I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
CLEVERSEARCHAG.DLL – Trojan Downloader removal
| File | MD5 | Virus Alias |
|---|---|---|
| CLEVERSEARCHAG.DLL | c1947e8099ffee285dfe66af389345b4 | Trojan Downloader |
| CLEVERSEARCHAG.DLL | c1947e8099ffee285dfe66af389345b4 | Trojan CI |
CLEVERSEARCHAG.DLL size: 110592 bytes
Created files:
%Program Files%\Winsearchag\cleversearchag.dll
%Program Files%\Winsearchag\installwin.exe
%Program Files%\Winsearchag\Uninstall.exe
%Program Files%\Winsearchag\winsearchag.dll
%Program Files%\Winsearchag\winsearchagdl.exe
%SysDir%\INETKO.DLL
%SysDir%\winsearchaginst.exe
Autostart registry keys:
HKLM\Software\Classes\CLSID\{121AF540-2C98-4E1B-8816-4AEEAEE2F8A0}\InprocServer32 : %Program Files%\Winsearchag\cleversearchag.dll
HKLM\Software\Classes\CLSID\{3E64D91A-EE39-4D25-BA7B-5CCE22E8CF42}\InprocServer32 : %Program Files%\Winsearchag\winsearchag.dll
HKLM\Software\Classes\CLSID\{48E59293-9880-11CF-9754-00AA00C00908}\InprocServer32 : %WinDir%\System32\MSINET.OCX
HKLM\Software\Classes\CLSID\{48E59294-9880-11CF-9754-00AA00C00908}\InprocServer32 : %WinDir%\System32\MSINET.OCX
HKLM\Software\Classes\CLSID\{48E59295-9880-11CF-9754-00AA00C00908}\InprocServer32 : %WinDir%\System32\MSINET.OCX
Detected by UnHackMe:
CLEVERSEARCHAG.DLL
Default location: %PROGRAM FILES%\WINSEARCHAG\CLEVERSEARCHAG.DLL