Remove Expand. Removal instructions

Severity scale:

(23 / 100)

Expand adware records keywords the user enters into popular Internet search engines. The program installs additional Internet Explorer toolbar, which displays advertising links based on logged keywords. Expand must be manually installed. Once executed, it creates several files in the default system directory (C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32) and modifies the registry in order to register itself as web browser add-on. Expand runs every time the user opens Internet Explorer.

Expand properties:
• Shows commercial adverts
• Hides from the user
• Stays resident in background

Automatic Expand removal:

remover for Expand

SpyHunter is recommended remover to uninstall Expand. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove Expand using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

We are testing STOPzilla's efficiency at removing Expand (2005-08-12 08:56:16)

Malwarebytes Anti Malware

download | review

We are testing Malwarebytes Anti Malware's efficiency at removing Expand (2005-08-12 08:56:16)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing Expand (2005-08-12 08:56:16)

XoftSpySE Anti Spyware

download | review

Expand manual removal:

FORUM:
Discuss Expand in
spyware removal forum

Kill processes:
sidebar.exe, reg2.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MyGeek.Com
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BarBHO.Class1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C431BF1E-9E71-4BB6-9C4E-8496D158DB1F}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CD2A865B-6C0F-44F9-BAA1-7CDB31E04BC8}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7BD45240-7166-4768-A845-8CE375C5E096}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9F9D3D1F-E697-4A86-90C7-58CECF6A2634}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{47D616A1-B588-45D1-AD71-33AC15FB6940}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{48977F6E-4120-4F88-8C4B-A6399BD0DD08}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CD2A865B-6C0F-44F9-BAA1-7CDB31E04BC8}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{C431BF1E-9E71-4BB6-9C4E-8496D158DB1F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eXpand Search_is1

HELP:
how to remove registry entries

Delete files:
sidebar.exe, reg2.exe, barbho.dll, mygeek.dll, mygeekremove.exe

HELP:
how to remove harmful files

Information added: 2005-08-12 06:19:01
Information updated: 2005-08-12 06:19:01

Additional resources related to Expand:

Attention: If you know or you have a website or page about Expand removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Expand parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.