SpywareGuide powered by Actiance Security Labs
Search SpywareGuide Database & Site
Home Access the Guide
List of Products List of Companies List of Categories
Tools
X-RayPC
Terms and Definitions
 
Full Name:
IETray Websearch   Read More
Type: Adware
Category Description: Program that delivers advertisements on your PC.

Note that many websites have their own advertising, unrelated to adware.

Adware is any software application in which advertising is displayed while the program is running. The authors of these applications include additional code that delivers the ads, which can be viewed through pop-up windows or through a bar that appears on a computer screen and sometimes through text links or in integrated search results. Adware may or may not track personal information. It may also gather information anonymously or in aggregate only. Users should check the EULA and Privacy policy to ensure if the adware on their machines conforms to their standards.
Official Description: IETray is a search sidebar hijacker pointed at search-aide.com, implemented as an Internet Explorer Browser Helper object.

pqnelhleyy 266bb3ef 4fc06141
When other search engines are used, it occasionally opens a pop-up alert window encouraging one to use the (now hijacked) search sidebar instead. ("For faster web searches press F9")
It is currently unknown where IETray comes from.
Comment: Their site is no longer active.
Information URL: http://www.search-aide.com
   
Manual removal: Open a DOS command prompt window (from Start->Programs->Accessories), and enter the following commands:

cd "%WinDir%\System"
regsvr32 /u IEMsg.dll
Next, open the registry (click 'Start', choose 'Run', enter 'regedit') and find the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run. Delete the entry 'CSRSS' pointing at 'csrss.exe'. You can also open the key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt and delete the entries '&Define' and '&Search the Web'.

Restart the computer and you should be able to delete the file 'csrss.exe' from the Windows folder, and 'IEMsg.dll' from the System folder (which is inside the Windows folder, called 'System32' on Windows NT/2000/XP). You can also delete 'ERS_DEF.HTM' and 'ERS_SRC.HTM' from the Web folder (inside the Windows folder).

Properties:
  •  Autostarts/Stays Resident
  •  Shows Advertisements
  •  Stealth Tactics
  • Click here to leave feedback for this product

    Recent Modifications
    2012-5-10  NetSpy
    2012-5-1  Unclassified Adware/Spyware
    2012-4-11  Adult Networks/Services
    2012-4-11  CoolWebSearch
    2012-3-13  Misc. Exploits
    2012-2-24  Zango Times
    2012-2-24  About Blank
    2012-1-30  HostSeeker Toolbar
    2012-1-13  2000Cracks
    2012-1-13  7AdPower Dialer
     
    Company  | Site and Spyware FAQ
    © Copyright 2003-2011, Actiance, Inc. All rights reserved.   Privacy Policy