Bulla

Overview

Summary

Bulla is a Browser Helper Object for Internet Explorer. It tries to search all pages you view in IE and replaces banner advertisements from the page with advertisements from its controlling servers.

Alias

Also known as IEPlugin,from the filename of the BHO DLL. This is a generic name;Bulla has nothing to do with the parasite known as IEPlugin.,

Category

Browser Helper Object: (BHO). A component that Internet Explorer will load whenever it starts, shares IE's memory context, can perform any action on the available windows and modules. A BHO can detect events, create windows to display additional information on a viewed page, monitor messages and actions. Microsoft calls it "a spy we send to infiltrate the browser's land." BHOs are not stopped by personal firewalls, because they are seen by the firewall as your browser itself. Some exploits of this technology search all pages you view in IE and replace banner advertisements with other ads. Some monitor and report on your actions. Some change your home page.

Adware: Software that displays popup/popunder ads when the primary user interface is not visible or which do not appear to be assocaited with the product.

Hijacker: Any software that resets your browser's settings to point to other sites. Hijacks may reroute your info and address requests through an unseen site, capturing that info. In such hijacks, your browser may behave normally, but be slower.

Search Hijacker: Any software that resets your browser's settings to point to other sites when you perform a search. Hijacks may reroute your info and address requests through an unseen site, capturing that info. In such hijacks, your browser may behave normally, but be slower. Search results when such a hijacker is running will sometimes differ from non-hijacked results.

Reasons For Retention

Changes browser settings other than homepage, without user permission.

Origins

Group

Bulla

URL

http://www.bulla.com/

Date of Origin

November, 2002

Detection and Removal

Manual Removal

There is no uninstall feature. Bulla installs a filecalled IEPlugin.dll into your System directory. Beforeyou can delete it you must deregister it. Enter thefollowing command in a command (DOS) window, for Windows95/98/Me:

"%WinDir%\SYSTEM\regsvr32.exe" /u "%WinDir%\System\IEPlugin.dll"

Or, for Windows NT/2000/XP:

regsvr32 /u "%WinDir%\System32\IEPlugin.dll"
Then restart the computer and open the System(32) directoryin the Windows folder. Delete the IEPlugin.dll file.You can also delete the key HKEY_LOCAL_MACHINE\Software\IEPluginfrom the registry (run'regedit') to clean up if youwish.

Clean Registry:

Remove these registry items (if present) with RegEdit:

Remove Files:

Remove these files (if present) with Windows Explorer:

Restore Settings:

After following the instructions above, you will still need to restore your original settings and prevent this from happening again.

Buero Bufferoverflowinqwsv.exeandqwcl.exe BugScanner Bugs BugsBunny Bulla Bundy1.1 Burglar BurnForNetWare BurnabyModule