Remove Caiijing. Description and removal instructions

Title: Caiijing
Type: Browser Plugins	Severity scale: (30 / 100)

Caiijing is an Internet Explorer toolbar that mimics the legitimate Google Toolbar. The parasite serves commercial advertisements in pop-ups. It also records computer MAC address and transfers it to a predetermined web site. Caiijing is able to update itself via the Internet. It runs every time the user launches the web browser.

FORUM:
Discuss Caiijing in
spyware removal forum

Related files: s1.exe, googlebar.dll, tdac.sys

Caiijing properties:
• Shows commercial adverts
• Connects itself to the internet

Automatic Caiijing removal:

remover for Caiijing

Caiijing manual removal:

Kill processes:
s1.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_CLASSES_ROOT\Google.SetGoogle
HKEY_CLASSES_ROOT\Google.SetGoogle.1
HKEY_CLASSES_ROOT\CLSID\{12365484-96a1-6974-3269-123555124655}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{12365484-96a1-6974-3269-123555124655}

HELP:
how to remove registry entries

Unregister DLLs:
googlebar.dll

HELP:
how to unregister malicious DLLs

Delete files:
s1.exe, googlebar.dll, tdac.sys

HELP:
how to remove harmful files

Misc:
Exact file location:
googlebar.dll - C:\WINDOWS\System32 or C:\WINNT\System32
tdac.sys - C:\WINDOWS\System32\drivers or C:\WINNT\System32\drivers
s1.exe - C:\Documents and Settings\[Current User]\Local Settings\Temp\[random name]

Other programs to remove Caiijing:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 26/12/06
Information updated: 26/12/06

Additional resources related to Caiijing:

Attention: If you know or you have a website or page about Caiijing removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Caiijing parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.