· Overview ·
· Origins ·
· Distribution ·
· Operation ·
· Risks ·
· Detection and Removal ·
· Research ·


Vendor Notes:

from the web site: 'SearchV is a Performance-Based Advertising Network that reaches millions of consumers daily, via our partnerships with top quality web sites. We offer Cost-Per-Click (CPC) advertising solutions, so you only pay for unique visitors that have clicked on your specific ad. What's more, you choose the price that you want to pay for each click and you can change this price at any time. Our easy to use, on-line tools allow you to manage your ad campaign in real-time!'


MsUpdate, W32/Dumaru trojan

See Also:



Hijacker: Any software that resets your browser's settings to point to other sites. Hijacks may reroute your info and address requests through an unseen site, capturing that info. In such hijacks, your browser may behave normally, but be slower.

Downloader: A program designed to retrieve and install additional files, when run. Most will be configured to retrieve from a designated web or FTP site.

Similar Pests:

Hijacker · Downloader



First Aid

By This Group: ·

Mailing Address:

First Aid PO BOX 5874 Gasa, 541245 WS



Date of Origin:

July, 2003



  • SearchV: 32.0%
  • More Info

    Clot Factor:

  • SearchV: 2
  • The "Clot Factor" is a measure of how much a pest "gums up" a machine by adding registry entries, files, and directories. As more objects are placed in a machine, manual removal becomes more difficult and more error-prone.


  • SearchV: Insufficient data to report growth
  • Operation

    Storage Required:

  • SearchV: at least 901 KB
  • Browser Performance:

    Likely to slow performance of Internet Explorer.


    Privacy Policy:

    Detection and Removal

    Automatic Removal:

    PestPatrol detects this.

    PestPatrol removes this.

    Manual Removal:

    Close all browser and all Windows Explorer windows before proceeding...
    1. Click Start | Run and type regedit to open the Registry Editor.
    2. Navigate to this key: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main.
    3. In the right pane, look for an entry called Start Page. Double click it.
    4. In the Value Data box, if the URL is, that's your culprit. Change it to your desired start page.
    5. Click OK and close the Registry Editor.
    SearchV may modify your hosts file to redirect searches to Search for and remove this line if found.
    Stop Running Processes:

    Kill these running processes with Task Manager:

    Remove AutoRun Reference:

    Go To the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run.
    If you find the value HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\ahst, delete it and reboot the machine immediately.

    Unregister DLLs:

    Unregister these DLLs with Regsvr32, then reboot:

    Clean Registry:

    Remove these registry items (if present) with RegEdit:

    Remove Files:

    Remove these files (if present) with Windows Explorer:

    Restore Settings:

    After following the instructions above, you will still need to restore your original settings and prevent this from happening again. Here''s how.


    File Analyses:

    More Info:

  • AllTheWeb, AltaVista, AOL Search, Ask Jeeves, Google, HotBot, Lycos, LookSmart, MSN, Yahoo!
  • Research By:

  • PestPatrol's Pest Research Center
  • Last Revised:

    April 04, 2005