Exterminate It! Antimalware

malpedia

Known threats:700,085 Last Update:August 24, 10:09

Testimonials

Just want to say that apparently your Exterminate It has worked like a charm. I was infected with a most troublesome Malware Trojan that kept replicating every time McAfee found, blocked and removed it... most annoying for several days... until Mr. Google led me to your door. What a God send!

With thanks,

Tom S.

WebSearch- Registry Keys List

This is a complete list of WebSearch registry keys collected by Exterminate It!. If you find any of these registry keys on your PC, your computer is very likely to be infected with the WebSearch - bho,hijacker,toolbar.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • HKEY_LOCAL_MACHINE\software\classes\interface\{1d4db7d3-6ec9-47a3-bd87-1e41684e07bb}
  • HKEY_LOCAL_MACHINE\software\classes\interface\{1d4db7d1-6ec9-47a3-bd87-1e41684e07bb}
  • HKEY_LOCAL_MACHINE\software\classes\typelib\{1d4db7d0-6ec9-47a3-bd87-1e41684e07bb}
  • HKEY_LOCAL_MACHINE\software\classes\clsid\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb}
  • HKEY_CURRENT_USER\software\toolbar
  • HKEY_USERS\.default\software\toolbar
  • HKEY_LOCAL_MACHINE\software\toolbar
  • HKEY_CLASSES_ROOT\common.buttons
  • HKEY_CLASSES_ROOT\protocols\name-space handler\res
  • HKEY_CLASSES_ROOT\clsid\{3c53010d-97ba-4650-84c5-1a6faa31055e}
  • HKEY_CLASSES_ROOT\clsid\{15ad6789-cdb4-47e1-a9da-992ee8e6bad6}
  • HKEY_CLASSES_ROOT\clsid\{2c4e6d22-b71f-491f-aad3-b6972a650d50}
  • HKEY_CLASSES_ROOT\clsid\{6e21f428-5617-47f7-aed8-b2e1d8fba711}
  • HKEY_CLASSES_ROOT\clsid\{708be496-e202-497b-bc31-9cf47e3bf8d6}
  • HKEY_CLASSES_ROOT\clsid\{8b0fa130-0c3d-4cb1-aeb7-2c29da5509a3}
  • HKEY_CLASSES_ROOT\interface\{234f09fb-fe89-4c6d-9203-31832fc051c3}
  • HKEY_CLASSES_ROOT\interface\{365b9a54-e613-46e5-9db1-4f91a9de80bd}
  • HKEY_CLASSES_ROOT\interface\{618be527-b7f5-417c-bc51-98fdc2d6de61}
  • HKEY_CLASSES_ROOT\interface\{66c22569-f05c-4a70-a142-763b337e1002}
  • HKEY_CLASSES_ROOT\interface\{7b8bd940-b1ef-460c-85a2-9acaaf7f9303}
  • HKEY_CLASSES_ROOT\interface\{99aa88d1-d9d3-410a-be9e-044f94c183da}
  • HKEY_CLASSES_ROOT\interface\{c380566d-f343-42ab-987b-6b38a1a35747}
  • HKEY_CLASSES_ROOT\interface\{d1951679-1d52-43fc-9585-0737143585f5}
  • HKEY_CLASSES_ROOT\interface\{f273d4ea-2025-4410-8408-251a0cd46be7}
  • HKEY_CLASSES_ROOT\typelib\{b23b3add-84b1-414a-92b9-0cabe5a781f4}
  • HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\userdata\sto
  • HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{87766247-311c-43b4-8499-3d5fec94a183}
  • HKEY_LOCAL_MACHINE\software\classes\clsid\{708be496-e202-497b-bc31-9cf47e3bf8d6}
  • HKEY_LOCAL_MACHINE\software\classes\clsid\{2c4e6d22-b71f-491f-aad3-b6972a650d50}
  • HKEY_LOCAL_MACHINE\software\classes\clsid\{6e21f428-5617-47f7-aed8-b2e1d8fba711}
  • HKEY_LOCAL_MACHINE\software\classes\clsid\{8b0fa130-0c3d-4cb1-aeb7-2c29da5509a3}
