Remove EasySearch. Description and removal instructions

 
Title: EasySearch

Type: Browser Hijackers
Severity scale:EasySearch severity is 44  (44 / 100)
 
EasySearch is a malicious browser hijacker that changes the Internet Explorer default home page. The parasite also downloads from the Internet and installs other privacy threats. EasySearch acts as a local proxy server used by Internet Explorer to access the Internet. This allows the parasite to regularly redirect a web browser to undesirable web sites, usually with pornographic content. EasySearch runs on every Windows startup.


EasySearch properties:
• Changes browser settings
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic EasySearch removal:

remover for EasySearch

EasySearch manual removal:

Kill processes:
iau.exe, runwin32.exe, lssas.exe, mservice.exe, msqdevl.exe, stisvsq.exe, svshost.exe
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Games Acceleration
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Internet Connection Wizard
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Internet Mail and News
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Microsoft Internet Accelerator
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Microsoft Management Console
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Multimedia Extensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Games Acceleration
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Internet Connection Wizard
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Internet Mail and News
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft Internet Accelerator
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft Management Console
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Multimedia Extensions
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer=[IP address]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride=[local]
Delete files:
iau.exe, runwin32.exe, lssas.exe, mservice.exe, msqdevl.exe, stisvsq.exe, svshost.exe
Misc:
[site address] is an adrress of a web site on the easy-search.biz domain.
[IP address] is a local address of a compromised computer (127.0.0.1:8080).

All EasySearch files can be found in the main system directory C:\Windows or C:\Winnt.

Other programs to remove EasySearch:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 12/05/05
Information updated: 10/09/05

Additional resources related to EasySearch:

Attention: If you know or you have a website or page about EasySearch removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about EasySearch parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: