spyware removal instructions

BearShare removal

Spyware BearShare Information
Name: BearShare
Category: P2P
Date: 2004-08-07
Dangerous: Yes
BearShare is a peer-to-peer application. Itself it is not a spyware or adware, but you should be careful with it as with any other "free" software. They have to make money as everybody else and they do that. They get paid for every adware or spyware parasite install, which comes bundled with BearShare file-sharing software. So in reality you "pay" them by getting excessive pop-ups, hijacked search strokes and other nasty deeds you don´ want to see and would rather chose to avoid. If you already have BearShare installed on your computer, install an anti-spyware product and perform a full system scan for parasites.
>> Delete BearShare automatically - Download SpyHunter

BearShare Removal Instructions
Kill the following processes
bsinstallit.exe, bearsh~1.exe, bearshare.exe, bsproinstall.exe
Unregister the following DLLs and reboot
bearshare.dll, bsidle.dll in Program Files\bearshare\
Delete these registry entries
HKEY_CLASSES_ROOT\clsid\{905d0df2-3a0a-4d94-853c-54a12a745905}
HKEY_CLASSES_ROOT\clsid\{9f95f736-0f62-4214-a4b4-caa6738d4c07}
HKEY_CLASSES_ROOT\gnufile
HKEY_CLASSES_ROOT\typelib\{905d0df2-3a0a-4d94-853c-54a12a745905}
HKEY_CURRENT_USER\appevents\eventlabels\bearsharechatnotifymsg
HKEY_CURRENT_USER\appevents\schemes\apps\bearshare
HKEY_LOCAL_MACHINE\software\bearshare
HKEY_LOCAL_MACHINE\software\bearshare\installdir
HKEY_LOCAL_MACHINE\software\classes\clsid\{558ec983-bedb-9168-b2de-31dbf0ee543e}
HKEY_LOCAL_MACHINE\software\classes\ed2k
HKEY_LOCAL_MACHINE\software\classes\ed2k\defaulticon
HKEY_LOCAL_MACHINE\software\classes\ed2k\shell\open\command
HKEY_LOCAL_MACHINE\software\classes\ed2k\shell\open\ddeexec
HKEY_LOCAL_MACHINE\software\classes\ed2k\url protocol
HKEY_LOCAL_MACHINE\software\classes\gnu
HKEY_LOCAL_MACHINE\software\classes\gnu\defaulticon
HKEY_LOCAL_MACHINE\software\classes\gnu\shell\open\command
HKEY_LOCAL_MACHINE\software\classes\gnu\url protocol
HKEY_LOCAL_MACHINE\software\classes\gnufile\browserflags
HKEY_LOCAL_MACHINE\software\classes\gnufile\editflags
HKEY_LOCAL_MACHINE\software\classes\gnufile\shell\open\command
HKEY_LOCAL_MACHINE\software\classes\gnutella
HKEY_LOCAL_MACHINE\software\classes\gnutella\defaulticon
HKEY_LOCAL_MACHINE\software\classes\gnutella\shell\open\command
HKEY_LOCAL_MACHINE\software\classes\gnutella\shell\open\ddeexec
HKEY_LOCAL_MACHINE\software\classes\gnutella\url protocol
HKEY_LOCAL_MACHINE\software\licenses\{056b3cf0d9ab991e1}
HKEY_LOCAL_MACHINE\software\licenses\{i56b3cf0d9ab991e1}
HKEY_LOCAL_MACHINE\software\magnet\handlers\bearshare
HKEY_LOCAL_MACHINE\software\magnet\handlers\bearshare\ddeapplication
HKEY_LOCAL_MACHINE\software\magnet\handlers\bearshare\ddetopic
HKEY_LOCAL_MACHINE\software\magnet\handlers\bearshare\defaulticon
HKEY_LOCAL_MACHINE\software\magnet\handlers\bearshare\description
HKEY_LOCAL_MACHINE\software\magnet\handlers\bearshare\shellexecute
HKEY_LOCAL_MACHINE\software\magnet\handlers\bearshare\type\urn:bitprint
HKEY_LOCAL_MACHINE\software\magnet\handlers\bearshare\type\urn:sha1
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5f95e1af-2620-4f15-bdf9-7fdce4607e17}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5f95e1af-2620-4f15-bdf9-7fdce4607e17}\componentid
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5f95e1af-2620-4f15-bdf9-7fdce4607e17}\isinstalled
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5f95e1af-2620-4f15-bdf9-7fdce4607e17}\locale
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5f95e1af-2620-4f15-bdf9-7fdce4607e17}\version
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\bearshare
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\bearshare
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\bearshare\displayicon
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\bearshare\displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\bearshare\displayversion
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\bearshare\helplink
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\bearshare\publisher
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\bearshare\uninstallstring
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\bearshare\urlinfoabout
HKEY_USERS\.default\appevents\eventlabels\bearsharechatnotifymsg
HKEY_USERS\.default\appevents\schemes\apps\bearshare
Remove the following files
bearshare.dat, bearshare.exe-2a0c795d.pf, bsinstallit.exe, bsproinstall.exe-09623c04.pf, connect.dat, connect.txt, console.txt, glb4.tmp-2f6bfa1a.pf, gnucache.dat, hbcache.dat, history.txt, hostiles.txt, install.log, library.dat, memory.txt, ordinal.txt.
bearshare downloads.lnk, bearshare.lnk in Desktop\
bearshare.dll, bearshare.exe, bsidle.dll, freepeers.ini, webstats.bat, webstats.ini in Program Files\bearshare\
config.bin in Program Files\bearshare\db\
index.htm in Program Files\bearshare\html\
bsproinstall.exe in Program Files\bearshare\installer\
bearsh~1.exe in Program Files\bearsh~1\
bearshare.lnk in Program Files\Common Files\
Remove the following directories
Program Files\bearshare

Bookmark BearShare page

Visitor Comments on BearShare
2007-01-12 20:53:49, Guest:
this used to work with no adware or viruses but then everthing got skrewed :S
2007-06-15 16:41:17, Guest:
bearshare also adds- mi1.exe and mi2.exe into C:/windows system32. these files remain after uninstallation. I don't know whether they are harmful or whether they are safe to remove... can't find info on these files anywhere....
2008-04-05 06:26:50, Guest:
Do a system search of Bearshare and then bearshare and delete those files and you should get the darn thing off of your system. This is what finally worked for me...
2008-04-27 10:26:25, Guest:
The above advice worked for me too. THANKYOU! I went back into My Computer/ Add or remove after deleting the searched items and it removed it there too.
2009-03-03 21:21:42, Guest:
It worked for me .Thank you so much!!!
2009-03-17 00:28:42, Guest:
i dont wanna have bearshare no more because its not working on my pc
2009-04-03 16:55:39, Guest:
how do I delete registry stuff? i just got my first own computer lol
2009-04-06 07:43:22, Guest:
to get to the registry, start run > regedit
2009-05-25 02:32:29, Guest:
Is it just me or is everyone suffering from bershare 5 not working?
2009-06-19 14:05:17, Guest:
How do i find and unregister the dll's?
2009-11-10 15:09:07, Guest:
I did a system search and deleted all bearshare stuff but i cant remove it from the control panel
2010-01-27 13:07:27, Guest:
this is the worst program ever. It is not being uninstalled even though i uninstall it.it also prevents my computer from shutting down.Help this BearShare is driving me nuts!
2010-03-03 04:15:33, Guest:
Sharebear is a disgusting site. I had the most perverted people sending me filthy messages. Parents beware and make sure your children do not use it as they will be exposed to sexually explicit material. I can not warn you enough about this disgracefull site.
2010-05-08 00:35:38, Guest:
i want to remove bearshare search from my pc
2010-06-12 03:18:45, Guest:
i hate bearshare. its the most disgusting site i have ever seen so be careful of it.
2010-06-20 23:59:27, Guest:
Every time I try to search something it pulls up Bearshare search and it is SO annoying!
2010-07-13 09:29:57, Guest:
I had to call DELL help and pay 129.00 for removal. They used some spyware removal thing.This terrible thing grabbed my internet explorer and stopped me from going on the internet-whoever these peopole are should be sued!!
2010-09-06 10:57:51, Guest:
wish i had known this before hand. i can't get mine to uninstall
2010-09-26 09:23:06, Guest:
Bearshare ads are misleading as they are not free and if you don't pay after a while your computer will not play music because of licensing pop up.
2010-10-03 08:53:33, Guest:
how do you find all the things above so you can delete it?
2010-10-26 08:13:15, Guest:
I really hate Bearshare and I cant delete it off my laptop, however hard I try! :(
2010-11-07 14:05:45, Guest:
i am anti bearshare. in fact, i just threw up and it was bearshare. because it's taken over everything.
2010-11-10 21:53:13, Guest:
2010-10-03 08:53:33, Guest:
how do you find all the things above so you can delete it?
--------------------------------------------------------------------------------
Kill processes: Open Task Manager (right click your task bar and select Task Manager from the drop down menu)
Under Processes tab, locate the processes listed, highlight each in turn, and click End Process button. If you cannot find these processes, don't worry.
For registry entries: Use regedit. I won't tell you more, as this requires great care, and if you don't already know how, you need the help of a professional. (Or at least, your neighbourhood Geek!)
2010-11-18 16:52:44, Guest:
when i try to delete it it freezes it was also the worst thing ever! it froze my computer and screwed me OVERR.i want to sue them! UGH
2010-11-22 08:28:41, Guest:
i got rid of by doing a system search and found it named bearshear media bar. then there is a removel program with it.. i did that and got rid of all of bearshares applications.

