Remove OrbitExplorer

OrbitExplorer Description

OrbitExplorer is an Internet Explorer search toolbar that changes web browser's default home and search pages and adds multiple bookmars to the Favorites list. The threat silently downloads and installs several adware softwares without asking for user permission. It also can send a web browser to advertising web sites. OrbitExplorer has the ability to update itself via the Internet. The threat must be manually installed. It automatically runs on every Windows startup.

Remove OrbitExplorer

Stop the following OrbitExplorer processes:
ad.exe
oeloader.exe
view.exe
update.exe

Remove the following OrbitExplorer registry keys:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunoeloader
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunorbitview
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunorbitupdate
HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainStartPage=[siteaddress]
HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainSearchBar=[siteaddress]
HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternetExplorerSearchSearchAssistant=[siteaddress]
341FB59F-3507-443b-8147-423B4E3B2B15
702AD576-FDDB-4d0f-9811-A43252064684
D48F2E28-68E2-4920-9848-D6E6C7AB3EB7
HKEY_CLASSES_ROOTOESearch.OESearchHook
HKEY_CLASSES_ROOTOESearch.OESearchHook.1
HKEY_CLASSES_ROOTSQLoader.Loader
HKEY_CLASSES_ROOTSQLoader.Loader.1
HKEY_CLASSES_ROOTToolbar.Band
HKEY_CLASSES_ROOTToolbar.Band.1
HKEY_CLASSES_ROOTUpdate.Redirector
HKEY_CLASSES_ROOTUpdate.Redirector.1
D7B3E460-9968-4191-BD6F-BEED1BC18482
030A8576-686B-479A-AF79-94B9FEA79BC5
1D22A25E-B181-4AEE-88FF-2209F7C24FCB
229B6742-97C5-4FA1-89D0-0117BE82FC39
EC99CBB3-6275-4923-BC54-8F27AC45F577
8594CB7B-5A4B-414C-B40F-6C42152B4D2B
92A0BFEF-D370-4D4F-BA70-F0C0AFB19B9F
C3E17D0D-593A-457B-A1DA-6D082E29323A
ECC4AB37-565F-4424-8802-E4BC7766BA58
0FDA4D2B-7975-405d-8D7C-F5E2247EAE80
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls%Windir%DownloadedProgramFilesoeloader.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls%Windir%DownloadedProgramFilesoeloader.dll
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionModuleUsage%Windir%/DownloadedProgramFiles/oeloader.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionModuleUsage%Windir%/DownloadedProgramFiles/oeloader.dll
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallOrbit

Unregister the following OrbitExplorer DLL files:
oeloader.dll
redirector.dll
search.dll
toolbar.dll

Delete the following OrbitExplorer files:
ad.exe
oeloader.exe
view.exe
update.exe
oeloader.dll
redirector.dll
search.dll
toolbar.dll

Other Spyware

0-9