Malware Removal Instructions

  • Subscribe to our RSS feed.
  • Twitter
  • StumbleUpon
  • Reddit
  • Facebook
  • Digg

Sunday, 29 January 2012

How to Remove Searchqu (Uninstall Guide)

Posted on 03:41 by Unknown
Searchqu is installed alongside a shareware or freeware applications that are often defined as adware or potentially unwanted software. Searchqu is not a virus or any other type of malicious software. It changes your default home page to point to searchqu.com, installs a toolbar and adds additional search engine called Web Search. Some users report that each time they type search terms in the top search/URL box they get redirected to searchqu.com or search-results.com. I you ended up with this rather annoying software, then you probably were not paying attention and clicked through the installer of freeware software (very often Bandoo Media, iLivid) without noticing that you had agreed to those changes. Usually, it's an opt-out choice and you should really pay more attention to various optional features during the install process. We have no evidence that Searchqu is being distributed through the use of Trojans or any other malware. It doesn't download/install malware either. Searchqu doesn't appear in the list of programs, so you can't easily uninstall it. We receive emails from various people who can't remove Searchqu toolbar completely or restore web browser's default settings (usually, search engine and home page). If you have the same problem, please follow Searchqu removal guide for Internet Explorer, Mozilla Firefox and Google Chrome. Good luck and be safe online!



Removal guide updates:
05/25/11 - Created
01/29/2012 - Removal video



Searchqu removal instructions:

1. First of all, download recommended anti-malware software and run a full system scan. It will detect and remove this infection from your computer. You may then follow the manual removal instructions below to remove the leftover traces of this browser hijacker. Hopefully you won't have to do that.





2. Go to the Start Menu. Select Control Panel → Add/Remove Programs.
If you are using Windows Vista or Windows 7, select Control Panel → Uninstall a Program.



3. Search for Searchqu Toolbar and iLivid in the list. Select the program(s) and click Remove button.
If you are using Windows Vista/7, click Uninstall up near the top of that window.




Remove Searchqu Toolbar in Internet Explorer:

1. Open Internet Explorer. Go to Tools → Manage Add-ons.



2. Select Toolbars and Extensions. Uninstall/disable everything related to Searchqu from the list: Searchqu toolbar, UrlHelper Class, Bandoo Media, iLivid, etc.



3. Select Search Providers. First of all, choose Bing search engine and make it your default search provider. Then select Web Search and click Disable suggestions to disable it.



4. Go to Tools → Internet Options. Select General tab and click Use default button or enter your own website, e.g. google.com instead of searchqu.com. Click OK to save the changes. And that's about it.




Remove Searchqu Toolbar in Mozilla Firefox:

1. Open Mozilla Firefox. Go to Tools → Add-ons.



2. Select Extensions. Choose Searchqu Toolbar, Bandoo Media, iLivid (if found) and click Uninstall button.



3. Go to Tools → Options. Under the General tab reset the startup homepage or change it to google.com, etc. That's it.



4. In the location bar, type about:config and hit Enter.

In the filter at the top, type: keyword.URL

Double click it and remove searchqu.com and replace it with http://www.google.com.

It's possible that Searchqu will add itself to more than one place in about:config. To find other possible locations, please watch this Searchqu removal video:




Remove Searchqu in Google Chrome:

1. Click on Customize and control Google Chrome icon and select Options.



2. Choose Basic Options. Change Google Chrome homepage to google.com or any other and click the Manage search engines... button.



3. Select Google from the list and make it your default search engine.



4. Select Web Search from the list remove it by clicking the "X" mark as shown in the image below. That's it.




Remove Searchqu files and associated registry values manually (Optional)

Searchqu Toolbar resides in %AppData% folder.

%AppData% refers to:
C:\Documents and Settings\[UserName]\Application Data (in Windows 2000/XP)
C:\Users\[UserName]\AppData\Roaming (in Windows Vista & Windows 7)

Example in Windows XP:


Registry values are given below.


Associated Searchqu files and registry values:

Files:
  • %AppData%\searchqutoolbar\coupons\categories.xml
  • %AppData%\searchqutoolbar\coupons\merchants.xml
  • %AppData%\searchqutoolbar\coupons\merchants2.xml
  • %AppData%\searchqutoolbar\dtx.ini
  • %AppData%\searchqutoolbar\guid.dat
  • %AppData%\searchqutoolbar\log.txt
  • %AppData%\searchqutoolbar\preferences.dat
  • %AppData%\searchqutoolbar\stat.log
  • %AppData%\searchqutoolbar\stats.dat
  • %AppData%\searchqutoolbar\uninstallIE.dat
  • %AppData%\searchqutoolbar\uninstallStatIE.dat
  • %AppData%\searchqutoolbar\version.xml
  • %AppData%\searchqutoolbar\
  • %Temp%\searchqutoolbar-manifest.xml
%AppData% refers to:
C:\Documents and Settings\[UserName]\Application Data (in Windows 2000/XP)
C:\Users\[UserName]\AppData\Roaming (in Windows Vista & Windows 7)

