Home>Tips & Articles>Remove Adware & Spyware>
Remove SubSearch Spyware
About SubSearch
SubSearch is an browser hijacker implemented as Internet Explorer Browser Helper Object. It detects when you are using a search engine, and opens its own 'enhanced results' sidebar containing paid links. This is styled to look a bit like the search engine you are using at the time. In version 2 and later it can also show pop-up adverts when IE is first opened, if directed to do so by their controlling server.
Remove this spyware using Spyware Doctor
How to Remove SubSearch ?
To remove SubSearch from your computer:
- Open a DOS command prompt window (from Start->Programs->Accessories) and enter the following commands:
For HighTraffic variant:
cd "%WinDir%\System"
regsvr32 /u BHO2.dll
regsvr32 /u MSNIE.dll
Or for the v2 variant:
cd "%WinDir%\System"
regsvr32 /u sbsrch_v2.dll
Or for the v21 variant:
cd "%WinDir%\System"
regsvr32 /u SbSrch_V21.dll
Or for the v22 variant:
cd "%WinDir%\System"
regsvr32 /u msvcn.dll
regsvr32 /u SbSrch_V22.dll
- Restart Windows.
- Open the System folder (The System folder can be found in the Windows folder; it is called 'System32' on Windows NT/2000/XP, and just 'System' on Windows 95/98/Me.) and delete the SubSearch program files. These files are named BHO2.dll and MSNIE.dll (HighTraffic variant), sbsrch_v2.dll (v2), SbSrch_V21.dll (v21) or SbSrch_V22.dll (v22). With the v2-v22 variants you can also delete winfgnet_1.dat or winfgnet_2.dat, and, rmvold.exe (which may be there if you previously had v2 and it upgraded itself to v21). The v22 variant also has msvcn.dll, restore.exe and backup.reg files to delete.
- Use Internet Options -> Programs -> Restore Web Settings to get the default search explorer bar back.
- Open the registry editor( click Start > Run , type 'regedit'), delete the registry key: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\IeMsnSbSrch_1 (v2 and v21 variants) or HKEY_CURRENT_USER\Software\VB and VBA Program Settings\MsnIeUpdate.
Remove spyware using PestPatrol
Remove other programs: