Remove MaxSearch. Description and removal instructions

 
Title: MaxSearch

Type: Browser Hijackers
Severity scale:MaxSearch severity is 30  (30 / 100)
 
MaxSearch is a browser hijacker that changes Internet Explorer default start and search pages to sites on maxfind.com and maxifiles.com domains. The parasite works as an additional web browser toolbar. It doesn't distribute itself and must be manually installed. Some ad-supported software may also add it to the system. Once executed, MaxSearch creates a directory, drops files in it and modifies the Windows registry in order to register itself as a browser plugin. The parasite decreases Internet security level. It can automatically update itself.


MaxSearch properties:
• Changes browser settings
• Connects itself to the internet
• Stays resident in background

Automatic MaxSearch removal:

remover for MaxSearch

MaxSearch manual removal:

Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\iexplore.exe=0
HKEY_CLASSES_ROOT\ToolBand.XBTB07618
HKEY_CLASSES_ROOT\ToolBand.XBTB07618.1
HKEY_CLASSES_ROOT\XBTB07618.XBTB07618
HKEY_CLASSES_ROOT\XBTB07618.XBTB07618.1
HKEY_CLASSES_ROOT\XBTB07618.IEToolbar
HKEY_CLASSES_ROOT\XBTB07618.IEToolbar.1
HKEY_CLASSES_ROOT\CLSID\{77FBF9B8-1D37-4FF2-9CED-192D8E3ABA6F}
HKEY_CLASSES_ROOT\CLSID\{BBBE1C1A-89F7-4AF6-ABD1-F8FBCFA47408}
HKEY_CLASSES_ROOT\Interface\{0D5CC8AE-0BB0-49C3-BA33-BA4508EA43CC}
HKEY_CLASSES_ROOT\Interface\{EABBB49A-4D7B-415B-8250-15C3B854E9FF}
HKEY_CLASSES_ROOT\TypeLib\{3261A9A1-91F5-4A20-BEC7-3F8373C72C1F}
HKEY_CLASSES_ROOT\TypeLib\{FFBE337D-CB05-4FF0-B9FA-3C2FCC2F54FB}
HKEY_CURRENT_USER\Software\XBTB07618
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\{77FBF9B8-1D37-4FF2-9CED-192D8E3ABA6F}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\{77FBF9B8-1D37-4FF2-9CED-192D8E3ABA6F}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{77FBF9B8-1D37-4FF2-9CED-192D8E3ABA6F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{77FBF9B8-1D37-4FF2-9CED-192D8E3ABA6F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBBE1C1A-89F7-4AF6-ABD1-F8FBCFA47408}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\MaxiFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\MaxiFilesTB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XBTB07618.XBTB07618Toolbar
Delete files:
maxifiles.dll
Delete directories:
C:\Program Files\Maxifiles
Misc:
[site address] is an address of the web site on the maxifiles.com or maxsearch.com domain.

Registry entry containing {77FBF9B8-1D37-4FF2-9CED-192D8E3ABA6F} subkey may be used by legitimate products.

Other programs to remove MaxSearch:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 02/08/05
Information updated: 02/08/05

Additional resources related to MaxSearch:

Attention: If you know or you have a website or page about MaxSearch removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about MaxSearch parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Related news:
Similar parasites:
Related articles: