Overview:
ClearSearch -
The Clear Search Address Bar Search Software, when installed on your computer,
allows you to conduct Internet searches through several different search
engines. This software is installed on your computer as a module that comes with
free software or other content when you downloaded it from the Internet.
ClearSearch is adware and you do not want it! I suggest removing this system
right away. It can update itself without your permission as well as install
additional software. It also calls home daily and sends information about your
browsing habits.
The good side is it cleans out the browser hijacking parts of Xupiter,
HuntBar/MSLink, CommonName, NewDotNet, the iWon toolbar/search assistant and
Netword.
http://www.clear-search.com/
Their uninstaller:
http://www.clear-search.com/ClrSchUninstall.exe
Also Known As:
Adware.ClearSearch
Backdoor.Ruledor.b
BKDR_RULEDOR.E
ClearSearch.bho1
IGetNet.ClearSearch
Destroy Autorun:
Delete the following keys
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\new.net startup
Reboot
your system then:
Make sure
you click start --> Run and type in msconfig. Then select the startup tab. Any
references to the processes below should be deleted
End
Processes (may or may not exist):
clrschuninstall.exe
clrschp038[1].exe
clrschp010.exe
loader.exe
fnuninstaller.exe
ss_revco16_setup.exe
This bug seems to produce random .exe names in several places so you will
want to look for any bizarre looking names and end them.
Unregister DLLs:
Tip: this is only a list of known files/locations. You will want to do a
search by the name of the file to see if they're on your system.
A while back I wrote a guide to
Register/remove DLL or AX
files which you will need if you don't know how to unregister these files.
Each file
is in several locations so you'll need to search for them and unregister +
delete them in every location you find.
bi.dll
clrschieplugin.dll
csie.dll
csieinst.dll
csbi.dll
cssb.dll
csss.dll
cszt.dll
ie_clrsch.dll
ietie.dll
ss.dll
update_removeold.dll
update_rsp.dll
Remove Directories:
%profile%\local
settings\temp\clrsch
%program_files%\clearsearch
%windows%\temp\clrsch
%program_files%\csbb
Clean your Registry:
You should
be back to normal IF this was your only problem. I suggest you post in our HJT
forum since its not likely that this is your only bug.
Read this first