Remove Locator. Description and removal instructions

 
Title: Locator

Type: Browser Plugins
Severity scale:Locator severity is 38  (38 / 100)
 
Locator is an additional Internet Explorer toolbar that provides a web search service and links to certain Internet resources. Locator changes web browser's default home and search pages without asking for user permission. Moreover, it can download from the Internet and run arbitrary files. The threat is able to silently update itself. Locator must be manually installed. It runs every time the user starts Internet Explorer.


Locator properties:
• Changes browser settings
• Connects itself to the internet
• Stays resident in background

Automatic Locator removal:

remover for Locator

Locator manual removal:

Kill processes:
lupdtr.exe
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\SearchUrl=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\SearchAssistant=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LocatorS.LocatorBar
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LocatorS.LocatorBar.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LocatorS.LocatorLinks
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LocatorS.LocatorLinks.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\locatorstoolbar.LOCATORSTOOLBAR
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\locatorstoolbar.LOCATORSTOOLBARMenu Button
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\locatorstoolbar.LOCATORSTOOLBARToggle Button
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E7BD74F-2B8D-469E-92B0-A921F8D5E230}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E7BD74F-2B8D-469E-92B0-A921F8D5E22E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E7BD74F-2B8D-469E-92B0-A921F8D5E22F}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E720B458-B65A-438C-9FF3-B1DF65D7DB3E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E720B458-B65A-438C-9FF3-B1DF65D7DB3F}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AB88FC82-FCDC-4062-BCC4-887F0D73EC1D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B4F8E732-4793-4F90-B40A-829331861D54}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{4E7BD74F-2B8D-469E-92B0-A921F8D5E22E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{E720B458-B65A-438C-9FF3-B1DF65D7DB3E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{E720B458-B65A-438C-9FF3-B1DF65D7DB3F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{A26ABCF0-1C8F-46e7-A67C-0489DC21B9CC}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4E7BD74F-2B8D-469E-92B0-A921F8D5E22E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{4E7BD74F-2B8D-469E-92B0-A921F8D5E22E}
HKEY_CURRENT_USER\Software\Locatorstoolbar Toolbar
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Locators Toolbar
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{4E7BD74F-2B8D-469E-92B0-A921F8D5E22E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Locators Toolbar
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\LocatorsToolbar
Unregister DLLs:
locators.dll

Delete files:
lupdtr.exe, locators.dll
Misc:
[site address] is an adress of a web site on the locators.com domain.

Other programs to remove Locator:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 31/08/05
Information updated: 31/08/05

Additional resources related to Locator:

Attention: If you know or you have a website or page about Locator removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Locator parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites:
Related discussions: