Saturday, January 24, 2009

CWS.Searchmeup Hijacker

How To Remove CWS.Searchmeup?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
CWS.Searchmeup is dangerous virus:
When the default home page is hijacked, the browser opens to the web page set by the hijacker
instead of the user's designated home page. In some cases, the hijacker may block users from
restoring their desired home page.


CWS.Searchmeup Symptoms:

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{0e1230f8-ea50-42a9-983c-d22abc2eed3b}
HKEY_CLASSES_ROOT\Interface\{95B92D92-8B7D-4A19-A3F1-43113B4DBCAF}
HKEY_CLASSES_ROOT\toolband.toolbandobj.1
HKEY_CURRENT_USER\software\toolband
HKEY_CLASSES_ROOT\clsid\{441354c5-911b-409b-9a66-a11d6d4e1a22}
HKEY_CLASSES_ROOT\interface\{95b92d92-8b7d-4a19-a3f1-43113b4dbcaf}
HKEY_CLASSES_ROOT\toolband.toolbandhelper
HKEY_CLASSES_ROOT\toolband.toolbandhelper.1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{441354c5-911b-409b-9a66-a11d6d4e1a22}

Registry Values:
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Remote.Hack.Remote.Administration.Tool Backdoor Information
Progent Trojan Removal instruction

No comments: