SearchV


· Overview ·
· Origins ·
· Distribution ·
· Operation ·
· Risks ·
· Detection and Removal ·
· Research ·



Overview

Vendor Notes:

from the web site: 'SearchV is a Performance-Based Advertising Network that reaches millions of consumers daily, via our partnerships with top quality web sites. We offer Cost-Per-Click (CPC) advertising solutions, so you only pay for unique visitors that have clicked on your specific ad. What's more, you choose the price that you want to pay for each click and you can change this price at any time. Our easy to use, on-line tools allow you to manage your ad campaign in real-time!'

Alias:

MsUpdate, W32/Dumaru trojan

See Also:

Winshow

Category:

Hijacker: Any software that resets your browser's settings to point to other sites. Hijacks may reroute your info and address requests through an unseen site, capturing that info. In such hijacks, your browser may behave normally, but be slower.

Downloader: A program designed to retrieve and install additional files, when run. Most will be configured to retrieve from a designated web or FTP site.

Similar Pests:

Hijacker · Downloader

Origins

Group:

First Aid

By This Group:

Searchv.com ·

Mailing Address:

First Aid PO BOX 5874 Gasa, 541245 WS

EMail:

support@searchv.com

URL:

http://www.searchv.com/

Date of Origin:

July, 2003

Distribution

Prevalence:

  • SearchV: 32.0%
  • More Info

    Clot Factor:

  • SearchV: 2
  • The "Clot Factor" is a measure of how much a pest "gums up" a machine by adding registry entries, files, and directories. As more objects are placed in a machine, manual removal becomes more difficult and more error-prone.

    Growth:

  • SearchV: Insufficient data to report growth
  • Operation

    Storage Required:

  • SearchV: at least 901 KB
  • Browser Performance:

    Likely to slow performance of Internet Explorer.

    Risks

    Privacy Policy:

    http://www.searchv.com/privacy.html

    Detection and Removal

    Automatic Removal:

    PestPatrol detects this.

    PestPatrol removes this.



    Manual Removal:

    Close all browser and all Windows Explorer windows before proceeding...
    1. Click Start | Run and type regedit to open the Registry Editor.
    2. Navigate to this key: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main.
    3. In the right pane, look for an entry called Start Page. Double click it.
    4. In the Value Data box, if the URL is http://www.searchv.com/, that's your culprit. Change it to your desired start page.
    5. Click OK and close the Registry Editor.
    SearchV may modify your hosts file to redirect searches to http://209.66.114.130/ Search for 209.66.114.130 and remove this line if found.
    Stop Running Processes:

    Kill these running processes with Task Manager:

    Remove AutoRun Reference:

    Go To the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run.
    If you find the value HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\ahst, delete it and reboot the machine immediately.



    Unregister DLLs:

    Unregister these DLLs with Regsvr32, then reboot:

    Clean Registry:

    Remove these registry items (if present) with RegEdit:

    Remove Files:

    Remove these files (if present) with Windows Explorer:

    Restore Settings:

    After following the instructions above, you will still need to restore your original settings and prevent this from happening again. Here''s how.

    Research

    File Analyses:

    More Info:

  • AllTheWeb, AltaVista, AOL Search, Ask Jeeves, Google, HotBot, Lycos, LookSmart, MSN, Yahoo!
  • Research By:

  • PestPatrol's Pest Research Center
  • Last Revised:

    April 04, 2005