Removing "DSSAgent" - DSSAgent.exe

This section provides a tutorial example on remove spyware 'DSSAgent' and related files webspec.dll.

Symptom: Unknown.

HijackThis Report:

O4 - HKLM\..\Run: [DSS] C:\WINDOWS\BBSTORE\DSS\DSSAGENT.EXE

Quick Research: I did a Google search on "C:\WINDOWS\BBSTORE\DSS\DSSAGENT.EXE" and located a good description from http://archive.salon.com/tech/col/garf/2000/06/15/brodcast/:

... The program itself had been hidden deep within my Windows 
directory, apparently designed to look like a system file. Further
investigation revealed that the DSSAgent had been written by 
Broderbund and had been installed when my daughter loaded an 
Arthur's Reading Race CD-ROM onto my laptop the previous weekend.

There were thunderstorms over my destination, so while my jet ran 
racetracks in the sky, I fired up some tools and started pulling 
apart the DSSAgent program. I discovered that the DSSAgent 
contained a copy of the developer's kit for the Pretty Good Privacy
encryption system, that it contained the ability to send e-mail and
post forms to Web pages and that its creators had gone to great 
lengths to hide the software's function. And there was no copyright
message indicating who had written the program...

What I Did:

1. Looked at C:\WINDOWS\BBSTORE, found the directory, and deleted it:

>dir C:\WINDOWS\BBSTORE\DSS
   DSSAGENT.EXE
   ...

>rmdir C:\WINDOWS\BBSTORE
   .\DSS\*.* removed
   .\ScopeUsr\Software\The learning company\education division
      \arthur's preschool

So the software, "arthur's preschool", is also removed. I guess this spyware was actually distributed as part "arthur's preschool".

2. Run "Start" > "Control Panel" > "Add and remove programs", found "Authur's Preschool", and removed it.

Result: DSSAgent is gone.

Table of Contents

 About This Windows Security Book

 Windows 8: System Security Review

 Windows 8: System Security Protection

 Windows 8 System Recovery

 Windows 8 Defender for Real-Time Protection

 Windows 7: System Security Review

 Windows 7: System Security Protection

 Windows 7 System Recovery

 Windows 7 Forefront Client Security

 Norton Power Eraser - Anti-Virus Scan Tool

 McAfee Virus and Malware Protection Tools

 Spybot - Spyware Blocker, Detection and Removal

 Keeping Firefox Secure

 Keeping IE (Internet Explorer) Secure

 Malware (Adware, Spyware, Trojan, Worm, and Virus)

 HijackThis - Browser Hijacker Diagnosis Tool

 IE Add-on Program Listing and Removal

 "Conduit Search" - Malware Detection and Removal

 "Tube Dimmer", "Scorpion Saver" or "Adpeak" Malware

Malware Manual Removal Experience

 Removing Malware "Social Privacy DNS"

 Removing "WebBar" - htwtb.bin and bar.dll

 Removing "SurfBuddy" - sbuddy.dll

 Removing "WebSpecials" - webspec.dll

Removing "DSSAgent" - DSSAgent.exe

 Removing "Best Offer" - farmmext.exe

 Removing "dinst.exe" - dsr.dll

 Removing "deSrcAs.dll" - MyWay Search Assistant

 WinAntiVirusPRO 2006 Faked Security Popup

 WinFixer 2006 Faked Security Popup

 Removing "WinFixer" - Rogue Security Popups

 Vundo (VirtuMonde/VirtuMundo) - vtsts.dll Removal

 Trojan and Malware "Puper" Description and Removal

 VSToolbar (VSAdd-in.dll) - Description and Removal

 PWS (Password Stealer) Trojan Infection Removal

 MS08-001 Vulnerability on Windows Systems

 Antivirus System PRO

 References

 Full Version in PDF/ePUB