Registry values:
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{99079a25-328f-4bd4-be04-00955acaa0a7}\InprocServer32 "C:\PROGRA~1\WINDOW~4\ToolBar\searchqudtx.dll"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{99079a25-328f-4bd4-be04-00955acaa0a7} "Searchqu Toolbar"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}\VersionIndependentProgID "SearchQUIEHelper.UrlHelper"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}\ProgID "SearchQUIEHelper.UrlHelper.1"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115} "UrlHelper Class"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard\CurVer
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard\CLSID
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar "Searchqu Toolbar"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079a25-328f-4bd4-be04-00955acaa0a7} "Searchqu Toolbar"
Share the knowledge:
Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest
Posted in | No comments
Newer Post Older Post Home

0 comments:

Post a Comment

Subscribe to: Post Comments (Atom)

Popular Posts

  • What is wrtc.exe and how to remove it?
    wrtc.exe - by Perion Network Ltd. What is wrtc.exe? wrtc.exe is a part of IncrediMail software, digitally signed by Perion Network Ltd. This...
  • Remove ShopperReports (Uninstall Guide)
    ShopperReports is defined as adware or a potentially unwanted program that displays marketing related results in a side pane of the browser...
  • Trojan.MBRlock, Внимание! Ваш компьютер заблокирован
    Trojan.MBRlock is a very disturbing piece of malicious code which infects the master boot record (MBR) and prevents Windows from starting. ...
  • False Positive: Ikarus and Comodo detecting TDSSKiller as a Trojan horse
    This awkward moment when you realize that your favorite rootkit removal utility is detected as malware. I probably wouldn't even have no...
  • Remove RiskTool.Win32.BitCoinMiner (Uninstall Guide)
    RiskTool.Win32.BitCoinMiner is a risk tool or potentially unwanted application that may use your computer's resources to generate bitco...
  • Remove Rattlingsearchsystem.com (Uninstall Guide)
    Rattlingsearchsystem.com is a ZeroAccess/Sirefef rootkit-related browser hijacker that redirects users to shady websites while searching on...
  • Remove TR/ATRAPS.Gen2, removal instructions
    Cyber crooks and third parties that buy stolen data are increasingly using more and more sophisticated techniques, in a variety of different...
  • Remove Ask Search and Ask Toolbar (Uninstall Guide)
    Ask Search and Ask Toolbar are very often incorrectly classified as virus/spyware that may cause search redirects. The majority of us pref...
  • How to remove 'TidyNetwork' adware virus from your computer
    As internet users most of us have seen those irritating little pop-up windows that are advertising something that we normally have little or...
  • Remove Windows Attention Utility (Uninstall Guide)
    Windows Attention Utility is a rogue security application that generates misleading warnings about nonexistent viruses and attempts to lure...

Categories

  • Adware
  • Answers
  • Antivirus software
  • Browser Hijackers
  • Cloud Computing
  • Fake Alerts
  • Giveaways
  • Hoax
  • How-To
  • IaaS
  • Internet
  • Malicious websites
  • Malware
  • PaaS
  • Parental Controls
  • Passwords
  • Phishing
  • Process Information
  • Ransomware
  • Rogue programs
  • Rootkits
  • SaaS
  • Security Advisories
  • Spam
  • Spyware
  • Trojans
  • Viruses
  • Web Browsers
  • Worms

Blog Archive

  • ►  2013 (173)
    • ►  December (6)
    • ►  November (13)
    • ►  October (11)
    • ►  September (20)
    • ►  August (4)
    • ►  July (17)
    • ►  June (31)
    • ►  May (25)
    • ►  April (15)
    • ►  March (17)
    • ►  February (7)
    • ►  January (7)
  • ▼  2012 (86)
    • ►  November (2)
    • ►  October (4)
    • ►  September (6)
    • ►  August (6)
    • ►  July (11)
    • ►  June (1)
    • ►  May (5)
    • ►  April (7)
    • ►  March (7)
    • ►  February (17)
    • ▼  January (20)
      • Youtube PREMIUM Player, Free Facebook Credits and ...
      • How to Remove Searchqu (Uninstall Guide)
      • Remove RiskTool.Win32.BitCoinMiner (Uninstall Guide)
      • Bitdefender Internet Security 2012 Giveaway! Hurry...
      • Antivirus Smart Protection and Malware Protection ...
      • Remove "Smart Protection 2012" (Uninstall Guide)
      • Remove "Internet Security 2012" Malware (Uninstall...
      • Temp:winupd.exe (Uninstall Guide)
      • Search.conduit.com (Uninstall Guide) - How To Remo...
      • PUP.CNET.Adware.Bundle (Uninstall Guide)
      • Remove Internet Security Guard (Uninstall Guide)
      • Remove Guardia di Finanza Ransomware (Uninstall Gu...
      • Remove Strathclyde Police Ransomware (Uninstall Gu...
      • Malicious Youtube Extension, YXH-youtube_player.xp...
      • Remove Audio Ads Virus (Uninstall Guide)
      • Msdcsc.exe Process Information
      • Remove EoRezo Adware/PUP (Uninstall Guide)
      • Remove BasicScan (Uninstall Guide)
      • Be A Guest Writer
      • Remove Tidserv Activity 2 (Uninstall Guide)
  • ►  2011 (239)
    • ►  December (8)
    • ►  November (18)
    • ►  October (21)
    • ►  September (24)
    • ►  August (28)
    • ►  July (32)
    • ►  June (16)
    • ►  May (23)
    • ►  April (15)
    • ►  March (16)
    • ►  February (9)
    • ►  January (29)
  • ►  2010 (2)
    • ►  December (2)
Powered by Blogger.

About Me

Unknown
View my complete profile