Remove OrbitExplorer. Description and removal instructions

 
Title: OrbitExplorer

Type: Browser Plugins
Severity scale:OrbitExplorer severity is 47  (47 / 100)
 
OrbitExplorer is an Internet Explorer search toolbar that changes web browser's default home and search pages and adds multiple bookmars to the Favorites list. The threat silently downloads and installs several adware applications without asking for user permission. It also can redirect a web browser to advertising web sites. OrbitExplorer has the ability to update itself via the Internet. The threat must be manually installed. It automatically runs on every Windows startup.


OrbitExplorer properties:
• Changes browser settings
• Connects itself to the internet
• Stays resident in background

Automatic OrbitExplorer removal:

remover for OrbitExplorer

OrbitExplorer manual removal:

Kill processes:
ad.exe, oeloader.exe, view.exe, update.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\oeloader
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\orbitview
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\orbitupdate
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\{341FB59F-3507-443b-8147-423B4E3B2B15}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{702AD576-FDDB-4d0f-9811-A43252064684}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{702AD576-FDDB-4d0f-9811-A43252064684}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D48F2E28-68E2-4920-9848-D6E6C7AB3EB7}
HKEY_CLASSES_ROOT\OESearch.OESearchHook
HKEY_CLASSES_ROOT\OESearch.OESearchHook.1
HKEY_CLASSES_ROOT\SQLoader.Loader
HKEY_CLASSES_ROOT\SQLoader.Loader.1
HKEY_CLASSES_ROOT\Toolbar.Band
HKEY_CLASSES_ROOT\Toolbar.Band.1
HKEY_CLASSES_ROOT\Update.Redirector
HKEY_CLASSES_ROOT\Update.Redirector.1
HKEY_CLASSES_ROOT\CLSID\{341FB59F-3507-443b-8147-423B4E3B2B15}
HKEY_CLASSES_ROOT\CLSID\{702AD576-FDDB-4d0f-9811-A43252064684}
HKEY_CLASSES_ROOT\CLSID\{D48F2E28-68E2-4920-9848-D6E6C7AB3EB7}
HKEY_CLASSES_ROOT\CLSID\{D7B3E460-9968-4191-BD6F-BEED1BC18482}
HKEY_CLASSES_ROOT\Interface\{030A8576-686B-479A-AF79-94B9FEA79BC5}
HKEY_CLASSES_ROOT\Interface\{1D22A25E-B181-4AEE-88FF-2209F7C24FCB}
HKEY_CLASSES_ROOT\Interface\{229B6742-97C5-4FA1-89D0-0117BE82FC39}
HKEY_CLASSES_ROOT\Interface\{EC99CBB3-6275-4923-BC54-8F27AC45F577}
HKEY_CLASSES_ROOT\TypeLib\{8594CB7B-5A4B-414C-B40F-6C42152B4D2B}
HKEY_CLASSES_ROOT\TypeLib\{92A0BFEF-D370-4D4F-BA70-F0C0AFB19B9F}
HKEY_CLASSES_ROOT\TypeLib\{C3E17D0D-593A-457B-A1DA-6D082E29323A}
HKEY_CLASSES_ROOT\TypeLib\{ECC4AB37-565F-4424-8802-E4BC7766BA58}
HKEY_CURRENT_USER\CLSID\{0FDA4D2B-7975-405d-8D7C-F5E2247EAE80}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D7B3E460-9968-4191-BD6F-BEED1BC18482}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls\%Windir%\Downloaded Program Files\oeloader.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls\%Windir%\Downloaded Program Files\oeloader.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\%Windir%/Downloaded Program Files/oeloader.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\%Windir%/Downloaded Program Files/oeloader.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Orbit
Delete files:
ad.exe, oeloader.exe, view.exe, update.exe, oeloader.dll, redirector.dll, search.dll, toolbar.dll
Delete directories:
C:\Program Files\Orbit
C:\Program Files\Common Files\OE
Misc:
[site address] is an adress of a web site on the orbitexplorer.com domain.

Exact file location:
ad.exe, view.exe, update.exe - C:\Program Files\Orbit
redirector.dll, search.dll, toolbar.dll - C:\Program Files\Common Files\OE
oeloader.exe, oeloader.dll - C:\Windows\Downloaded Program Files or C:\Winnt\Downloaded Program Files

Other programs to remove OrbitExplorer:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 13/05/05
Information updated: 01/09/05

Additional resources related to OrbitExplorer:

Attention: If you know or you have a website or page about OrbitExplorer removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about OrbitExplorer parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: