BuddyPicture

Overview

BuddyPicture uses a security bug in Internet Explorer that allows them to install the software automatically. WARNING, apply the MS03-040 patch from Microsoft to fix this bug before you enter BuddyPicture's web site.

From the developer: "By entering the site, http://www.buddypicture.net, you agree that you authorize an automatic install of our adware which will create a link to buddypicture.net, in place of your current America Online Instant Messenger (AIM) profile. The adware will automatically install a file called b.exe on your computer. This program IS NOT a virus, worm, nor trojan horse. It is simply adware. This file will not harm your computer nor will it delete your files. If you would like to uninstall our adware at any time, please read the directions at the bottom of this disclaimer page." Source

Files

a.exe, av.exe, b.exe

If you have any of the files related to BuddyPicture on your system, please send them for additional analysis. Generally, I have only analysed a few versions for each software component listed at this web site. With your help I will be able to look at both old and more recent versions of the BuddyPicture software. Thank you very much for your time!

Vendor

www.buddypicture.net whois

Classification

Worm

Privacy policy

No privacy policy available.

Detection

Bazooka Adware and Spyware Scanner detects BuddyPicture. Bazooka is freeware and detects spyware, adware, foistware, trojan horses, viruses, worms and other potentially unwanted applications. Read more »

Uninstall BuddyPicture with FreeFixer

I'm working on a general purpose tool for removing unwanted software. The tool is called FreeFixer and can help you remove unwanted Browser Helper Objects, Internet Explorer toolbars and software that starts automatically when you reboot your computer, so it can offer some assistance while uninstalling BuddyPicture. The manual removal instructions listed below will help you to identify what to delete with FreeFixer.

Read more about FreeFixer.

Manual removal

Please follow the instructions below if you would like to remove BuddyPicture manually. Please notice that you must follow the instructions very carefully and delete everything that is mentioned. In most cases the removal will fail if one single item is not deleted. If BuddyPicture remains on your system after stepping through the removal instructions, please double-check by stepping through them again.

1. Start the Windows Task Manager.
   On Windows 95/98/ME systems, press CTRL+ALT+DELETE
   On Windows NT/2000/XP systems, press CTRL+SHIFT+ESC, then click the Processes tab.
2. (*) In the list of running programs, select one of the following:
   a.exe, av.exe, b.exe.
3. Press either the End Task or the End Process button, depending on the version of Windows on your system.
4. Repeat (*) until none of the processes listed at (*) are running.
5. Exit the Windows Task Manager.
6. Start the registry editor. This is done by clicking Start then Run. (The Run dialog will appear.) Type regedit and click OK. (The registry editor will open.)
7. Browse to the key:
   'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run'
8. In the right pane, delete the value called 'Antivirus', if it exists.
9. Exit the registry editor.
10. Restart your computer.
11. Delete the following files:
    c:\a.exe
    c:\av.exe
    %WinDir%\av.exe
    %WinDir%\b.exe
    Note: %WinDir% is a variable (?). By default, this is C:\Windows (Windows 95/98/Me/XP) or C:\WINNT (Windows NT/2000).
12. Start Microsoft Internet Explorer.
13. In Internet Explorer, click Tools -> Internet Options.
14. Click the Programs tab -> Reset Web Settings.
    

Problems uninstalling? Click here.

I'm looking for your help!

Thank you for using my site, I hope you find it useful. I'm looking for help from all users, please read more.

Contact information for BuddyPicture's vendor

In order to provide correct, accurate and updated information about BuddyPicture I encourage the vendor to contact me if any part of this write-up needs a revision.