Malware Removal Instructions

  • Subscribe to our RSS feed.
  • Twitter
  • StumbleUpon
  • Reddit
  • Facebook
  • Digg

Friday, 27 July 2012

SearchYa! Toolbar and Searchya.com (Uninstall Guide)

Posted on 11:35 by Unknown
SearchYa! is a web search engine owned by Ironsource Ltd., based in Israel. There's also a browser toolbar with the same name SearchYa! toolbar. Both products come bundled with freeware and third-party applications. This software marketing strategy is very controversial, some experts say it should be unallowed while others think it's acceptable as long as EULA and opt-out options are presented in a very clear, concise, and easy to understand way. Maybe they are right, but what we know for sure, not all software developers follow these directions and sometimes they knowingly 'pushes' their software through silent installers and similar applications.



Speaking of SearchYa, it came bundled with a free FLV player application (both the toolbar and web search engine). Once installed, it changes default search engine in Internet Explorer and Mozilla Firefox. It changes home page as well (redirects to searchya.com). Searching directly from the address bar redirects to searchya.com too. That's why some people call it the searchya redirect virus. Google Chrome stays unaffected. The search results are surprisingly good but we suspect that they use Google custom search technology or something very similar to deliver quality search results. However, we don't know for sure.

SearchYa toolbar works in IE and Firefox. Chrome gets Speed Dial 4.0 extension instead of toolbar. So far, everything looks not bad, so where's the problem? The problem is that they do not have a properly working uninstaller. Users gave to remove web browser extensions and restore default settings manually. SearchYa Web Search removal might be specially difficult for Mozilla Firefox users.

To remove SearchYa web search and toolbar from your computer, please follow the removal instructions below. If you have any questions or valuable remarks, please leave a comment below. Good luck and be safe online!


SearchYa! toolbar and Web Search removal instructions:

1. First of all, download recommended anti-malware software and run a full system scan. It will detect and remove this infection from your computer. You may then follow the manual removal instructions below to remove the leftover traces of this browser hijacker. Hopefully you won't have to do that.





2. Go to the Start Menu. Select Control Panel → Add/Remove Programs.
If you are using Windows Vista or Windows 7, select Control Panel → Uninstall a Program.



3. Search for SearchYa! Web Search in the list. Select the program and click Remove button.

If you are using Windows Vista/7, click Uninstall up near the top of that window.



Alternate removal: run C:\Program Files\SearchYa!\1.5.20.0*\uninstall

* This is the version of the toolbar you downloaded.


Remove SearchYa! in Internet Explorer:

1. Open Internet Explorer. Go to Tools → Manage Add-ons.



2. Select Search Providers. First of all, choose Bing or Live Search search engine and make it your default web search provider (Set as default).



3. Remove SearchYa! web search providers. Close the window.



4. Go to Tools → Internet Options. Select General tab and click Use default button or enter your own website, e.g. google.com instead of http://www.searchya.com. Click OK to save the changes. And that's about it for Internet Explorer.




Remove SearchYa! in Mozilla Firefox:

1. Open Mozilla Firefox. Go to Tools → Add-ons.



2. Select Extensions. Remove searchya.com 1.5.0 toolbar. Close the window.




3. Click on the magnifying glass search icon as shown in the image below and select Manage Search Engines....



4. Choose Search from the list and click Remove to remove it. Click OK to save changes.



5. Go to Tools → Options. Under the General tab reset the startup homepage or change it to google.com, etc.



6. In the URL address bar, type about:config and hit Enter.



Click I'll be careful, I promise! to continue.



In the filter at the top, type: searchya



Now, you should see all the preferences that were changed by SearchYa!. Right-click on the preference and select Reset to restore default value. Reset all found preferences!



And that's it for Mozilla Firefox!


Remove Speed Dial 4.0 in Google Chrome:

1. Click on Customize and control Google Chrome icon. Go to Tools → Extensions.



2. Select Speed Dial 4.0 and click on the small recycle bin icon to remove the toolbar.




Associated SearchYa! toolbar and Web Search files and registry values:

Files:
  • C:\Program Files\SearchYa!\1.5.20.0\escortShld.dll
  • C:\Program Files\SearchYa!\1.5.20.0\FavIcon
  • C:\Program Files\SearchYa!\1.5.20.0\searchyaApp.dll
  • C:\Program Files\SearchYa!\1.5.20.0\searchyaEng.dll
  • C:\Program Files\SearchYa!\1.5.20.0\searchyasrv
  • C:\Program Files\SearchYa!\1.5.20.0\searchyaTlbr.dll
  • C:\Program Files\SearchYa!\1.5.20.0\uninstall
  • C:\Program Files\SearchYa!\1.5.20.0\bh\searchya.dll
Registry values:
  • HKEY_CLASSES_ROOT\esrv.searchyaESrvc
  • HKEY_CLASSES_ROOT\esrv.searchyaESrvc\CurVer
  • HKEY_CLASSES_ROOT\ironsource.searchyaappCore
  • HKEY_CLASSES_ROOT\ironsource.searchyaHlpr
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Start Page"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\esrv.searchyaESrvc
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar "SearchYa Toolbar"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\searchya
Tell your friends:
Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest
Posted in Browser Hijackers | No comments
Newer Post Older Post Home

