Error loading C:Windows\bsx5.dll

  • Thread starter Thread starter dmoir18
  • Start date Start date
copied from: Experts Windows NT: "Answer
Problem: Spyware removal

Hello Kelly,

Thank you for coming to AllExperts.com for help with your
problem.
I will help you to understand your problem and help you to
perform the solution.

Kelly, these files bs3.dll and bsx5.dll are both malicious
spyware dropped onto your PC, and are programmed to
activate when you startup.
You do NOT want to reinstall them as explained below.
What you DO want to do is uninstall any remaining
instances of them that SpyBot may have left behind,
instructions below.

DETAILED EXPLANATION:

Both bs3.dll and bsx5.dll are part of parasite spyware

What it does to your computer:
It allows installation of a file(s) that tracks your web
browsing. bs stands for BookedSpace.
BookedSpace is an Internet Explorer Browser Helper Object
used to show advertising.

bs3.dll and bsx5.dll are both variants of spyware orginal
BookedSpace/Remanent, an early variant (around July 2003)
with filename rem00001.dll, controlling server
66.225.192.199.
These are both newer revisions with filename bs2.dll or
bs3.dll, or bsx5.dll controlling server
www.bookedspace.com.
It is silently installed by MThree MP3 to WAV converter.
Origin currently unknown.

bs3.dll or bsx5.dll = BookedSpace can contact its
controlling server when a new page is visited, which may
direct it to open pop-up ads.
When the controlling server is contacted, the URL of the
current page is passed along with a user ID for tracking
purposes.
It can download and install third-party software as
directed by its controlling server. BookedSpace/BS2 has
been seen to install the BargainBuddy, nCase and eBates
parasites.

Stability problem = Seems to stop IE address bar searches
from working.

REMOVAL INSTRUCTIONS:

Open a DOS command prompt windows (from Start->Programs-
Accessories), and enter the following commands, for the
Click to expand...
Remanent variant:

cd "%WinDir%\System"
regsvr32 /u "..\bs3.dll"

Next open the registry (click 'Start', choose 'Run',
enter 'regedit'), find the key
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersio
n\Run, and delete the entry 'BookedSpace' or 'Bsx3' (BS3
variant). OR bsx5 or any bsx5 variant.
Restart the computer and you should be able to delete
the 'rem00001.dll', 'bs2.dll' or 'bs3.dll' or 'bsx5.dll'
file in the Windows folder.
You can also open the registry and delete the key
HKEY_LOCAL_MACHINE\Software\Remanent or
HKEY_LOCAL_MACHINE_Software\BookedSpace to clean up, if
you like.


Glad to help
Margee

***********************************************************


Kelly, your selected AllExperts volunteer has taken
his/her valuable time
to answer your questions.
PLEASE TAKE YOUR TIME TO RATE EACH ANSWER. Thank You. "

***********************************************************
 
----- (e-mail address removed) wrote: ----

This message appears every time I sign on. Any idea how
to correct this problem
 
----- (e-mail address removed) wrote: -----

This message appears every time I sign on. Any idea how
to correct this problem?
Click to expand...

Spike,

Start Task Manager and see what is using up your memory.

Add physical memory.

Enlarge the paging file.

Check for spyware. Use HijackThis, Spybot S&D, and expert advice at
SWI Forums (all free). Complete instructions are available at:
http://forums.spywareinfo.com/index.php?showtopic=5187

Please provide some detail about your computer. Make / model, how
much physical memory, what size is the paging file?

Get Process Explorer (free) from <http://www.sysinternals.com/>, to
provide more detail than Task Manager. Get Startup Monitor and
Startup Control Panel (free) from <http://www.mlin.net/> to provide
control over what programs are started automatically when you startup.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
 
Back
Top