Quick Links: SpywareGuide Greynets Blog | SpywareGuide Product Database | SpywareGuide Company Database | SpywareGuide Categories
Search SpywareGuide Database & Site
Security Email Alerts & Updates
SpywareGuide powered by FaceTime Security Labs
Full Name:
iGetNet Websearch   Read More
Type: Adware
Also Known as: ign
Created by: iGetNet, LLC
SG Index: 3 [Explain]
Removal tools: List of products that detect/remove/protect against iGetNet:
  • Control IM and P2P use, block spyware and other malware: RTGuardian
  • Endpoint Spyware Remediation: Greynet Enterprise Manager
  • IM, P2P control, malware prevention and web filtering in single appliance: Unified Security Gateway
  • Category Description: Program that delivers advertisements on your PC.

    Note that many websites have their own advertising, unrelated to adware.

    Adware is any software application in which advertising is displayed while the program is running. The authors of these applications include additional code that delivers the ads, which can be viewed through pop-up windows or through a bar that appears on a computer screen and sometimes through text links or in integrated search results. Adware may or may not track personal information. It may also gather information anonymously or in aggregate only. Users should check the EULA and Privacy policy to ensure if the adware on their machines conforms to their standards.
    Comment: When you enter something into the address bar, IGetNet checks to see whether it includes keyword they have sold to one of their advertisers. If so, it redirects you to that site; if not it forwards you to a search engine using an IGetNet affiliate code. searchresult.net, qcksearch.com (which is apps.webservicehost.com) and overture.com have been seen to be used.

    Also plays tricks with the "hosts" file on the users machine to redirect traffic directed to the microsoft network site to their own.

    From their website:
    "If you would like an easier way to drive business to your website, IGN Keywords are the perfect solution. Instead of one long URL linking to your site, your customers can simply type IGN Keywords directly into their Browser address bar and go right to your site!"

    There seems to be some relationship with "SubSearch".
    Uses also domains:
    www.clearsearch.net
    www.globe-finder.com
    Information URL: http://www.igetnet.com/
       
    Manual removal: Before you can delete the software you must deregister its DLLs and stop it running at startup. Open a DOS command window (from Start->Programs->Accessories) and enter the commands:

    cd "%WinDir%\System"
    regsvr32 /u BHO.DLL
    regsvr32 /u rsp.dll
    Then open the registry (Start->Run->regedit), find the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Run and delete the 'WinStart' value. Reboot the machine and you can delete 'BHO.DLL', 'rsp.dll' and 'WinStart.exe' in the Windows\System folder.

    Next open the 'real' System folder (that is, Windows\System under Win95/98/Me or System32 under WinNT/2K/XP) and go to drivers\etc. Open the file 'hosts' in a text editor such as Notepad and remove the lines:

    216.41.185.18 auto.search.msn.com
    216.41.185.18 search.netscape.com
    then save.

    For the clearsearch variant:
    Kill any process called "loader.exe".

    Remove folder:
    C:\Program Files\clearsearch\

    Remove these files if you find them:

    clrschp010.exe
    update_rsp.dll
    clrschp001.exe
    update_removeold.dll
    clrschuninstall.exe
    Properties:
  •  Autostarts/Stays Resident
  •  Changes browser
  •  Shows Advertisements
  •  Stealth Tactics
  • Click here to leave feedback for this product

    Help with the BUST!
    Click here and give us what details you have and let our international research team take it from there. If you desire your report will remain anonymous.
    Recent Blog Posts
  • A Year In Security
  • Youtube Comment Bot Spams In Waves
  • VGA Awards Trailers Used As Bait For Spam Offers
  • Fake Visa Electronic Report Serves Up Zbot Data Stealer
  • Banned Console Owners Beat The System - With Stickers
  • Spot The Hack
  • The Futility Of EULAs
  • Auto Whaler Spears Phishers
  • Fake Porn Grabbers Snag Nothing But Malware
  • Console DDoS Botnets - A Thriving Industry
  • Recent Modifications
    2010-8-31  17lele
    2010-7-1  W32/AIM.552-B
    2010-6-9  Powwabar
    2010-3-11  Email Threats
    2010-3-9  WeBuying
    2010-3-9  HappytoFind
    2010-3-5  PaintBrush
    2010-3-5  Downloader-Tadpu
    2010-3-4  Unclassified Trojans
    2010-3-2  ParisVoyeur
     

    Site EULA | Site Map | Contact Us | About Us | Site and Spyware FAQ | Advertise | RSS Feeds  | Link To Us | SpywareGuide Japan Japanese

    © Copyright 2007, FaceTime Communications, Inc. All rights reserved.