ClearSearch

Description: Adware
Risk Level: High
Date of First Occurence: Monday, April 28, 2008
Software Developer: Clear Search, Inc.
Brief Info: ClearSearch is an adware component that periodically contacts a Web site on the clrsch.com domain, for advertisement tracking purposes.
Removal: This threat can be removed using "Spyware Terminator"

ENTFERNEN SPYWARE »

Geographical Distribution of Threat "ClearSearch"

Threat Info

View All

Detected Items

  1. Detected Files: %SYSDIR%\IETie.dll MD5: 88C11F9358D8B5B31C057240C40E13C2 Size:73728 %TEMP%\clrsch\fnuninstaller.exe MD5: 2C0C2BB0AA70D8EFEFAEC0C24ABA7CC1 Size:50176 MD5: DE3E1A8F7D83BFAB2F1F3927A8820DB1 Size:49664 MD5: 606273A78E45595553780ECFF047BDF8 Size:49664 MD5: 8176BE3230D4BEB4B790C26724EC7445 Size:49664
  2. Detected Files with variable Filenames:

Detecting items list:

  1. Files by Name %TEMP%\clrsch\fnuninstaller.exe %TEMP%\clrsch\ss_revco16_setup.exe %programfiles%\clearsearch\bi.dll %programfiles%\clearsearch\clrschieplugin.dll %programfiles%\clearsearch\csbi.dll %programfiles%\clearsearch\csie16.dll %programfiles%\clearsearch\csie32.dll %programfiles%\clearsearch\cssb.dll %programfiles%\clearsearch\csss.dll %programfiles%\clearsearch\cszt.dll %programfiles%\clearsearch\ie_clrsch.dll %programfiles%\clearsearch\ss.dll %programfiles%\csbb\csiehookinst.dll %programfiles%\csbb\csv7p88.exe %programfiles%\lycos\ieagent\csie16.dll %programfiles%\lycos\ieagent\csie32.dll %programfiles%\prositefinder\37jujcxf.dll %programfiles%\prositefinder\67599164.bin %programfiles%\prositefinder\a4r9kiut.dll %programfiles%\prositefinder\h90wdnr6.dll %programfiles%\prositefinder\nt2me7n0.dll %programfiles%\prositefinder\q62txa3o.dll %sysdir%\ietie.dll %sysdir%\temp\clrschp010.exe
  2. Files by CLSID or Name CLSID=722759b4-2b5f-43e6-856b-d2d770f3d05b CLSID=a351d4b1-bf54-41f1-bec0-8a1c4ecd72c7 CLSID=947e6d5a-4b9f-4cf4-91b3-562ca8d03313
  3. Registry Keys HKCR\ie_clrsch.iehooks HKCR\ie_clrsch.iehooks.1 HKLM\software\clrsch HKLM\software\csbb

« Go to Software Database