Clear Search

[Ryan Pfleger]

Hi, Everytime I try to do a search from the address bar of IE 6.0 it does it
using something called Clear Search. The address is www.clr-sch.com. I
want it to stop doing this. Any tips? I already tried resetting it through
Internet Options, and I have run Ad-Aware and another program called Hijack
Blaster. I have Windows XP.

Thanks in advance.

Ryan

[mto]

"Ryan Pfleger" <HATESryanSPAMpfleger@NOcableSPAMonePLEASE.net> wrote in
message news:vjdg2tl038sgcb@corp.supernews.com...
> Hi, Everytime I try to do a search from the address bar of IE 6.0 it does
it
> using something called Clear Search. The address is www.clr-sch.com. I
> want it to stop doing this. Any tips? I already tried resetting it
through
> Internet Options, and I have run Ad-Aware and another program called
Hijack
> Blaster. I have Windows XP.
>
> Thanks in advance.
>
> Ryan

Go get SpyBot Search and Destroy - free at http://security.kolla.de/

Update it immediately then run it in advanced mode. If that does not find
and automatically remove whatever it is it will allow you to remove the
search page - look under tools.

[Jay T. Blocksom]

On 24 Aug 2003 09:10:41 -0700, in <alt.privacy.spyware>,
spencey@mindspring.com (Spencer) wrote:
>
> Hey Ryan,
[snip]

Please stop top-posting.

> This website became very annoying to me as well. What is happening
> is a loader is installed on your computer located at program
> files/clearsearch folder. You will not be able to remove it by
> deleting the folder and it does not install in the control panel under
> programs. However, here is a what you can do. You can go to the
> [REDACTED by JTB] website
[snip]

Please do NOT post "in the clear" URLs for sites hosting spyware, drive-by
downloads, or similar crap. See <http://shplink.com/misc/FAQ.htm#seven>

> and do a any type of search, it will bring
> back results but what you are insterested in is at the very bottom of
> the search results screen which is Uninstaller. click on that link at
> it ask you to download the installer or run it from the location.
[snip]

You would trust the purveyor of the parasite to properly remove it?

The word that comes to mind is "naive".

--

Jay T. Blocksom
--------------------------------
Appropriate Technology, Inc.
usenet01[at]appropriate-tech.net


"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
-- Benjamin Franklin, Historical Review of Pennsylvania, 1759.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
NOTE: E-Mail address in "From:" line is INVALID! Remove +SPAMBLOCK to mail.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Unsolicited advertising sent to this E-Mail address is expressly prohibited
under USC Title 47, Section 227. Violators are subject to charge of up to
$1,500 per incident or treble actual costs, whichever is greater.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

[R.A.]

I just got rid of this damn thing. I tried Ad-Aware and Spybot S&D did
not catch this one (they've been excellent in general, though).

Go to Program Files -> ClearSearch and remove all files inside it. One
of them (named something lie ie_clrsch.dll) will be locked and is a
pain to remove since it is loaded by explorer.exe, so you can either
boot from a floppy and delete the file directly, or:

1. Rename ie_clrscr.dll to anything else; I used die.now =)
2. Open your task manager and kill explorer.exe. This will kill your
windows shell, but it will restart in a few seconds. If it fails to do
so, simply do a File -> New Task from your task manager and type
'explorer'. This will force a restart
3. The new explorer will fail to load the nasty DLL. There will also
be a left-over registry entry pointing to the DLL under
[HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows\ CurrentVersion\
Run]. If you're comfortable tinkering with the registry, you may want
to delete the related key from there.

I hope this helps.

R.A.

