BrowserProxy4 Spyware Profile

BrowserProxy4 is a spyware program that goes by many other names and is used by several spyware vendors, notably (not to be confused with the website rating site) and IShowBao.  It comes typically in a bundle of other spyware and adware programs and originates from China.

BrowserProxy4 disguises itself as part of the Google Toolbar.  It is a Trojan Downloader and can download advertisements and other malware programs.  Depending on which vendor gave you the infection, it either downloads advertisements and malware from,, or another website.

BrowserProxy4 uses unethical installation techniques and has no End User Licensing Agreement.  It has a rootkit (a form of malware), and does not come with a standard uninstaller.  This clearly makes it malicious software.

If your computer is infected with BrowserProxy 4, we recommend that you remove it immediately.  We discourage manual removal, since it is a highly technical and potentially dangerous process for your computer.  We recommend that you use an antispyware program to remove this infection.  ZookaWare PC Cleaner is our highest recommended software for this purpose.

Also Known As:
Alxtool, IshowBao, Trojan.Bhong,
Google Bar, AdWare.Win32.AlexaBar.k,
Dratawl, VBS.Bhong.A,
Alexa Toolbar, Caijing

Associated Files:
%systemdir%AlxTbl.dll, AlxTool.dll,
[%SYSTEM%]driversispvcr.sys, [%SYSTEM%]driversispvcr.sys__
[%SYSTEM%]driverstdac.sys, [%SYSTEM%]
HKEY_CLASSES_ROOTclsid {6cf4d74b-e6bd-4c8f-83d7-90d6439705b9},
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorerbrowser helper objects {6cf4d74b-e6bd-4c8f-83d7-90d6439705b9},
HKEY_CLASSES_ROOTclsid {bcf4d74b-e6bd-4c8f-83d7-90d6439705b9},
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorerbrowser helper objects {bcf4d74b-e6bd-4c8f-83d7-90d6439705b9},
HKEY_CLASSES_ROOTad.setad, HKEY_CLASSES_ROOTbrushalx.brashset,
HKEY_CLASSES_ROOTclsid {607e95a1-8f89-4343-b9bc-2efc2b291bb4},
HKEY_CLASSES_ROOTclsid {bcf4d74b-e6bd-4c8f-83d7-90d6439705b9},
HKEY_CLASSES_ROOTinterface {8409d387-4567-4476-9304-94442bd4bae9},
HKEY_CLASSES_ROOTinterface {8c2e9bc3-b172-4cc0-a74f-2ce206ea45ac},
HKEY_CLASSES_ROOTtypelib {1ffe957b-16db-43ef-9702-9cf40a9472ec},
HKEY_CLASSES_ROOTtypelib {fc387a2b-1103-4e9a-81a9-323c5dcfe671},
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorerbrowser helper objects {607e95a1-8f89-4343-b9bc-2efc2b291bb4},
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorerbrowser helper objects {bcf4d74b-e6bd-4c8f-83d7-90d6439705b9}

Download Free Scan
Cyberlab runs on Windows Vista, 7, 8 and 10. It has no ads, popups or bundled software and fully uninstalls by clicking Start > All Programs > select Cyberlab and click Uninstall.

Leave a Reply

Your email address will not be published.