What is Marketscore and how to remove this spyware
MarketScore (also known as Netsetter) is a proxy service which claims to increase the speed of your internet connection. It is installed through ActiveX at MarketScore's site, heavily pushed by MarketScore affiliates. It runs at startup to ensure all your web connections are routed through MarketScore's proxies. (I did not observe any significant speedup from using the service.)
How to remove Marketscore - Remove Marketscore
Instructions
|
Kill the following processes nsosscfg.exe, nscheck.exe, mksc.exe, ossproxy.exe |
|
Unregister the following DLLs and reboot csloa.dll, okshook.dll, osconfig.dll, osmim.dll, osrouter.dll in Windows\system32\
|
|
Delete these registry entries HKEY_CLASSES_ROOT\clsid\
HKEY_CLASSES_ROOT\interface\
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\nscheck
HKEY_CURRENT_USER\software\netsetter
HKEY_CURRENT_USER\software\netsetter\ossproxy\settings
HKEY_LOCAL_MACHINE\software\classes\clsid\
HKEY_LOCAL_MACHINE\software\classes\interface\
HKEY_LOCAL_MACHINE\software\classes\nsconfig.nsbrowserconfig
HKEY_LOCAL_MACHINE\software\classes\nsconfig.nsbrowserconfig.2
HKEY_LOCAL_MACHINE\software\classes\nsconfig.nsbrowserconfig\clsid
HKEY_LOCAL_MACHINE\software\classes\nsconfig.nsbrowserconfig\curver
HKEY_LOCAL_MACHINE\software\classes\typelib\
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\\installer
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\\systemcomponent
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\
HKEY_LOCAL_MACHINE\software\microsoft\systemcertificates\root\certificates\a32c2b8361ca79fb7dcd14cbda793d0df855991c\blob
HKEY_LOCAL_MACHINE\software\microsoft\systemcertificates\root\certificates\f8d953700e84f3945390c81a1a3bf929c8a29eb7\blob
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/winnt/downloaded program files/nsconfig.dll\.owner
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/winnt/downloaded program files/nsconfig.dll\
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/winnt/system32/csloa.d__\.owner
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/winnt/system32/csloa.d__\
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/winnt/system32/okshook.dll\.owner
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/winnt/system32/okshook.dll\
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/winnt/system32/osconfig.dll\.owner
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/winnt/system32/osconfig.dll\
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/winnt/system32/osmim.dll\.owner
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/winnt/system32/osmim.dll\
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/winnt/system32/ossproxy.ex_\.owner
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/winnt/system32/ossproxy.ex_\
HKEY_LOCAL_MACHINE\software\netsetter\osmim
|
|
Remove the following files marketscore.txt, nsosscfg.exe.
csloa.dll, mksc.exe, okshook.dll, osconfig.dll, osmim.dll, osrouter.dll, ossproxy.exe in Windows\system32\
nscheck.exe, nscheck.lgc in Windows\system\
| |