What is Clearsearch and how to remove this spyware
ClearSearch is a malicious adware parasite that displays undexpected commercial advertisements and pop-ups and records addresses of user visited web sites. It also changes Internet Explorer default web search settings and the address bar behavior in order to redirect a user to undesirable web sites or display advertising content. ClearSearch can be manually installed. It can also get into the system along with some ad-supported software. The parasite is able to update itself via the Internet. It silently runs on every Windows startup.
How to remove Clearsearch - Remove Clearsearch
Instructions
|
Kill the following processes 25215765.exe, 66119866.exe, 81133648.exe, clrschuninstall.exe, csp001[1].exe, csv10p070.exe, csv12p108.exe, djtopr1150.exe, jy0458in.exe, loader.exe, fnuninstaller.exe, ss_revco16_setup.exe, clrschp038[1].exe, csv7p88.exe, clrschp010.exe |
|
Unregister the following DLLs and reboot 5cs90ksg.dll, csaolinst.dll, csbb.dll, csie.dll, csieinst.dll, csldrupdater.dll, csuninst.dll, jy0458in.dll, update_removeold.dll, update_rsp.dll.
bi.dll, clrschieplugin.dll, csbi.dll, csie16.dll, csie32.dll, cssb.dll, csss.dll, cszt.dll, ie_clrsch.dll, ss.dll in Program Files\clearsearch\
csiehookinst.dll in Program Files\csbb\
csie16.dll, csie32.dll in Program Files\lycos\ieagent\
ietie.dll in Windows\system32\
|
|
Delete these registry entries HKEY_CLASSES_ROOT\clsid\
HKEY_CLASSES_ROOT\ie_clrsch.iehooks
HKEY_CLASSES_ROOT\interface\
HKEY_CLASSES_ROOT\typelib\
HKEY_LOCAL_MACHINE\software\clrsch
HKEY_LOCAL_MACHINE\software\clrsch\accessstatus
HKEY_LOCAL_MACHINE\software\clrsch\contextsidebar\closed
HKEY_LOCAL_MACHINE\software\clrsch\contextsidebar\day
HKEY_LOCAL_MACHINE\software\clrsch\contextsidebar\hour
HKEY_LOCAL_MACHINE\software\clrsch\contextsidebar\masterday
HKEY_LOCAL_MACHINE\software\clrsch\contextsidebar\masterhour
HKEY_LOCAL_MACHINE\software\clrsch\contextsidebar\shutdown
HKEY_LOCAL_MACHINE\software\clrsch\control
HKEY_LOCAL_MACHINE\software\clrsch\controlchecksum
HKEY_LOCAL_MACHINE\software\clrsch\country
HKEY_LOCAL_MACHINE\software\clrsch\directory
HKEY_LOCAL_MACHINE\software\clrsch\failurecount
HKEY_LOCAL_MACHINE\software\clrsch\guid
HKEY_LOCAL_MACHINE\software\clrsch\loader\install_id
HKEY_LOCAL_MACHINE\software\clrsch\loader\nextupdate
HKEY_LOCAL_MACHINE\software\clrsch\loader\version
HKEY_LOCAL_MACHINE\software\clrsch\promo
HKEY_LOCAL_MACHINE\software\clrsch\resolvers\resolver
HKEY_LOCAL_MACHINE\software\clrsch\resolvers\resolvermax
HKEY_LOCAL_MACHINE\software\clrsch\resolvers\status0
HKEY_LOCAL_MACHINE\software\clrsch\resolvers\status1
HKEY_LOCAL_MACHINE\software\clrsch\resolvers\status2
HKEY_LOCAL_MACHINE\software\clrsch\resolvers\status3
HKEY_LOCAL_MACHINE\software\clrsch\resolvers\status4
HKEY_LOCAL_MACHINE\software\clrsch\resolvers\status5
