Remove GonnaSearch. Description and removal instructions

 
Title: GonnaSearch

Type: Browser Plugins
Severity scale:GonnaSearch severity is 33  (33 / 100)
 
GonnaSearch is an Internet Explorer toolbar providing a web search service and pop-up blocker. It intercepts Internet searches and redirects a web browser to undesirable web sites. GonnaSearch is bundled with some advertising-supported products. It can also be manually installed. The threat runs every time the user launches Internet Explorer.


GonnaSearch properties:
• Changes browser settings
• Connects itself to the internet
• Stays resident in background

Automatic GonnaSearch removal:

remover for GonnaSearch

GonnaSearch manual removal:

Kill processes:
autosearch.exe
Delete registry values:
HKEY_CLASSES_ROOT\AutoSearch.AutoSearchObj
HKEY_CLASSES_ROOT\AutoSearch.AutoSearchObj.1
HKEY_CLASSES_ROOT\Softomate.IEToolbar
HKEY_CLASSES_ROOT\Softomate.IEToolbar.1
HKEY_CLASSES_ROOT\Softomate.SoftomateObj
HKEY_CLASSES_ROOT\Softomate.SoftomateObj.1
HKEY_CLASSES_ROOT\WebInfo.WebInfoObj
HKEY_CLASSES_ROOT\WebInfo.WebInfoObj.1
HKEY_CLASSES_ROOT\SearchAddon.IEObject
HKEY_CLASSES_ROOT\SearchAddon.IEObject.1
HKEY_CLASSES_ROOT\CLSID\{799A370D-5993-4887-9DF7-0A4756A77D00}
HKEY_CLASSES_ROOT\CLSID\{92F02779-6D88-4958-8AD3-83C12D86ADC7}
HKEY_CLASSES_ROOT\CLSID\{A55581DC-2CDB-4089-8878-71A080B22342}
HKEY_CLASSES_ROOT\CLSID\{E7AFFF2A-1B57-49C7-BF6B-E5123394C970}
HKEY_CLASSES_ROOT\Interface\{3D11CBE7-1EEE-4C8F-AB5C-A4CF7939F1F1}
HKEY_CLASSES_ROOT\Interface\{7B9A715E-9D87-4C21-BF9E-F914F2FA953F}
HKEY_CLASSES_ROOT\Interface\{A1376D2C-12EB-472B-9C8C-DB24448D3C91}
HKEY_CLASSES_ROOT\TypeLib\{6D3F5DE4-E980-4407-A10F-9AC771ABAAE6}
HKEY_CLASSES_ROOT\TypeLib\{7E68F5F3-782C-4BCD-88DF-1E3D6350DE4C}
HKEY_CLASSES_ROOT\TypeLib\{C1947E81-7036-4AC8-AC09-906224F6F4FC}
HKEY_CLASSES_ROOT\TypeLib\{F7825D95-CDD7-4E73-BFDC-846DE0F336BE}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\{A55581DC-2CDB-4089-8878-71A080B22342}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\{1AE2F26C-8E23-4930-A68D-9E681A764001}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AutoSearch.AutoSearchObj
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AutoSearch.AutoSearchObj.1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{92F02779-6D88-4958-8AD3-83C12D86ADC7}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{799A370D-5993-4887-9DF7-0A4756A77D00}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A55581DC-2CDB-4089-8878-71A080B22342}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7AFFF2A-1B57-49C7-BF6B-E5123394C970}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1AE2F26C-8E23-4930-A68D-9E681A764001}
HKEY_CURRENT_USER\software\Softomate
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Softomate.SoftomateObjIEToolbar
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{799A370D-5993-4887-9DF7-0A4756A77D00}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A55581DC-2CDB-4089-8878-71A080B22342}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E7AFFF2A-1B57-49C7-BF6B-E5123394C970}
Unregister DLLs:
searchaddon.dll, toolbar.dll, webinfo.dll

Delete files:
autosearch.exe, searchaddon.dll, toolbar.dll, webinfo.dll
Delete directories:
C:\Program Files\Internet Explorer\Toolbar

Other programs to remove GonnaSearch:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 19/03/04
Information updated: 27/09/05

Additional resources related to GonnaSearch:

Attention: If you know or you have a website or page about GonnaSearch removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about GonnaSearch parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: