spyware removal instructions

ClearSearch removal

Spyware ClearSearch Information
Name: ClearSearch
Category: Hijacker
Date: 2005-06-13
Dangerous: Yes
ClearSearch uses sneaky tactics in hijacking web-pages in Internet Explorer. Ocasionally instead of a chosen web-site it would visit a page with suggestions to perform a search for terms that will lead to commercial offerings it would gain profit from.
This Hijacker is also known as:
Adware.ClearSearch

>> Delete ClearSearch automatically - Download Spyware Doctor

ClearSearch Removal Instructions
Kill the following processes
25215765.exe, 66119866.exe, 81133648.exe, clrschuninstall.exe, csp001[1].exe, csv10p070.exe, csv12p108.exe, djtopr1150.exe, jy0458in.exe, loader.exe, fnuninstaller.exe, ss_revco16_setup.exe, clrschp038[1].exe, csv7p88.exe, clrschp010.exe
Unregister the following DLLs and reboot
5cs90ksg.dll, csaolinst.dll, csbb.dll, csie.dll, csieinst.dll, csldrupdater.dll, csuninst.dll, jy0458in.dll, update_removeold.dll, update_rsp.dll.
bi.dll, clrschieplugin.dll, csbi.dll, csie16.dll, csie32.dll, cssb.dll, csss.dll, cszt.dll, ie_clrsch.dll, ss.dll in Program Files\clearsearch\
csiehookinst.dll in Program Files\csbb\
csie16.dll, csie32.dll in Program Files\lycos\ieagent\
ietie.dll in Windows\system32\
Delete these registry entries
HKEY_CLASSES_ROOT\clsid\{722759b4-2b5f-43e6-856b-d2d770f3d05b}
HKEY_CLASSES_ROOT\ie_clrsch.iehooks
HKEY_CLASSES_ROOT\interface\{a351d4b1-bf54-41f1-bec0-8a1c4ecd72c7}
HKEY_CLASSES_ROOT\typelib\{947e6d5a-4b9f-4cf4-91b3-562ca8d03313}
HKEY_LOCAL_MACHINE\software\clrsch
HKEY_LOCAL_MACHINE\software\clrsch\accessstatus
HKEY_LOCAL_MACHINE\software\clrsch\contextsidebar\closed
HKEY_LOCAL_MACHINE\software\clrsch\contextsidebar\day
HKEY_LOCAL_MACHINE\software\clrsch\contextsidebar\hour
HKEY_LOCAL_MACHINE\software\clrsch\contextsidebar\masterday
HKEY_LOCAL_MACHINE\software\clrsch\contextsidebar\masterhour
HKEY_LOCAL_MACHINE\software\clrsch\contextsidebar\shutdown
HKEY_LOCAL_MACHINE\software\clrsch\control
HKEY_LOCAL_MACHINE\software\clrsch\controlchecksum
HKEY_LOCAL_MACHINE\software\clrsch\country
HKEY_LOCAL_MACHINE\software\clrsch\directory
HKEY_LOCAL_MACHINE\software\clrsch\failurecount
HKEY_LOCAL_MACHINE\software\clrsch\guid
HKEY_LOCAL_MACHINE\software\clrsch\loader\install_id
HKEY_LOCAL_MACHINE\software\clrsch\loader\nextupdate
HKEY_LOCAL_MACHINE\software\clrsch\loader\version
HKEY_LOCAL_MACHINE\software\clrsch\promo
HKEY_LOCAL_MACHINE\software\clrsch\resolvers\resolver
HKEY_LOCAL_MACHINE\software\clrsch\resolvers\resolvermax
HKEY_LOCAL_MACHINE\software\clrsch\resolvers\status0
HKEY_LOCAL_MACHINE\software\clrsch\resolvers\status1
HKEY_LOCAL_MACHINE\software\clrsch\resolvers\status2
HKEY_LOCAL_MACHINE\software\clrsch\resolvers\status3
HKEY_LOCAL_MACHINE\software\clrsch\resolvers\status4
HKEY_LOCAL_MACHINE\software\clrsch\resolvers\status5
HKEY_LOCAL_MACHINE\software\clrsch\resolvers\status6
HKEY_LOCAL_MACHINE\software\clrsch\ronsidebar\closed
HKEY_LOCAL_MACHINE\software\clrsch\ronsidebar\cycle
HKEY_LOCAL_MACHINE\software\clrsch\ronsidebar\day
HKEY_LOCAL_MACHINE\software\clrsch\ronsidebar\hour
HKEY_LOCAL_MACHINE\software\clrsch\ronsidebar\masterday
HKEY_LOCAL_MACHINE\software\clrsch\ronsidebar\masterhour
HKEY_LOCAL_MACHINE\software\clrsch\ronsidebar\shutdown
HKEY_LOCAL_MACHINE\software\clrsch\sidebar\sidebar
HKEY_LOCAL_MACHINE\software\clrsch\sidebar\sidebarmax
HKEY_LOCAL_MACHINE\software\clrsch\sidebar\status0
HKEY_LOCAL_MACHINE\software\clrsch\sidebar\status1
HKEY_LOCAL_MACHINE\software\clrsch\sidebar\status2
HKEY_LOCAL_MACHINE\software\clrsch\sidebar\status3
HKEY_LOCAL_MACHINE\software\clrsch\sidebar\status4
HKEY_LOCAL_MACHINE\software\clrsch\sidebar\status5
HKEY_LOCAL_MACHINE\software\clrsch\sidebar\status6
HKEY_LOCAL_MACHINE\software\clrsch\spidersidebar\closed
HKEY_LOCAL_MACHINE\software\clrsch\spidersidebar\day
HKEY_LOCAL_MACHINE\software\clrsch\spidersidebar\minute
HKEY_LOCAL_MACHINE\software\clrsch\spidersidebar\shutdown
HKEY_LOCAL_MACHINE\software\clrsch\spidersidebar\specificday
HKEY_LOCAL_MACHINE\software\clrsch\spidersidebar\specificminute
HKEY_LOCAL_MACHINE\software\clrsch\updatetime
HKEY_LOCAL_MACHINE\software\clrsch\urlsidebar\closed
HKEY_LOCAL_MACHINE\software\clrsch\urlsidebar\day
HKEY_LOCAL_MACHINE\software\clrsch\urlsidebar\hour
HKEY_LOCAL_MACHINE\software\clrsch\urlsidebar\masterday
HKEY_LOCAL_MACHINE\software\clrsch\urlsidebar\masterhour
HKEY_LOCAL_MACHINE\software\clrsch\urlsidebar\shutdown
HKEY_LOCAL_MACHINE\software\csbb
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{947e6d5a-4b9f-4cf4-91b3-562ca8d03313}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\csv10p1
Remove the following files
25215765.exe, 5cs90ksg.dll, 66119866.exe, 81133648.exe, clearsearch.txt, clrschuninstall.exe, control.dat, csaolinst.dll, csbb.dll, csie.dll, csieinst.dll, csie_checks.dat, csie_edomains.dat, csie_srchrule.dat, csldrupdater.dll, csp001[1].exe, csuninst.dll, csv10p070.exe, csv12p108.exe, djtopr1150.exe, jy0458in.dll, jy0458in.exe, loader.exe, update_removeold.dll, update_rsp.dll.
clrschp038[1].exe in Documents and Settings\UserName\local settings\temporary internet files\content.ie5\8pcv4roj\
fnuninstaller.exe, ss_revco16_setup.exe in Documents and Settings\UserName\local settings\temp\clrsch\
bi.dll, clrschieplugin.dll, csbi.dll, csie16.dll, csie32.dll, cssb.dll, csss.dll, cszt.dll, ie_clrsch.dll, ss.dll in Program Files\clearsearch\
csiehookinst.dll, csv7p88.exe in Program Files\csbb\
csie16.dll, csie32.dll in Program Files\lycos\ieagent\
ietie.dll in Windows\system32\
clrschp010.exe in Windows\temp\
Remove the following directories
Documents and Settings\UserName\local settings\temp\clrsch
Documents and Settings\UserName\local settings\temp\csbb1
Program Files\csbb\csbb1
Windows\temp\clrsch

Bookmark ClearSearch page

 Previous Spyware: Remove Clear-Search Next Spyware: Remove ClearSearch.csie