[YoKenny]

R.A. wrote:
> I just got rid of this damn thing. I tried Ad-Aware and Spybot S&D did
> not catch this one (they've been excellent in general, though).
>
> Go to Program Files -> ClearSearch and remove all files inside it. One
> of them (named something lie ie_clrsch.dll) will be locked and is a
> pain to remove since it is loaded by explorer.exe, so you can either
> boot from a floppy and delete the file directly, or:
>
> 1. Rename ie_clrscr.dll to anything else; I used die.now =)
> 2. Open your task manager and kill explorer.exe. This will kill your
> windows shell, but it will restart in a few seconds. If it fails to do
> so, simply do a File -> New Task from your task manager and type
> 'explorer'. This will force a restart
> 3. The new explorer will fail to load the nasty DLL. There will also
> be a left-over registry entry pointing to the DLL under
> [HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows\ CurrentVersion\
> Run]. If you're comfortable tinkering with the registry, you may want
> to delete the related key from there.
>
> I hope this helps.

Must be a new mutation. Post your info to the apropriate forums to get the
apps updated.
See http://217.115.153.73/parasite/IGetNet.html

[Pete Brumberg]

spammustgo@yahoo.com (R.A.) wrote in message news:<ee0a374d.0309021629.1d8176cb@posting.google. com>...
> I just got rid of this damn thing. I tried Ad-Aware and Spybot S&D did
> not catch this one (they've been excellent in general, though).
>
> Go to Program Files -> ClearSearch and remove all files inside it. One
> of them (named something lie ie_clrsch.dll) will be locked and is a
> pain to remove since it is loaded by explorer.exe, so you can either
> boot from a floppy and delete the file directly, or:
>
> 1. Rename ie_clrscr.dll to anything else; I used die.now =)
> 2. Open your task manager and kill explorer.exe. This will kill your
> windows shell, but it will restart in a few seconds. If it fails to do
> so, simply do a File -> New Task from your task manager and type
> 'explorer'. This will force a restart
> 3. The new explorer will fail to load the nasty DLL. There will also
> be a left-over registry entry pointing to the DLL under
> [HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows\ CurrentVersion\
> Run]. If you're comfortable tinkering with the registry, you may want
> to delete the related key from there.
>
> I hope this helps.
>
> R.A.


R.A.
How can you rename the file when it is protected by windows since it
is in use?? Have you done that from a DOS prompt? I'm not sure how
this piece of software even ended up on my PC, but getting it off is
like trying to kill a mosquito with a pair of chopsticks.

Thanks,

Pete

[Friedrich Wilhelm Nietzsche]

structrd1@hotmail.com (Pete Brumberg) wrote in message news:<db4b0d21.0309180951.5fc5d18a@posting.google. com>...
> spammustgo@yahoo.com (R.A.) wrote in message news:<ee0a374d.0309021629.1d8176cb@posting.google. com>...
> > I just got rid of this damn thing. I tried Ad-Aware and Spybot S&D did
> > not catch this one (they've been excellent in general, though).
> >
> > Go to Program Files -> ClearSearch and remove all files inside it. One
> > of them (named something lie ie_clrsch.dll) will be locked and is a
> > pain to remove since it is loaded by explorer.exe, so you can either
> > boot from a floppy and delete the file directly, or:
> >
> > 1. Rename ie_clrscr.dll to anything else; I used die.now =)
> > 2. Open your task manager and kill explorer.exe. This will kill your
> > windows shell, but it will restart in a few seconds. If it fails to do
> > so, simply do a File -> New Task from your task manager and type
> > 'explorer'. This will force a restart
> > 3. The new explorer will fail to load the nasty DLL. There will also
> > be a left-over registry entry pointing to the DLL under
> > [HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows\ CurrentVersion\
> > Run]. If you're comfortable tinkering with the registry, you may want
> > to delete the related key from there.
> >
> > I hope this helps.
> >
> > R.A.
>
>
> R.A.
> How can you rename the file when it is protected by windows since it
> is in use?? Have you done that from a DOS prompt? I'm not sure how
> this piece of software even ended up on my PC, but getting it off is
> like trying to kill a mosquito with a pair of chopsticks.
>
> Thanks,
>
> Pete

You don't rename the file; You rename the folder it's in to
"DeleteWhenReady". Then, once you've rebooted the box, just delete
it. This is of course after you cleaned the registry of "clrsch",
"clear search", etc.