Wednesday, October 3, 2012

Searchsafe.com is a risky Web site

Basing on the last researches conducted by GridinSoft Trojan Killer Lab, Searchsafe.com is a risky website. It pushes computer users to use it to search information by pretending as a real search engine. Indeed, it is impossible to find any useful information by means of, it just a very nasty redirect virus. It is able to affect your browsing activities. This tricky redirect virus is also able to change your browser settings to keep hijacking your web browsers, and even takes place of your whole homepage, and cannot not work if you try to uninstall and reinstall your homepage. When you use the search engines, you will not get your desired search results but are forced to its website: Searchsafe.com or other annoying advertisement websites. In addition, it has the ability to modify your system settings to mess up your system. It can make your computer become more compromised so that other threats will get into your computer easily. What’s worse, Searchhere.com is an evil stealer; it traces your online activities and collects your personal information to transfer to the remote hackers for the illegal profits. You should keep in mind that Searchhere.com is a very harmful threat in your computer; you are highly recommended to remove it as soon as possible once it appears on your computer.

How to stop Searchhere.com disgusting activities

Stop Searchsafe.com running processes in the windows task manager. You need to open Registry Editor and delete these Searchhere.com registry entries:

  • HKEY_LOCAL_MACHINESOFTWAREClassesBrowserSeekIEHelper.DNSGuardCLSID
  • HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar “BrowserSeek Toolbar”
  • HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{99079a25-328f-4bd4-be04-00955acaa0a7} “BrowserSeek Toolbar”
  • HKEY_LOCAL_MACHINESOFTWAREClassesBrowserSeekIEHelper.DNSGuardCurVer
  • HKEY_LOCAL_MACHINESOFTWAREClassesBrowserSeekIEHelper.DNSGuard.1
  • HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{99079a25-328f-4bd4-be04-00955acaa0a7}InprocServer32 “C:PROGRA~1WINDOW~4ToolBarBrowserSeekdtx.dll”
  • HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}ProgID “BrowserSeekIEHelper.UrlHelper.1″
  • HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{A40DC6C5-79D0-4ca8-A185-8FF989AF1115} “UrlHelper Class”
  • HKEY_LOCAL_MACHINESOFTWAREClassesBrowserSeekIEHelper.DNSGuard
  • HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{99079a25-328f-4bd4-be04-00955acaa0a7}”BrowserSeek BrowserSeek Toolbar”
  • HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}VersionIndependentProgID “BrowserSeekIEHelper.UrlHelper”

to stop the redirects you should remove these files

  • %AppData%BrowserSeektoolbardtx.ini
  • %AppData%BrowserSeektoolbarguid.dat
  • %AppData%BrowserSeektoolbaruninstallIE.dat
  • %AppData%BrowserSeektoolbaruninstallStatIE.dat
  • %AppData%BrowserSeektoolbarcouponsmerchants2.xml
  • %AppData%BrowserSeektoolbarcouponsmerchants.xml
  • %AppData%BrowserSeektoolbarstats.dat
  • %AppData%BrowserSeektoolbarstat.log
  • %Temp%BrowserSeektoolbar-manifest.xml
  • %AppData%BrowserSeektoolbarcouponscategories.xml
  • %AppData%BrowserSeektoolbarlog.txt
  • %AppData%BrowserSeektoolbarpreferences.dat
  • %AppData%BrowserSeektoolbarversion.xml

SOURCE: http://remove-trojans.com/searchsafe-com-is-a-risky-web-site/

No comments:

Post a Comment