Home>Tips & Articles>Remove Adware & Spyware>

Remove KeenValue Adware

---

About KeenValue

KeenValue is adware supplied by eUniverse.com. KeenValue/v1 runs at startup, generates popup ads, and is the original version. KeenValue/Incredifind adds capability, via a second process:

• monitors web sites visited, so that ads may be targeted;
• hijacks the hosts file and redirects Netscape searches to incredifind.com;
• hijacks error pages and address bar searches to incredifind.com, which is then redirected to sirsearch.com;
• adds an Internet Explorer toolbar providing a search field directed to sirsearch.com.

Remove this spyware using Spyware Doctor

How to Remove KeenValue Adware?

Follow these steps to manually remove it from your computer.

1. Reboot your computer t osafe mode ( Press F8 when windows start ).
   
2. For the Incredifind variant, Open a DOS command prompt window (from Start->Programs->Accessories) and enter the following commands:
   
   cd "%WinDir%\System"
   regsvr32 /u "\Program Files\Incredifind\BHO\BHO.dll"
   regsvr32 /u "\Program Files\PowerSearch\Toolbar\pwrs0rbi.dll"
   
   cd %WinDir%
   regsvr32 /u qjpidbfg.dll
   del qjpidbfg.dll
   
3. Open the registry editor(click Start > Run and enter 'regedit') and find the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run. Remove the 'KeenValue' entry.
4. Delete the following keys to clean up:
   
   HKEY_CURRENT_USER\Software\Visicom Media\PWRS0RBI
   HKEY_LOCAL_MACHINE\SOFTWARE\eUniverse
   HKEY_LOCAL_MACHINE\SOFTWARE\KeenValue
   
5. Next, restart your computer.
6. Delete the 'KeenValue' folder inside the Program Files\Common Files folder. For the Incredifind variant you can also delete the Program Files folders 'PowerSearch', 'Incredifind' and 'Dynamic Toolbar\PWRS0RBI'.
7. Restore your search settings (Internet Options->Programs->Reset Web Settings).
8. Open the System folder (which is inside the Windows folder, and called 'System32' on Windows NT, 2000 and XP), go to 'drivers'->'etc', and open the file 'hosts' (with no file extension) use a text editor. Delete the following line and save.:
   12.129.205.209 search.netscape.com

Remove spyware using PestPatrol

Remove other programs:

Remove Httper	Remove HotBar
Remove HuntBar
Remove IEAccess	Remove IEMonit
Remove IEPlugin	Remove IETray
Remove IGetNet	Remove InetSpeak
Remove InternetOptimizer	Remove InternetWasher
Remove IPInsight	I-Lookup
Remove ISTbar
KeenValue	Remove LinkReplacer
Remove Lop
Remove more spyware & adware >>