Popular Virus Removal Tool

Tuesday, April 9, 2013

Imesh(Search.Imesh.com/Search.Imesh.net)Redirect: How to Stop Imesh Virus from Redirecting

Cannot Uninstall Imesh Search Bar 

This is what imesh search bar looks like: 

 

Search imesh much have been well familiar to PC users, it has plagued online surfer for a long time. Spyhunter has received many cases recently to get rid of search.imesh.com browser hijacker and also have been asked many times that would it be possible to remove imesh search engine virus if they go to its product center and apply uninstall? Here’s the assertive evidence to proof that it is impossible quoted one of its vitims:


  
‘Hello: I  use an XP service pack and the latest updated Firefox browser.  My son installed Imesh, whatever that is, and it has a search bar.  It even had set itself up as my homepage, but I overrode that and put Google back as the homepage. But I want to get Imesh out of there completely.
I went to "control panel"  "add or remove programs" and found it there. But when I click the uninstall, first I get a query as to why I want to  uninstall, which I answer. Then a line with a link to their "Help" comes, and under that a button that says "uninstall anyway". I click that but nothing happens. I've tried this several times. I'm worried that this could be a source of trojan  horses, etc. so I'd like to get it out of there before its too late.’



What Is iMesh Malware Capable of



Do not ever belittle imesh browser hijacker that replaces your default homepage, it can do what is beyond your imagination:
  1. Serves as a visible backdoor to allow tracking cookies in, so as to trail down confidential information;
  2. Drops iMesh’s key values in a bid to disable certain services on the system, especially those relevant to security defense;
  3. Modifies browser and DNS settings so as to provide search results rather than your favorite search engine provides;
  4. More queries to search.imesh.com/search.imesh.net means more commands for further damages are received;
  5. The backdoor can be exploited by any junks and virus concealed on web, thus the longer imesh virus moves around, the more slowly the computer runs;
  6. iMesh browser virus can make annoying pop ups happening. 

  


2 Amazing Suggestions for Removing Search.Imesh.com



Suggestion A: Remove Search.Imesh.com Manually

1. Get into the Safe Mode with Networking
Reboot your computer. As the computer is booting but before Windows launches, tap the "F8 key" continuously which should bring up the "Windows Advanced Options Menu" as shown below. Use your arrow keys to highlight "Safe Mode with Networking" option and press Enter key.
 


2. Disable any suspicious startup items.

For Windows XP:

Click Start menu -> click Run -> type: msconfig in the search bar -> open System Configuration Utility -> Disable all possible startup items including those of search.imesh



3. Remove add-ons:

Internet Explorer:
1) Go to Tools -> ‘Manage Add-ons’;
2) Choose ‘Search Providers’ -> choose ‘Bing’ search engine or ‘Google’ search engine and make it default;
3) Select ‘Search Results’ and click ‘Remove’ to remove it;
4) Go to ‘Tools’ -> ‘Internet Options’; select ‘General tab’ and click website, e.g. Google.com. Click OK to save changes.

Google Chrome
1) Click on ‘Customize and control’ Google Chrome icon, select ‘Settings’;
2) Choose ‘Basic Options’;
3) Change Google Chrome’s homepage to google.com or any other and click the ‘Manage Search Engines…’ button;
4) Select ‘Google’ from the list and make it your default search engine;
5) Select ‘Search Result’ from the list to remove it by clicking the ‘X’ mark.    

Mozilla Firefox
1) Click on the magnifier’s icon and select ‘Manage Search Engine…’;
2) Choose ‘Search Results’ from the list and click ‘Remove’ and OK to save changes;
3) Go to ‘Tools’ -> “Options”. Reset the startup homepage or change it to google.com under ‘General tab;  


4. Disable proxy

  1. Click on Tools on the menu bar
  2. select Internet options
  3. go to Connections tab
  4. select LAN settings at the bottom of the dialog
  5. under the Proxy sever, untick 'use a proxy server for your LAN (These settings will not apply to dial-up or VPN connections).'
  6. Click OK 

5. Show hidden files  
a) open Control Panel from Start menu and search for Folder Options;

 
b) under View tab to tick Show hidden files and folders and non-tick Hide protected operating system files (Recommended) and then click OK;

 
c) click on the “Start” menu and then click on the “Search programs and files” box, Search for and delete these files created by search.imesh:

  • %AppData%[trojan name]toolbarcouponscategories.xml
  • %AppData%[trojan name]toolbarcouponsmerchants.xml
  • %AppData%[trojan name]toolbarcouponsmerchants2.xml
  • %AppData%[trojan name]toolbardtx.ini
  • %AppData%[trojan name]toolbarguid.dat
  • %AppData%[trojan name]toolbarlog.txt
  • %AppData%[trojan name]toolbarpreferences.dat
  • %AppData%[trojan name]toolbarstat.log
  • %AppData%[trojan name]toolbarstats.dat
  • %AppData%[trojan name]toolbaruninstallIE.dat
  • %AppData%[trojan name]toolbaruninstallStatIE.dat
  • %AppData%[trojan name]toolbarversion.xml
  • %Temp%[trojan name]toolbar-manifest.xml

6. Open Windows Task Manager and close all imesh's running processes.
Use CTRL+ALT+DEL combination to open Task Manager  



7. Delete all registry values related to search.imesh in your local hard disk C.
Hold down the Windows key on your keyboard and press the "R" button. Type in "regedit" and hit "Enter" to gain access to the Registry Editor.

                       


  • HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{99079a25-328f-4bd4-be04-00955acaa0a7}InprocServer32 “C:PROGRA~1WINDOW~4ToolBar[trojan name]dtx.dll”
  • HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{99079a25-328f-4bd4-be04-00955acaa0a7} “[trojan name] Toolbar”
  • HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}VersionIndependentProgID “[trojan name]IEHelper.UrlHelper”
  • HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}ProgID “[trojan name]IEHelper.UrlHelper.1″
  • HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{A40DC6C5-79D0-4ca8-A185-8FF989AF1115} “UrlHelper Class”
  • HKEY_LOCAL_MACHINESOFTWAREClasses[trojan name]IEHelper.DNSGuardCurVer
  • HKEY_LOCAL_MACHINESOFTWAREClasses[trojan name]IEHelper.DNSGuardCLSID
  • HKEY_LOCAL_MACHINESOFTWAREClasses[trojan name]IEHelper.DNSGuard
  • HKEY_LOCAL_MACHINESOFTWAREClasses[trojan name]IEHelper.DNSGuard.1
  • HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar “[trojan name] Toolbar”
  • HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{99079a25-328f-4bd4-be04-00955acaa0a7} “[trojan name] Toolbar”

Attention: Too busy to follow the manual removal solutions? Would you like Safesearch to be gone automatically and permanently? Why not just Download and Install Spyhunter to make it come true?


Suggestion B: Remove Search.Imesh.com automatically (with SpyHunter)


Step A. Download removal tool SpyHunter

1) Click here or the icon below to Download and Install Spyhunter to deal with your computer issue.



2) Follow the instructions to install SpyHunter
  spyhunter run

spyhunter setup

spyhunter setup

Step B. Run SpyHunter to block Search.Imesh.com

Run SpyHunter and click "Malware Scan" button to scan your computer, after detect this unwanted program, clean up relevant files and entries completely.

 spyhunter3 scan

Step C. Restart your computer to take effect.

Friendly Reminder:

Spyhunter will always be your first and wise choice to protect your computer. It literally can remove Search.Imesh.com and prevent the future infection.Download and Install Free Spyhunter without any hesitation!

>> Check out your computer with the free antivirus program
>> Scan your computer with the amazing security tool