HKEY_LOCAL_MACHINE\software\clrsch\resolvers\status6
HKEY_LOCAL_MACHINE\software\clrsch\ronsidebar\closed
HKEY_LOCAL_MACHINE\software\clrsch\ronsidebar\cycle
HKEY_LOCAL_MACHINE\software\clrsch\ronsidebar\day
HKEY_LOCAL_MACHINE\software\clrsch\ronsidebar\hour
HKEY_LOCAL_MACHINE\software\clrsch\ronsidebar\masterday
HKEY_LOCAL_MACHINE\software\clrsch\ronsidebar\masterhour
HKEY_LOCAL_MACHINE\software\clrsch\ronsidebar\shutdown
HKEY_LOCAL_MACHINE\software\clrsch\sidebar\sidebar
HKEY_LOCAL_MACHINE\software\clrsch\sidebar\sidebarmax
HKEY_LOCAL_MACHINE\software\clrsch\sidebar\status0
HKEY_LOCAL_MACHINE\software\clrsch\sidebar\status1
HKEY_LOCAL_MACHINE\software\clrsch\sidebar\status2
HKEY_LOCAL_MACHINE\software\clrsch\sidebar\status3
HKEY_LOCAL_MACHINE\software\clrsch\sidebar\status4
HKEY_LOCAL_MACHINE\software\clrsch\sidebar\status5
HKEY_LOCAL_MACHINE\software\clrsch\sidebar\status6
HKEY_LOCAL_MACHINE\software\clrsch\spidersidebar\closed
HKEY_LOCAL_MACHINE\software\clrsch\spidersidebar\day
HKEY_LOCAL_MACHINE\software\clrsch\spidersidebar\minute
HKEY_LOCAL_MACHINE\software\clrsch\spidersidebar\shutdown
HKEY_LOCAL_MACHINE\software\clrsch\spidersidebar\specificday
HKEY_LOCAL_MACHINE\software\clrsch\spidersidebar\specificminute
HKEY_LOCAL_MACHINE\software\clrsch\updatetime
HKEY_LOCAL_MACHINE\software\clrsch\urlsidebar\closed
HKEY_LOCAL_MACHINE\software\clrsch\urlsidebar\day
HKEY_LOCAL_MACHINE\software\clrsch\urlsidebar\hour
HKEY_LOCAL_MACHINE\software\clrsch\urlsidebar\masterday
HKEY_LOCAL_MACHINE\software\clrsch\urlsidebar\masterhour
HKEY_LOCAL_MACHINE\software\clrsch\urlsidebar\shutdown
HKEY_LOCAL_MACHINE\software\csbb
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\csv10p1
|
|
Remove the following files 25215765.exe, 5cs90ksg.dll, 66119866.exe, 81133648.exe, clearsearch.txt, clrschuninstall.exe, control.dat, csaolinst.dll, csbb.dll, csie.dll, csieinst.dll, csie_checks.dat, csie_edomains.dat, csie_srchrule.dat, csldrupdater.dll, csp001[1].exe, csuninst.dll, csv10p070.exe, csv12p108.exe, djtopr1150.exe, jy0458in.dll, jy0458in.exe, loader.exe, update_removeold.dll, update_rsp.dll.
clrschp038[1].exe in Documents and Settings\UserName\local settings\temporary internet files\content.ie5pcv4roj\
fnuninstaller.exe, ss_revco16_setup.exe in Documents and Settings\UserName\local settings\temp\clrsch\
bi.dll, clrschieplugin.dll, csbi.dll, csie16.dll, csie32.dll, cssb.dll, csss.dll, cszt.dll, ie_clrsch.dll, ss.dll in Program Files\clearsearch\
csiehookinst.dll, csv7p88.exe in Program Files\csbb\
csie16.dll, csie32.dll in Program Files\lycos\ieagent\
ietie.dll in Windows\system32\
clrschp010.exe in Windows\temp\
|
|
Remove the following directories Documents and Settings\UserName\local settings\temp\clrsch
Documents and Settings\UserName\local settings\temp\csbb1
Program Files\csbb\csbb1
Windows\temp\clrsch
| |