2010-12-13 04:09:11, Guest:
Hi I have deleted all files through system search as suggested All files now gone but I still have IT as coming up as seach engine when I click for google crome what do I DO TO FIX IT!! Any suggestions?
2010-12-27 00:33:50, Guest:
i,m new on the internet and downloaded bearshare and it's infected my p.c, not happy! so how do i get it fixed and who can i trust to fix it. the net appears to be to be totally corrupt.
2010-12-31 16:08:16, Guest:
it really slows down my computer
2011-01-02 13:44:11, Guest:
I deleted Limewire and decided to try Bearshare and I am seriously gettin pissed with it now. I deleted every file I could find and also everything in regedit but its still comin up as the search engine.
2011-01-11 21:53:33, Guest:
OMG bearshare made my computer stop working straight after i installed it. can someone please help me uninstall it ? :'(
2011-01-15 09:01:31, Guest:
I just successfully uninstalled bearshare. If you have tried to remove the programme by uninstalling in the control panel and keep getting a message that it is open and cant uninstall check your right bottom icons for the bear head. Right click on it and select exit. After i did this I was able to uninstall the programme completely. Hope this helps :)
2011-01-18 04:48:50, frank:
I found that when installed it became a search engine along side Google so when I tried to go onto the net they fought for position and I could not get my browser on line.So I went into programmes and uninstalled google and that stopped the conflict and I could get on line. I then wanted to get rid of Bearshare bearshare so I searched for both one after the other and then deleted each programme, that worked but I still have bearsharemediabartb bearshareAplication bearshareMediaDx.d11 and Tb.d11 on my system and I cant get rid of the Bear Logo or Bearshare out of my search engine box when I go on line. Any ideas anyone
2011-01-21 09:07:07, Guest:
Please uninstall BearShare media bar and perform the following:・ 1. Go to: 'Start > Control Panel > Add/Remove Program'. ・ 2. Remove 'Media Bar 2.0'
2011-01-27 15:31:55, Guest:
I successfully uninstalled Bearshare but the search engine was there no matter what I did.I recently uninstalled Yahoo toolbar then went back and re-installed it.While installing it asked for search engine selection.I selected Yahoo.So far only Yahoo search engine comes up.Fingers crossed.Hope this helps someone.
2011-02-17 01:51:50, Guest:
Guest's directions on 2011-01-21 worked for me! Just uninstall media bar from add/remove programs :)Thank God, never again BearShare!
2011-02-18 21:48:24, Guest:
What worked for me was to run the computer in SAFE MODE and then run regedit with the list in front of you of what to remove. Although it may be wise to get help because now my windows media player doesnt work and it could be due to deleting the wrong file. Also, could bearshare have new names for what to delete because a lot of things on the list was not in my registry.
2011-02-21 21:30:39, FairPhantom:
First, I went to the Control Panel, then to Uninstall Program and uninstalled it. However, after I uninstalled Bearshare it was still set as my home page! (When I opened Internet Explorer it still went to my regular home page, but if I opened a new tab in went to Bearshare.)

So I finally figured out that even though I had uninstalled the program, there were still some files on my computer. So, I went to Start and then typed Bearshare in the search bar. From there I deleted the Bearshare Applications folder and it fixed the problem.
(You must close your internet browser before deleting the application, or else it will say you can't delete it because it's in use.)