  • HKEY_LOCAL_MACHINE\software\classes\interface\{234f09fb-fe89-4c6d-9203-31832fc051c3}
  • HKEY_LOCAL_MACHINE\software\classes\interface\{365b9a54-e613-46e5-9db1-4f91a9de80bd}
  • HKEY_LOCAL_MACHINE\software\classes\interface\{618be527-b7f5-417c-bc51-98fdc2d6de61}
  • HKEY_LOCAL_MACHINE\software\classes\interface\{66c22569-f05c-4a70-a142-763b337e1002}
  • HKEY_LOCAL_MACHINE\software\classes\interface\{7b8bd940-b1ef-460c-85a2-9acaaf7f9303}
  • HKEY_LOCAL_MACHINE\software\classes\interface\{99aa88d1-d9d3-410a-be9e-044f94c183da}
  • HKEY_LOCAL_MACHINE\software\classes\interface\{c380566d-f343-42ab-987b-6b38a1a35747}
  • HKEY_LOCAL_MACHINE\software\classes\interface\{d1951679-1d52-43fc-9585-0737143585f5}
  • HKEY_LOCAL_MACHINE\software\classes\interface\{f273d4ea-2025-4410-8408-251a0cd46be7}
  • HKEY_LOCAL_MACHINE\software\classes\typelib\{b23b3add-84b1-414a-92b9-0cabe5a781f4}
  • HKEY_LOCAL_MACHINE\software\classes\interface\{bd6f129a-08db-4cc5-a75a-f2ab79e55b6e}
  • HKEY_LOCAL_MACHINE\software\classes\typelib\{8992b6ca-b8c9-4aed-bf89-0a17f6296a06}
  • HKEY_CLASSES_ROOT\clsid\{fb45c451-b0e9-4407-bb6a-9361013f3e9a}
  • HKEY_LOCAL_MACHINE\software\btiein
  • HKEY_CLASSES_ROOT\toolbar.itoolbarscriptclass
  • HKEY_LOCAL_MACHINE\software\classes\toolbar.itoolbarscriptclass
  • HKEY_CLASSES_ROOT\clsid\{8da5457f-a8aa-4ccf-a842-70e6fd274094}
  • HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{8da5457f-a8aa-4ccf-a842-70e6fd274094}
  • HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/qdow_as2.dll
  • HKEY_CLASSES_ROOT\clsid\{af8b3c81-cd19-45fb-b6be-160d27711de8}
  • HKEY_CLASSES_ROOT\interface\{6f59d850-a155-4930-98ae-689a2bc7b8e8}
  • HKEY_CLASSES_ROOT\clsid\{310cc549-4541-46a9-940f-52b342a6e682}
  • HKEY_CLASSES_ROOT\clsid\{69357d4e-bf4d-4651-91e9-52ecd45a0128}
  • HKEY_CLASSES_ROOT\clsid\{bbf122a7-8a4d-45b5-9e00-0f68bc87c904}
  • HKEY_CLASSES_ROOT\clsid\{cae0999f-78c5-49dc-9f30-13142aaaaba4}
  • HKEY_CLASSES_ROOT\tbps.pluginconfig
  • HKEY_CLASSES_ROOT\tbps.plugindown
  • HKEY_CLASSES_ROOT\tbps.pluginevents
  • HKEY_CLASSES_ROOT\tbps.plugininst
  • HKEY_CLASSES_ROOT\tbps.pluginserver
  • HKEY_CLASSES_ROOT\tbps.toolbarscript
  • HKEY_CLASSES_ROOT\typelib\{37ac49e3-e906-4bd8-ae83-d0f7fb48fd17}
  • HKEY_LOCAL_MACHINE\software\classes\tbps.pluginconfig
  • HKEY_LOCAL_MACHINE\software\classes\tbps.pluginevents
  • HKEY_LOCAL_MACHINE\software\classes\tbps.pluginserver
  • HKEY_LOCAL_MACHINE\software\classes\tbps.toolbarscript
  • HKEY_LOCAL_MACHINE\software\classes\clsid\{310cc549-4541-46a9-940f-52b342a6e682}
  • HKEY_LOCAL_MACHINE\software\classes\clsid\{bbf122a7-8a4d-45b5-9e00-0f68bc87c904}
  • HKEY_LOCAL_MACHINE\software\classes\clsid\{cae0999f-78c5-49dc-9f30-13142aaaaba4}
  • HKEY_LOCAL_MACHINE\software\classes\tbps.plugindown
  • HKEY_LOCAL_MACHINE\software\classes\tbps.plugininst
  • HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{87067f04-de4c-4688-bc3c-4fcf39d609e7}
  • HKEY_CLASSES_ROOT\ssaver.saverobj
  • HKEY_CLASSES_ROOT\typelib\{5cf68a06-673d-4619-a805-c8fc9ac611dd}
  • HKEY_CLASSES_ROOT\clsid\{26e8361f-bce7-4f75-a347-98c88b418322}
  • HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{26e8361f-bce7-4f75-a347-98c88b418322}
  • HKEY_CLASSES_ROOT\toolbar.resprotocol
  • HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hauto_uninstall
  • HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\ttool_uninstall
  • HKEY_CLASSES_ROOT\clsid\{ff76a5da-6158-4439-99ff-edc1b3fe100c}
  • HKEY_CLASSES_ROOT\protocols\handler\tpro
  • HKEY_CLASSES_ROOT\tbps.plugincfgobj
  • HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tbpssvc
  • HKEY_CLASSES_ROOT\clsid\{339bb23f-a864-48c0-a59f-29ea915965ec}
  • HKEY_CLASSES_ROOT\clsid\{8952a998-1e7e-4716-b23d-3dbe03910972}
  • HKEY_CLASSES_ROOT\clsid\{f1616b86-9288-489d-b71a-0ccf2f1a89da}
  • HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{8952a998-1e7e-4716-b23d-3dbe03910972}
  • HKEY_CURRENT_USER\software\btlink
  • HKEY_LOCAL_MACHINE\software\btlink
  • HKEY_CURRENT_USER\software\btiein
  • HKEY_CLASSES_ROOT\radio.radioplayer
  • HKEY_CURRENT_USER\software\updater
  • HKEY_CURRENT_USER\software\webinstall
  • HKEY_CURRENT_USER\software\hopper
  • HKEY_CLASSES_ROOT\appid\{c81cff28-6df1-402f-b78c-d9493ef59882}
  • HKEY_CLASSES_ROOT\hp.hopper.1
  • HKEY_CLASSES_ROOT\sp.smartpops.1
  • HKEY_LOCAL_MACHINE\software\classes\appid\{c81cff28-6df1-402f-b78c-d9493ef59882}
  • HKEY_LOCAL_MACHINE\software\classes\hp.hopper.1
  • HKEY_LOCAL_MACHINE\software\classes\sp.smartpops.1
  • HKEY_CLASSES_ROOT\hp.hopper
  • HKEY_CLASSES_ROOT\sp.smartpops
  • HKEY_LOCAL_MACHINE\software\classes\hp.hopper
  • HKEY_LOCAL_MACHINE\software\classes\sp.smartpops
  • HKEY_LOCAL_MACHINE\software\classes\clsid\{0421701d-cf13-4e70-adf0-45a953e7cb8b}
  • HKEY_CLASSES_ROOT\appid\hp.exe
  • HKEY_CLASSES_ROOT\clsid\{e79061ba-b6e7-4a9d-a07c-c3cb561013b4}
  • HKEY_CLASSES_ROOT\interface\{1423903e-86cc-4470-8ab0-257c10d77d45}
  • HKEY_CLASSES_ROOT\typelib\{47350d97-09e9-4590-864e-3431da53bf37}
  • HKEY_LOCAL_MACHINE\software\classes\clsid\{e79061ba-b6e7-4a9d-a07c-c3cb561013b4}
  • HKEY_LOCAL_MACHINE\software\classes\interface\{1423903e-86cc-4470-8ab0-257c10d77d45}
  • HKEY_LOCAL_MACHINE\software\classes\interface\{fb82ccd5-174b-4379-bc37-72d9b5adaeda}
  • HKEY_LOCAL_MACHINE\software\classes\typelib\{47350d97-09e9-4590-864e-3431da53bf37}
  • HKEY_CURRENT_USER\software\activeinstall
  • HKEY_CLASSES_ROOT\interface\{4dea7ca1-3372-4204-937c-2dd4a6ed6562}
  • HKEY_CLASSES_ROOT\typelib\{fa777197-4bf7-4aa9-a088-a0d803198de0}
  • HKEY_LOCAL_MACHINE\software\classes\interface\{4dea7ca1-3372-4204-937c-2dd4a6ed6562}
  • HKEY_LOCAL_MACHINE\software\classes\interface\{a42dc659-33b5-409e-a433-650ac42ecca4}
