components is reported by our customers and our Spyware Threat Research Labs, we will update this section. MalwareBell.com WHOIS Information: Registration Service Provided By: ESTDOMAINS INC Website: http://www.estdomains.com Domain Name: MALWAREBELL.COM Registrant: PrivacyProtect.org Domain Admin (contact@privacyprotect.org) P.O. Box 97 All Postal Mails Rejected, visit Privacyprotect.org Moergestel null,5066 ZH NL Tel. +45.36946676 Creation Date: 01-Apr-2008 Expiration Date: 01-Apr-2009 Domain servers in listed order: ns2.malwarebell.com ns1.malwarebell.com


Malware Bell Manual Removal Instructions

To learn the Malware Bell manual removal process, read the step-by-step instructions provided on this section. Use Caution! Please read the instructions below carefully. Manual removal of Malware Bell is a delicate procedure. Proceed at your own risk. Make sure you backup your system and close all open Internet Explorer windows before you manually remove Malware Bell. If you are still having problems with Malware Bell after completing these instructions, we recommend you download SpyHunter’s Spyware Detection Tool to safely remove Malware Bell. To manually remove Malware Bell, follow these removal steps: Step #1: How to Kill Malware Bell files using Process Explorer.

• 1a. How to Kill Malware Bell Processes.

1. Download and install Process Explorer.

2. Open Process Explorer.

3. Locate the Malware Bell processes listed below.

4. To kill an Malware Bell process, right-click the Malware Bell process and choose the option “Kill Process Tree”.

5. Kill the following Malware Bell processes:
   Malware BellSetup.exe malwarebell.exe mbuninst.exe Malware Bell 3.2.exe
• 1b. How to Kill Malware Bell DLL files.

1. Right-click the Explorer.exe process and choose the option “Properties”.

2. Click on the “Threads” Tab, locate and highlight the Malware Bell DLL files listed below.

3. To kill Malware Bell DLL files, click the “Kill” button.

4. Kill the following Malware Bell DLL files:
   Malware Bell0.dll Malware Bell1.dll Malware Bell3.dll ps16sys.dll
• Step #2: How to Delete Malware Bell Registry Keys and Values.

1. Right-click on your Desktop > select “New” option > select “Text Document” (.txt file) option.

2. Rename the .txt file as a .reg file and call it “Delete_Registry_ MalwareBell_Entities.reg”. This renamed .reg file is a command that creates a shortcut to your Windows registry and allows you to easily delete registry values.

3. Right-click and select the “Edit” option.

4. Copy and paste the Malware Bell keys listed below.

5. In the menu bar, go to “File” > select “Save” > then click the “X” button to close the file.

6. Double-click on the .reg file.

7. When the message box appears saying “Are you sure you want to add the information in C:DOCUME~1%username%DesktopDELETE~1.REG to the registry?”, click the “Yes” button.

8. When the message box appears saying “Information in C:DOCUME~1%username% DesktopDELETE~1.REG has been successfully entered into the registry.”, click the “OK” button.

9. The Malware Bell registry keys have been deleted from your registry.

10. Copy and paste the following Malware Bell keys:
    
• Step #3: How to Delete Malware Bell Directories.

1. To locate Malware Bell directories, go to “Start” > “My Computer” > “Local Disk (C:)” > “Program Files” > “Show the contents of this folder”.

2. Search and delete the Malware Bell directories listed below.

3. Right-click on the Malware Bell folder and select “Delete”. option.

4. When the message box appears saying “Are you sure you want to remove the folder [FOLDERNAME] and move all its contents to the Recycle Bin?”, click the “Yes” button.

5. When the message box appears saying “Renaming, moving or deleting [FOLDERNAME] could make some programs not work. Are you sure you want to do this?”, click the “Yes” button.

6. Search and delete the following Malware Bell directories:
   %ProgramFilesMalware Bell

• Step #5: How to Restore Original Default Home Page.

1. Go to “Start” > “Control Panel” > “Internet Options”.

2. Click on the General Tab > click the Use Default button under Home Page.

3. Click “Apply” and then click the “OK” button.

4. Open a Web browser to verify that your default homepage has been restored.

Step #6: How to Remove the Malware Bell Icons.
1. If the Malware Bell icons still remain on your Desktop, you can drag and drop them to the “Recycle Bin”.

2. Reboot your computer to make sure all changes made for the removal of Malware Bell are complete. If your computer still has issues, you should scan your computer for Malware Bell with a spyware scanner.

Congratulations!! You’ve completed our Malware Bell manual removal tutorial. video


Submit Malware Bell To Our Spyware Threat Research Labs

Since Malware Bell spyware components change constantly, you may come across application issues that prevent you from removing Malware Bell completely. You can report Malware Bell spyware components by using SpyHunter’s Free Support Log System. Our Support Log System takes snapshots of all the points of execution on your operating system, allowing us to precisely identify each and any problem. We encourage you to post your Support Logs on this article so we can help you come up with a custom fix. Below are the instructions on how to generate Support Logs using SpyHunter. Open SpyHunter > click on the “Generate Support Log” button > click on the “Copy to Clipboard” button to save your Support Logs > Post your Support Logs to this article.


Disclaimer

Warning!! Enigma Software Group can not be held responsible for any problems that may occur by using the information contained within this Malware Bell removal guide. By following any of these Malware Bell removal instructions, you agree to be bound by the disclaimer. If you do not agree, do not follow these Malware Bell removal instructions. We make no guarantees that these Malware Bell removal instructions will completely remove Malware Bell. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means. In order to effectively clean and secure your computer, we recommend you purchase our spyware remover SpyHunter or seek professional help from a computer expert.

Share and Enjoy: These icons link to social bookmarking sites where readers can share and discover new web pages.
• 
• 
• 
• 
• 
• 
This entry was posted on 04/15/08 and is filed under Rogue Anti-Spyware Program. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.