Remove SearchMaid

SearchMaid Description

SearchMaid is a browser hijacker that changes Internet Explorer default start and search pages to web sites on the searchmaid.com domain. The spyware installs a toolbar and shows undesirable commercial advertisements. SearchMaid can get into the computer along with some ad-supported software. It also can be manually installed. SearchMaid secretly runs on every Windows startup.

Remove SearchMaid

Stop the following SearchMaid processes:
helper.exe
5e60971403.exe

Remove the following SearchMaid registry keys:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorerRunwinlogon.exe=helper.exe
HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerSearchUrl=[siteaddress]
HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainDefault_Page_URL=[siteaddress]
HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainDefault_Search_URL=[siteaddress]
HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainLocalPage=[siteaddress]
HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainSearchBar=[siteaddress]
HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainSearchPage=[siteaddress]
HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainStartPage=[siteaddress]
HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternetExplorerMainDefault_Page_URL=[siteaddress]
HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternetExplorerMainDefault_Search_URL=[siteaddress]
HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternetExplorerMainLocalPage=[siteaddress]
HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternetExplorerMainSearchBar=[siteaddress]
HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternetExplorerMainSearchPage=[siteaddress]
HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternetExplorerMainStartPage=[siteaddress]
HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternetExplorerSearchCustomizeSearch=[siteaddress]
HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternetExplorerSearchSearchAssistant=[siteaddress]
HKEY_CLASSES_ROOTVM.VMObj
HKEY_CLASSES_ROOTVM.VMObj.1
HKEY_CLASSES_ROOTGoVM.ContextItem
HKEY_CLASSES_ROOTGoVM.ContextItem.1
77B2F8DE-CB3F-4b6b-839B-807DD1ADBA1C
8B0B6F79-C50D-4ea6-8F65-BDF18005DE20
835BAA68-B5E5-47D5-A18D-2A4E0F5B72D5
AB2DDE8C-CBFF-491A-9825-87B8BB4CBFE0
42C7653A-5834-45A1-899A-ED0DFA370D21
HKEY_CURRENT_USERSoftwareVirtualMaid
HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMenuExt&RSDNSearch
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionguid=AA8214E9-C7E6-4b66-A049-19AD20944CBF
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallVirtualMaidVirtualMaid

Unregister the following SearchMaid DLL files:
govm.dll
virtualmaid.dll

Delete the following SearchMaid files:
helper.exe
5e60971403.exe
govm.dll
virtualmaid.dll
govm.dll.htm
virtualmaid.xml
1.bmp
2.bmp
logo.bmp
uninstall.bat

Other Spyware

0-9