How to remove the SearchSquire Adware


What this program does:

This program is a Internet Explorer sidebar that opens when you use search engines and contain sponsored links.


Tools Needed for this fix: Related Tutorials: Symptoms in a HijackThis Log (Maybe different entries but will contain the same domains and hostnames):

 O2 - BHO: SearchSquire3 - {907CA0E5-CE84-11D6-9508-02608CDD2846} - c:\windows\system32\SEARCH~1.DLL
O4 - HKLM\..\Run: [SearchSquire33] C:\WINDOWS\System32\SearchUpdate33.exe
O15 - Trusted Zone: -http://ad.searchsquire.com
O15 - Trusted Zone: -http://search.searchsquire.com
O15 - Trusted Zone: -http://update.searchsquire.com
O15 - Trusted Zone: -http://www.searchsquire.com

Removal Instructions:
  1. Download HijackThis from the above link and extract it to c:\hijackthis.

  2. Print out these instructions.

  3. Navigate to the c:\hijackthis directory and double-click on HijackThis

  4. When the program starts, double-click on the HijackThis icon and then click on the Scan button.

  5. Put a checkmark next to the following entries if they exist:

    O2 - BHO: SearchSquire3 - {907CA0E5-CE84-11D6-9508-02608CDD2846} - c:\windows\system32\SEARCH~1.DLL
    O4 - HKLM\..\Run: [SearchSquire33] C:\WINDOWS\System32\SearchUpdate33.exe
    O15 - Trusted Zone: -http://ad.searchsquire.com
    O15 - Trusted Zone: -http://search.searchsquire.com
    O15 - Trusted Zone: -http://update.searchsquire.com
    O15 - Trusted Zone: -http://www.searchsquire.com    ]http://www.searchsquire.com[/url]

  6. Then click the Fix button

  7. Exit HijackThis.

  8. Reboot your computer

  9. Delete the following files:

    %SYSTEM%\engine.txt
    %SYSTEM%\engine2.txt
    %SYSTEM%\searchsquire33.dll
    %SYSTEM%\SearchUpdate33.exe

  10. Start Notepad by clicking on Start, then Run, and typing notepad.exe and pressing the OK button. Then copy and paste the contents of the quote box below into that notepad.

    QUOTE
    [REGEDIT4]

    [-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\searchsquire.com]
    [-HKEY_CLASSES_ROOT\CLSID\{11990E99-2A4D-11D6-9507-02608CDD2846}]
    [-HKEY_CLASSES_ROOT\Interface\{907CA0E4-CE84-11D6-9508-02608CDD2846}]
    [-HKEY_CLASSES_ROOT\SearchSquire2.Squire]
    [-HKEY_CLASSES_ROOT\TypeLib\{907CA0E6-CE84-11D6-9508-02608CDD2846}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{907CA0E5-CE84-11D6-9508-02608CDD2846}]


    Save it as file name: "fixme.reg" (not including the quotes). Save as file type: All files (*.*) and save it on your Desktop.

    Then, locate fixme.reg on your Desktop and double-click on it. You will receive a prompt similar to: "Do you wish to merge the information into the registry?". Answer 'Yes' and wait for a message to appear similar to "Merged Successfully".

  11. Reboot your computer and you are now clean.
Note: %SYSTEM% is a variable that refers to the System folder in your Windows folder. You can use the follow information to determine where your system folder is by default:

Windows 95/98/ME: C:\windows\system
Windows 2000/NT: C:\Winnt\System32
Windows XP/2003: C:\Windows\System32

Now your computer should no longer be infected with SearchSquire. It may be possible that you still have some spyware or malware installed on your computer. If you feel this is the case, follow the instructions below to post a HijackThis log and someone will help you to remove the rest.


This is a self-help guide. Use at your own risk.



BleepingComputer.com can not be held responsible for problems that may occur by using this information. If you would like help with any of these fixes, you can post a HijackThis log in our HijackThis Logs and Analysis forum.

If you have any questions about this self-help guide then please post those questions in our AntiVirus, Firewall and Privacy Products and Protection Methods forum and someone will help you.