Remove SmartSearch. Description and removal instructions

 
Title: SmartSearch

Type: Browser Hijackers
Severity scale:SmartSearch severity is 44  (44 / 100)
 
SmartSearch is a browser hijacker that changes Internet Explorer default home and search pages to undesirable web sites and modifies related search settings. The threat also redirects the web browser to unsolicited Internet resources every time the user enters a site address without the "http://" prefix. SmartSearch is able to automatically update itself via the Internet. The threat runs on every Windows startup.


SmartSearch properties:
• Changes browser settings
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic SmartSearch removal:

remover for SmartSearch

SmartSearch manual removal:

Kill processes:
accesss.exe, directx.exe, explore.exe, funny.exe, helpcvs.exe, internet.exe, systeem.exe, systemcritical.exe, wmplayer.exe, y.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SystemEmergency
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\www=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix\(Default)=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchURL=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Default_Page_URL=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Default_Search=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Bar=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Page=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\CustomizeSearch=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURL=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Default_Page_URL=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Default_Search_URL=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page=[site address]
Delete files:
accesss.exe, directx.exe, explore.exe, funny.exe, helpcvs.exe, internet.exe, systeem.exe, systemcritical.exe, wmplayer.exe, y.exe
Misc:
[site address] is an address of a web site on the smartsearch.ws domain.

Exact file location:
accesss.exe - C:\Program Files\Accessories
directx.exe - C:\Program Files\directx
explore.exe - C:\Windows or C:\Winnt
funny.exe, y.exe - C:
helpcvs.exe - C:\Windows\Help or C:\Winnt\Help
internet.exe - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
systeem.exe - C:\Program Files\Common Files\System
systemcritical.exe - C:\Games
wmplayer.exe - C:\Windows\Media or C:\Winnt\Media

Other programs to remove SmartSearch:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 19/03/04
Information updated: 24/09/05

Additional resources related to SmartSearch:

Attention: If you know or you have a website or page about SmartSearch removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about SmartSearch parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:


Comments from visitors:


1. by Gilles. 2004-06-17 10:06:54
I've tried the manual removal, I found no trace of 'SystemEmergency'. So the SmartSearch page is still my default Home page in the Internet Explorer.

2. by Gilles. 2004-06-17 10:06:17
The software cann't be install, so I don't know if I should try a manual ramoval. Should I ??


Latest spyware news:
Similar parasites: