Spyware Techie

Do you know what Malware Bell is?

DESCRIPTION

Malware Bell, or also known as Malware Bell 3.2, is a rogue anti-spyware program known to infect computers through Trojans such as Zlob. Malware Bell makes attempts through annoying popups to get users to purchase a full licensed version of the Malware Bell program. This is a ploy and it is up to computer users to avoid falling victim to Malware Bell’s scam. Malware Bell must have the word “bell” in it because it is as annoying as a constantly ringing bell.

Malware Bell has its own website, MalwareBell.com. The MalwareBell.com website may look like a normal website that sells and promotes a spyware removal tool but it is far from normal. MalwareBell.com cannot be trusted because the program Malware Bell which it promotes is not a legitimate spyware removal program. We have discovered that MalwareBell.com has a untrustworthy payment system set up for the computer users that are gullible enough to purchase Malware Bell. The payment process domain address is registered to the fake name “Domain Admin”.

We found Malware Bell to falsely classify PCTools as a variant of the Trojan.Win32.SystemCrash infection as shown in the image below. We know that Trojan.Win32.SystemCrash is a justifiable Trojan infection but PCTools is known to be a legitimate company that provides software. In our article about how Malware Bell calls PCTools Malware and Adware we further explain the details of this finding.

In non-techie terms: Malware Bell is an outright scam and should be treated as a high priority for removal. Malware Bell and the MalwareBell.com website were created by hackers to use illicit tactics so they may extort money from you. Do not under any circumstances visit MalwareBell.com, purchase Malware Bell, or download Malware Bell. Malware Bell is a worthless program that may ultimately waste your time and money.

Watch ‘Malware Bell Rogue Anti-Spyware Program Attacks Computers’ Video

Turn your speakers ON and press PLAY to listen to the ‘Malware Bell Rogue Anti-Spyware Program Attacks Computers’ video.

Malware Bell Screen Shot Image:

MalwareBell.com website image:

Aliases: MalwareBell, MalwareBell.com, MalwareBell 3.2

Malware Bell Automatic Removal Instructions

This automatic removal method is for non-techie computer users. If you’re too lazy to learn about spyware removal or how to access sensitive files in your computer, then this is the method for you.
Before you start: Print or bookmark these instructions because you’ll have to reboot into Safe Mode. Also back up your computer in case you make a mistake.

1. Download and save SmitFraudFix to your desktop.
2. Restart your computer in Safe Mode (how to do safe mode). Once the
   desktop appears, double click on the SmitfraudFix.exe on your desktop.
3. After the credits screen, you’ll see a menu. Select the option number 2, which is ‘Clean (safe mode recommended)’, and then
   press Enter to delete infect files.
4. SmitFraudFix will begin cleaning your computer and take a series of cleanup processes. When the process is over, it will automatically begin the Disk Cleanup program.
5. Once the Disk Cleanup program is complete, you will be prompted with the message ‘Registry cleaning - Do you want to clean the registry’. Answer Y (Yes) and hit Enter. Reboot your computer.
6. SmitFraudFix will now check if wininet.dll is infected. SmitFraudFix will ask you whether to replace the infected file (if there’s any) ‘Replace infected
   file?’ Answer by typing Y (Yes) and hit Enter.
7. Reboot your computer to complete the cleaning process.
8. After reboot, a Notepad screen may appear containing a log of all the files
   removed from your computer. If it doesn’t appear, a file will be created called
   rapport.txt in the root of your drive, (Local Disk C:).
9. Restart your computer in Safe Mode (how to do safe mode).
10. Go to C:\Windows\Temp, click Edit, click Select All, press DELETE, and then
    click Yes to confirm that you want all the items to go to the Recycle Bin.
11. Go to C:\Documents and Settings\[LISTED USER]\Local Settings\Temp, click Edit, click Select All, press DELETE, and then click Yes to confirm that
    you want all the items to go to the Recycle Bin.
12. Reboot your computer back to normal mode. Go to Windows Update and download all critical updates.

Malware Bell Manual Removal Instructions

This manual removal method is for techie computer users. Malware Bell manual removal may be difficult and time consuming to remove. There’s no guarantee that Malware Bell will be removed completely. So read the Malware Bell removal steps carefully and good luck.

Before you start: Close all programs and Internet browsers. Also back up your computer in case you make a mistake and your computer stops working.