  • HKEY_LOCAL_MACHINE\software\classes\interface\{a8516f49-8046-4295-8ee9-c59d5041c9e2}
  • HKEY_LOCAL_MACHINE\software\classes\typelib\{fa777197-4bf7-4aa9-a088-a0d803198de0}
  • HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{d5c778f1-cf13-4e70-adf0-45a953e7cb8b}
  • HKEY_CLASSES_ROOT\clsid\{d5c778f1-cf13-4e70-adf0-45a953e7cb8b}
  • HKEY_CLASSES_ROOT\interface\{4dea7ca1-3372-4204-937c-2dd4a6ed6562}
  • HKEY_CLASSES_ROOT\sp.smartpops
  • HKEY_CLASSES_ROOT\sp.smartpops.1
  • HKEY_CLASSES_ROOT\typelib\{fa777197-4bf7-4aa9-a088-a0d803198de0}
  • HKEY_CURRENT_USER\software\activeinstall
  • HKEY_CURRENT_USER\software\hopper
  • HKEY_CURRENT_USER\software\updater
  • HKEY_CURRENT_USER\software\webinstall
  • HKEY_LOCAL_MACHINE\software\classes\clsid\{d5c778f1-cf13-4e70-adf0-45a953e7cb8b}
  • HKEY_LOCAL_MACHINE\software\classes\interface\{4dea7ca1-3372-4204-937c-2dd4a6ed6562}
  • HKEY_LOCAL_MACHINE\software\classes\interface\{a42dc659-33b5-409e-a433-650ac42ecca4}
  • HKEY_LOCAL_MACHINE\software\classes\interface\{a8516f49-8046-4295-8ee9-c59d5041c9e2}
  • HKEY_LOCAL_MACHINE\software\classes\sp.smartpops
  • HKEY_LOCAL_MACHINE\software\classes\sp.smartpops.1
  • HKEY_LOCAL_MACHINE\software\classes\typelib\{fa777197-4bf7-4aa9-a088-a0d803198de0}
  • HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{d5c778f1-cf13-4e70-adf0-45a953e7cb8b}
  • HKEY_CLASSES_ROOT\btlink.relatedlinksprotocol
  • HKEY_CLASSES_ROOT\btlink.resprotocol
  • HKEY_CLASSES_ROOT\clsid\{cd8d1caa-fe4a-45df-a06c-028aaf1821de}
  • HKEY_CLASSES_ROOT\tbps.plugindownadd
  • HKEY_CURRENT_USER\software\microsoft\internet explorer\main
  • HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\qdow_as2.dll
  • HKEY_CLASSES_ROOT\btieinscriptconfigproj.btieinscriptc
  • HKEY_CLASSES_ROOT\btieinscriptconfigproj.btieinscriptconfig
  • HKEY_CLASSES_ROOT\clsid\{001dae60-95c0-11d3-924e-009027950886}
  • HKEY_CLASSES_ROOT\clsid\{356639aa-e878-40ff-b2f8-e22fa87df389}
  • HKEY_CLASSES_ROOT\clsid\{63b78bc1-a711-4d46-ad2f-c581ac420d41}
  • HKEY_CLASSES_ROOT\clsid\{cabcf5e7-0c79-4f1c-909d-b9cf68fed746}
  • HKEY_CLASSES_ROOT\clsid\{d6dff6d8-b94b-4720-b730-1c38c7065c3b}
  • HKEY_CLASSES_ROOT\interface\{26e8361f-bce7-4f75-a347-98c88b418321}
  • HKEY_CLASSES_ROOT\protocols\handler\relatedlinks
  • HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{001dae60-95c0-11d3-924e-009027950886}
  • HKEY_CLASSES_ROOT\typelib\{db9a4e78-35df-4a54-b6c5-c5190ceaf949}
  • HKEY_LOCAL_MACHINE\software\classes\clsid\{001dae60-95c0-11d3-924e-009027950886}
  • HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{001dae60-95c0-11d3-924e-009027950886}
  • HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{63b78bc1-a711-4d46-ad2f-c581ac420d41}
  • HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{d6dff6d8-b94b-4720-b730-1c38c7065c3b}
  • HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\btlink_dll