So, close your browser, go to START, type in Bearshare and then delete the applications. It worked for me and seems like the easiest way!
2011-02-25 10:51:06, Guest:
I hate bearshare.I can't get it off.I put it in my trash bin & it's still there. I deleted the file, still there.What the h*ll.
2011-03-05 00:02:56, Guest:
after going to the bottom right hand corner and making sure the bearshare wasn't open i went to start and control panel,uninstall program,remove media 2.0 toolbar,the you should be able to remove bearshare.
2011-03-05 03:37:28, Guest:
Guest's directions on 2011-01-21 worked for me too! Just uninstall media bar from add/remove programs. I'm so glad I finally got rid of it :)
Muchos gracias for your advice!
2011-03-12 15:54:33, Guest:
Please don't install Bearshare on any pc or laptop. I am sorry to say this, but it's like cancer. I hate Bearshare with every bone in my body. Guys who make this kind of programms should stay in prison for a long time!!!!
2011-03-31 12:54:43, Guest:
The information FairPhantom posted on 2011-02-21 21:30:39 worked for me with one exception. First I uninstalled BearShare, then had the issue with IE being hijacked. Following FairPhantom's suggestion I deleted all folders, but one said it was being used by datamngrUI.exe (or something close to that). So a quick task manager, processes, right click and end process allowed me to delete that folder.
2011-04-12 23:34:18, Guest:
You all rock! I took all your tips and advice and now my notebook is back to normal. Bearshare has to be reported as it's so invasive and irrating. Do everything that everyone has posted.
It WORKS!! Lesson learned....always google a site before you sign up!!!
Good luck everyone.
Cheers.
2011-04-22 00:15:09, Guest:
hello, i have tried options above and still can not uninstall this stupid thing!! I get the following message ''an error occured whilst trying to uninstall mediabar. it may have already been uninstalled. would you like to remove media bar from the programs and features list?'' even when i click yes nothing happens can anyone help??? please and thanks
2011-04-27 17:20:20, Guest:
Hi...I've literally just got rid of the blooming thing! Go to control panel, add/remove programmes and delete MediaBar (it isn't listed under bearshare...just MediaBar). I did that, opened IE and numerous tags and bearshare never came up once!!
2011-04-28 12:30:02, USA:
Cheers. For all who helped! My nephew loaded B.S. while I was away from my computer but logged on. I had admonished him to NEVER use MY computer without permission. Anyway, after hours of trying I found this site and uninstalled "Media Bar". All is now well, I think! Thanks too much for your help!
2011-05-11 17:35:42, Guest:
Go to add/remove and uninstall media.llc, add on by BearShare.
2011-05-20 02:02:06, Guest:
When I did a Bearshare search and started to delete the files in there, some of then copied as I was deleting them and would not let me delete them at all. It gives you a message saying "cannot delete". You can however, delete some of them but not all.
2011-05-20 02:08:48, Guest:
Also,(con't from last message above) after I did the search for Bearshare and deleted the files that it would allow me to, I then went into add/remove programs and it allowed me to remove it but saying that there was still files in the computer but did I still want to "Remove it from this list" and I clicked yes and it was removed from there, but there are still Bearshare files left in my computer I cannot get rid of at all.
2011-07-05 10:57:03, Guest:
PLEASE HELP! I have uninstalled BearShare from the Control Panel and Media Bar but the media toolbar keeps coming up. I even deactivated it. It still shows up on Explorer, Chrome, and Firefox. I want it out NOW! I have read all of the comments and rechecked what I have done, but the darn thing keeps showing up whenever I start my computer.
2011-08-21 23:35:29, Guest:
Followed all instructions about reg edit and file&program removal and that worked pretty good with only two files remaining. "Datamngr.dll and datamngrUI".
They are in Program Files\Bearshare Applications\Media Bar\Datamngr. when I try to delete any file starting w\Bearshare Application or after Error Message is "Access Denied" Any help would be great...THANKS
2011-08-23 01:18:05, Guest:
Getting rid of Media Bar was the best suggestion!! Thank you, finally I got rid of bearshare search engine

2011-08-25 10:24:06, Guest:
Great stuff everyone, it worked after wasting an hour of my life lol. The best advice that worked for was going to start and typing in bearshare and started removing everything from there. Also, if your still getting an error message make sure to delete all the songs on folders then go back and try again.
2011-08-30 20:32:44, Guest:
Anyone know how to work around "Error Message: "Access Denied" when trying to remove Media Bar\Datamngr ? Need your help!!!! Thanks
2012-02-07 11:38:33, Guest:
iMesh/Bear Share are same same and not different.They try to get money from me with 3 online lottery winning claims from Malayia and unclaimed money banks deposit in UK from Africa.They also hijack with search engine.I can document everything.February-8-2012
2012-02-11 12:49:18, Guest:
how do i uninstall bearshare when it keeps denying me to do so

2012-02-19 12:25:04, Guest:
This was trickey, but I did manage to get rid of BearShare. Press Start. Do a search for Run. Type in regedit. Enter. When Windows Register lists press Ctrl F to do a search and type BearShare. Delete. Keep doing this over and over. You will get to files that deny access (frustrating). To get access go to C Drive and find permissions settings. Change the checkboxes to allow PC User to make changes. Do a search of programs. Delete any BearShare files that come up. Go back to registry search (regedit). Repeat the CtrlF to do search for bearshare and delete all. Go to C drive, do another search there and delete any BearShare applications. This took hours. The holdup was actually getting permission to remove programs. I felt like my computer was hijacked by BearShare, not nice. After all this I emptied trash and re-started computer. All gone now, but I see I have an email this morning from BearShare. Sent to Junk. Whew!!!
2013-01-23 04:21:51, Guest:
bearshare is the worest program i never had in my experince.
 Previous Spyware: Bear and Tiger Next Spyware: Beast