1. Uninstall Malware Bell Program
   Click on Start > Settings > Control Panel > Double-click on Add/Remove Programs. Search for and uninstall Malware Bell if found.
2. To stop Malware Bell processes (view process removal steps)
   Go to Start > Run > type taskmgr. The click the Processes tab and you’ll see a list of running processes.
   Search and stop these Malware Bell processes:
   mbuninst.exe
   Malware Bell 3.2.exe
   mbl.exe
   Malware BellSetup.exe
   malwarebell.exe
   For each unwanted process, right-click on it and then select “End task”.
3. To Unregister Malware Bell DLLs (view DLL removal steps)
   Search and unregister these Malware Bell DLLs:
   sysweb32a.dll
   vtr.dll
   Malware Bell1.dll
   qnmargolxpg.dll
   winsurf.dll
   Malware Bell3.dll
   koapi32r.dll
   ps16sys.dll
   Malware Bell0.dll
   
   To locate the Malware Bell DLL path, go to Start > Search > All Files or Folders. Type Malware Bell and in the Look in: select either My Computer or Local Hard Drives. Click the Search button.
   Once you have the Malware Bell DLL path, go to Start and then click on Run. In the Run command box, type cmd, and then click on OK.
   To locate the exact DLL path, type cd in order to change the current directory. To display the contents of the directory, use the dir command. To remove the DLL file type regsvr32 /u FILENAME.dll (FILENAME is the name of the file that you want to unregister).
4. To unregister Malware Bell registry keys (view registry keys removal steps)
   Go to Start > Run > type regedit > press OK.
   Edit the value (on the right pane) by right-clicking on it and selecting the Modify option. Select the Delete option.
   Search and delete these Malware Bell registry keys:

   AppID\pokru.dll
   414B0283-2228-4F26-8BB3-C2211FA99223
   7F445A02-8A97-4F7A-BF83-BEBF58B37053
   1F91C786-BBA0-41D2-8B3D-B88242677BAC
   F50B3F5E-856E-4757-9BB1-B35D46CA7719
   649E2DCE-1AD1-470B-ACC8-42842396A94C
   04A67DA5-880B-452F-B193-463452C40B41
   5C8494A5-7525-46B3-94C2-2F734EEBD48B
   F9C6EC65-2988-4896-976F-6EA66FAD9844
   D263B532-C528-49E5-8BB6-80FA67332C9A
   MalwareBell
   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”Malware Bell” = “C:\Program Files\Malware Bell\Malware Bell 3.2.exe”
   22FEDE76-4017-466D-BDE9-5D3E72EED32C
   FE06810E-CAFB-4F02-A65B-F35190236D02
   D08B4B63-1A30-4D54-AAAA-F1DF3A8CFF42
   53FE12C2-4429-488F-847B-7B285F8F6778
   F87141CE-278D-49A0-AE0A-C33EBB863537
   96F8931D-BB55-41DE-9AF7-257A7EB43D2A
   F039C188-D8C7-4B6E-B6CC-A5E789B11329
   D6848354-33D9-4E22-B94D-91A727129920
   48D8CC16-82FD-4C1B-B3FF-F706C8E75399
   7165223D-D2C9-422B-8126-411B11842B8B
   AppID\53E30863-280F-4CFA-99AB-55CAEB95271C
   HKEY_CURRENT_USER\Software\Malware Bell
   AppID\BC37F38C-D37C-46FC-AC8D-93ABBCE72947
   BC37F38C-D37C-46FC-AC8D-93ABBCE72947
   8F26EAA1-D8B4-41A2-994F-704AEEE25536
   EA3D41AC-9334-48AD-B582-19F2ADEB5C6A
   cuskina.AVideo
   D810B78A-D010-44DF-8445-AC58086B600E
   e413a417-d00b-4a3b-9c17-19048046f1ce
   935B484A-86A2-4D5D-A8D6-34B18AF7A0A3
   winsurf.AVideo
   AppID\ps16sys.dll
   53E30863-280F-4CFA-99AB-55CAEB95271C
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Malware Bell 3.2
   

5. If your homepage has been changed, go to Start > Control Panel > Internet Options > click on the General > click Use Default under Home Page. Add the your desired default homepage, then click Apply > click OK. Open a new web browser to check that you have your desired default homepage.
6. Remove Malware Bell Directories.
   To find Malware Bell directories, go to Start > My Computer > Local Disk (C:) > Program Files > Show the contents of this folder.

   Search and delete the following Malware Bell directories:
   %ProgramFiles%\MalwareBell
   

   Right-click on the Malware Bell folder and select Delete.

   A message will appear saying ‘Are you sure you want to remove the folder Malware Bell and move all its contents to the Recycle Bin?’, click Yes.
   Another message will appear saying ‘Renaming, moving or deleting Malware Bell could make some programs not work. Are you sure you want to do this?’, click Yes.

7. To remove Malware Bell icons on your Desktop, drag and drop them to the Recycle Bin.

You’ve completed the Malware Bell manual removal instructions!
I hope this article has helped you solve your Malware Bell problems. If you want to contribute to this article, post your comment below.

Disclaimer: This article is for educational purposes. By using this information you agree to be bound by the disclaimer. There’s no guarantee that Malware Bell will be completely removed from your computer. Seek professional help if your computer continues to experience problems.

Did You Find this Article Helpful?

Subscribe to Spyware Techie for more!

Or get latest articles to your via email:

Read Other Random Posts

• Asafetyalways.com Removal Guide
• PC Defender 2008 Removal Guide
• Virus Remover Professional Removal Guide
• Astrum Antivirus Pro Removal Guide