0 comments:

Post a Comment

Subscribe to: Post Comments (Atom)

Popular Posts

  • Remove ShopperReports (Uninstall Guide)
    ShopperReports is defined as adware or a potentially unwanted program that displays marketing related results in a side pane of the browser...
  • Trojan.MBRlock, Внимание! Ваш компьютер заблокирован
    Trojan.MBRlock is a very disturbing piece of malicious code which infects the master boot record (MBR) and prevents Windows from starting. ...
  • Remove RiskTool.Win32.BitCoinMiner (Uninstall Guide)
    RiskTool.Win32.BitCoinMiner is a risk tool or potentially unwanted application that may use your computer's resources to generate bitco...
  • What is wrtc.exe and how to remove it?
    wrtc.exe - by Perion Network Ltd. What is wrtc.exe? wrtc.exe is a part of IncrediMail software, digitally signed by Perion Network Ltd. This...
  • Remove Rattlingsearchsystem.com (Uninstall Guide)
    Rattlingsearchsystem.com is a ZeroAccess/Sirefef rootkit-related browser hijacker that redirects users to shady websites while searching on...
  • False Positive: Ikarus and Comodo detecting TDSSKiller as a Trojan horse
    This awkward moment when you realize that your favorite rootkit removal utility is detected as malware. I probably wouldn't even have no...
  • Remove TR/ATRAPS.Gen2, removal instructions
    Cyber crooks and third parties that buy stolen data are increasingly using more and more sophisticated techniques, in a variety of different...
  • Remove Ask Search and Ask Toolbar (Uninstall Guide)
    Ask Search and Ask Toolbar are very often incorrectly classified as virus/spyware that may cause search redirects. The majority of us pref...
  • Remove Windows Attention Utility (Uninstall Guide)
    Windows Attention Utility is a rogue security application that generates misleading warnings about nonexistent viruses and attempts to lure...
  • Remove "System Check" (Uninstall Guide)
    System Check is malicious software posing as Windows system utility. Although, it may look like a real thing, it isn't! You are actuall...

Categories

  • Adware
  • Answers
  • Antivirus software
  • Browser Hijackers
  • Cloud Computing
  • Fake Alerts
  • Giveaways
  • Hoax
  • How-To
  • IaaS
  • Internet
  • Malicious websites
  • Malware
  • PaaS
  • Parental Controls
  • Passwords
  • Phishing
  • Process Information
  • Ransomware
  • Rogue programs
  • Rootkits
  • SaaS
  • Security Advisories
  • Spam
  • Spyware
  • Trojans
  • Viruses
  • Web Browsers
  • Worms

Blog Archive

  • ►  2013 (173)
    • ►  December (6)
    • ►  November (13)
    • ►  October (11)
    • ►  September (20)
    • ►  August (4)
    • ►  July (17)
    • ►  June (31)
    • ►  May (25)
    • ►  April (15)
    • ►  March (17)
    • ►  February (7)
    • ►  January (7)
  • ▼  2012 (86)
    • ►  November (2)
    • ►  October (4)
    • ►  September (6)
    • ►  August (6)
    • ▼  July (11)
      • Remove Windows Ultra Antivirus (Uninstall Guide)
      • SearchYa! Toolbar and Searchya.com (Uninstall Guide)
      • Boxore Adware (Uninstall Guide)
      • Remove Welcome to Nginx! (Uninstall Guide)
      • Remove Police Central e-crime Unit Virus (Uninstal...
      • Remove International Police Association (I.P.A.) V...
      • Remove MyStart by IncrediBar Search and Toolbar (U...
      • Apple Computers ARE Susceptible After All
      • Remove "File Recovery" Malware (Uninstall Guide)
      • Effective Network Internet Control for Effective S...
      • Remove FBI MoneyPak Ransomware (Uninstall Guide)
    • ►  June (1)
    • ►  May (5)
    • ►  April (7)
    • ►  March (7)
    • ►  February (17)
    • ►  January (20)
  • ►  2011 (239)
    • ►  December (8)
    • ►  November (18)
    • ►  October (21)
    • ►  September (24)
    • ►  August (28)
    • ►  July (32)
    • ►  June (16)
    • ►  May (23)
    • ►  April (15)
    • ►  March (16)
    • ►  February (9)
    • ►  January (29)
  • ►  2010 (2)
    • ►  December (2)
Powered by Blogger.

About Me

Unknown
View my complete profile