Wednesday, November 19, 2008

SearchingAll Adware

Click here to remove SearchingAll malware
SearchingAll description:
SearchingAll Category:Adware,Hijacker
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits
A Search hijacker redirects search results to other pages and may
transmit search and browsing data to unknown servers. An error page hijacker directs
the browser to another page, usually an advertising page, instead of the usual error
page when the requested URL is not found.

Detection SearchingAll :

SearchingAll Registry Keys:
HKEY_CLASSES_ROOT\clsid\{f50043fa-973f-43ce-8222-e1b2e2c1203d}
HKEY_CURRENT_USER\software\xbtb0000
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{87f02779-6d88-4958-8ad3-83c12d86adc7}

SearchingAll Registry Values:
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/about.html
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/basis.xml
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/error.html
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/logo.bmp
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/nav.bmp
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/options.html
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/tb_external.xml
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/toolbar.crc
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/toolbar.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/version.txt

Removing SearchingAll:

you can run trial version of ExterminateIt, or remove SearchingAll manually.


To completely manually remove SearchingAll malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SearchingAll.


Also Be Aware of the Following Threats:
Removing Trojan.Downloader.Win32.Zlob Trojan

0 Comments:

Post a Comment

Subscribe to Post Comments [Atom]

<< Home