Remove IEMonit. Description and removal instructions

Title: IEMonit
Type: Browser Hijackers	Severity scale: (36 / 100)

IEMonit is a browser hijacker that monitors user Internet activity and redirects web searches made in popular Internet search engines to undesirable sites. The parasite also displays unexpected advertisements and updates itself via the Internet. IEMonit runs on every Windows startup.

FORUM:
Discuss IEMonit in
spyware removal forum

IEMonit properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic IEMonit removal:

remover for IEMonit

IEMonit manual removal:

Kill processes:
fixieupdate.exe, ieupdates.exe, updaterie01.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Internet Explorer Library
HKEY_CLASSES_ROOT\CLSID\{CE7C3CF0-4B15-11D1-ABED-709549C10001}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CE7C3CF0-4B15-11D1-ABED-709549C10001}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CE7C3CF0-4B15-11D1-ABED-709549C10001}

HELP:
how to remove registry entries

Unregister DLLs:
iemonit.dll

HELP:
how to unregister malicious DLLs

Delete files:
fixieupdate.exe, ieupdates.exe, updaterie01.exe, iemonit.dll

HELP:
how to remove harmful files

Misc:
IEMonit files can be found in the default system directory, which is one of the following: C:\Windows\System, C:\Windows\System32, C:\Winnt\System32.

Other programs to remove IEMonit:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 19/03/04
Information updated: 24/09/05

Additional resources related to IEMonit:

Attention: If you know or you have a website or page about IEMonit removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about IEMonit parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Comments from visitors:

1. by Anthony. 2004-03-02 21:05:53

Includes an updater process which is believed to be able to download and execute arbitrary code from its controlling server. I currently have not obtained a copy of this to test, however.