Remove IESearch. Description and removal instructions

 
Title: IESearch

Type: Spyware
Severity scale:IESearch severity is 63  (63 / 100)
 
IESearch is a spyware program that adds a search toolbar to Internet Explorer. However, it also monitors all network and Internet traffic to and from the compromised computer and hijacks the web browser by changing its default home, search and error pages and modifying some related settings. IESearch works as an Internet Explorer add-on and therefore runs every time the user launches the web browser. Some of its components run on every Windows startup.


IESearch properties:
• Changes browser settings
• Connects itself to the internet
• Stays resident in background

Automatic IESearch removal:

remover for IESearch

IESearch manual removal:

Kill processes:
versionchecker.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Bar=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\AutoSearch=5
HKEY_CLASSES_ROOT\IEBHOProject.IEBHO
HKEY_CLASSES_ROOT\IEBHOProject.IEBHO.1
HKEY_CLASSES_ROOT\AppID\IEBHO.DLL
HKEY_CLASSES_ROOT\AppID\{2E97A338-5092-4B14-B5E7-50994E09EA35}
HKEY_CLASSES_ROOT\CLSID\{901C2C91-AFE7-416D-9FC1-34F87A264AC8}
HKEY_CLASSES_ROOT\Interface\{E128D984-2F06-41D0-B55C-0EAAE5913436}
HKEY_CLASSES_ROOT\TypeLib\{2E97A338-5092-4B14-B5E7-50994E09EA35}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{901C2C91-AFE7-416D-9FC1-34F87A264AC8}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{901C2C91-AFE7-416D-9FC1-34F87A264AC8}
HKEY_LOCAL_MACHINE\SOFTWARE\IEsearch
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IESearch
Unregister DLLs:
iebho.dll

Delete files:
versionchecker.exe, iebho.dll, ielsp.dll, config.xml
Delete directories:
C:\Program Files\IESearch
Misc:
[site address] is an address of a web site on the startnow.com domain.

Other programs to remove IESearch:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 25/02/06
Information updated: 25/02/06

Additional resources related to IESearch:

Attention: If you know or you have a website or page about IESearch removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about IESearch parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites:
Related discussions: