Limited Time!
Totally FREE Web Design!
Click here!

Parasite: E2Give

This record last updated Tue Sep 20 2005 00:34:15

PLEASE NOTE: Due to the overwhelming extent of this problem and the unbelievable volume of email we have received, we regret that we cannot respond to questions about browser parasites at this time. If you have attempted to contact us about this parasite please accept our apology for not responding. "Thank you's" are always appreciated ;-)

Description

E2Give is an Internet Explorer Browser Helper Object that redirects accesses to web merchants in order to claim their affiliate fees.

Variants

E2Give/E2GBHO is an early version distributed form December 2002. Its main file is e2gbho.dll, stored in an ‘E2Give’ folder in Program Files.

E2Give/IeBHOs is a newer variant, main file iechos.dll, stored in a folder called ‘E2G’ in the root of the C: drive.

Distribution

Installed by ActiveX drive-by download, believed to be used in pop-up advertisements.

What it does

Advertising

No.

Privacy violation

Not known.

Security issues

Not known.

Stability problems

No, though it can make opening new Windows Explorer windows very slow.

Removal

The E2GBHO variant has an entry in the Control Panel’s Add/Remove Programs feature — choose ‘E2Give Browser Add On’

Manual removal

Open a DOS command prompt window (from Start->Programs->Accessories), and enter the following commands, for the E2GBHO variant:

cd "%WinDir%\System"
regsvr32 /u "\Program Files\E2Give\e2gbho.dll"

Or, for the IeBHOs variant:

cd "%WinDir%\System"
regsvr32 /u "C:\E2G\iebhos.dll"

Restart the computer and you should be able to delete the folder ‘E2Give’ in Program Files (E2Give variant), or ‘E2G’ in the C: drive (IeBHOs variant).

You can also open the registry (Start->Run->regedit) and delete the key HKEY_LOCAL_MACHINE\SOFTWARE\E2Give to clean up, if you like.

Links

E2Give official site.