OrbitExplorer manual removal:
Kill processes:
ad.exe, oeloader.exe, view.exe, update.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\oeloader
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\orbitview
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\orbitupdate
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\{341FB59F-3507-443b-8147-423B4E3B2B15}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{702AD576-FDDB-4d0f-9811-A43252064684}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{702AD576-FDDB-4d0f-9811-A43252064684}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D48F2E28-68E2-4920-9848-D6E6C7AB3EB7}
HKEY_CLASSES_ROOT\OESearch.OESearchHook
HKEY_CLASSES_ROOT\OESearch.OESearchHook.1
HKEY_CLASSES_ROOT\SQLoader.Loader
HKEY_CLASSES_ROOT\SQLoader.Loader.1
HKEY_CLASSES_ROOT\Toolbar.Band
HKEY_CLASSES_ROOT\Toolbar.Band.1
HKEY_CLASSES_ROOT\Update.Redirector
HKEY_CLASSES_ROOT\Update.Redirector.1
HKEY_CLASSES_ROOT\CLSID\{341FB59F-3507-443b-8147-423B4E3B2B15}
HKEY_CLASSES_ROOT\CLSID\{702AD576-FDDB-4d0f-9811-A43252064684}
HKEY_CLASSES_ROOT\CLSID\{D48F2E28-68E2-4920-9848-D6E6C7AB3EB7}
HKEY_CLASSES_ROOT\CLSID\{D7B3E460-9968-4191-BD6F-BEED1BC18482}
HKEY_CLASSES_ROOT\Interface\{030A8576-686B-479A-AF79-94B9FEA79BC5}
HKEY_CLASSES_ROOT\Interface\{1D22A25E-B181-4AEE-88FF-2209F7C24FCB}
HKEY_CLASSES_ROOT\Interface\{229B6742-97C5-4FA1-89D0-0117BE82FC39}
HKEY_CLASSES_ROOT\Interface\{EC99CBB3-6275-4923-BC54-8F27AC45F577}
HKEY_CLASSES_ROOT\TypeLib\{8594CB7B-5A4B-414C-B40F-6C42152B4D2B}
HKEY_CLASSES_ROOT\TypeLib\{92A0BFEF-D370-4D4F-BA70-F0C0AFB19B9F}
HKEY_CLASSES_ROOT\TypeLib\{C3E17D0D-593A-457B-A1DA-6D082E29323A}
HKEY_CLASSES_ROOT\TypeLib\{ECC4AB37-565F-4424-8802-E4BC7766BA58}
HKEY_CURRENT_USER\CLSID\{0FDA4D2B-7975-405d-8D7C-F5E2247EAE80}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D7B3E460-9968-4191-BD6F-BEED1BC18482}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls\%Windir%\Downloaded Program Files\oeloader.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls\%Windir%\Downloaded Program Files\oeloader.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\%Windir%/Downloaded Program Files/oeloader.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\%Windir%/Downloaded Program Files/oeloader.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Orbit
Delete files:ad.exe, oeloader.exe, view.exe, update.exe, oeloader.dll, redirector.dll, search.dll, toolbar.dll
Delete directories:C:\Program Files\Orbit
C:\Program Files\Common Files\OE
Misc:[site address] is an adress of a web site on the orbitexplorer.com domain.
Exact file location:
ad.exe, view.exe, update.exe - C:\Program Files\Orbit
redirector.dll, search.dll, toolbar.dll - C:\Program Files\Common Files\OE
oeloader.exe, oeloader.dll - C:\Windows\Downloaded Program Files or C:\Winnt\Downloaded Program Files