What is this adware??

Question

my kaspersky anti-virus found this in two scans:

not-a-virus:adware.win32.SeachIt.t

it found it in the program files/onlineservices/aol90us.... the first time so i decided to do another scan after that and it found it in the system volume information...it was able to delete it both times...

i'm just wondering what it is and what it does because i can't find any info on this adware online anywhere...and also possibly why i might have had it in two places on my computer? thanks!

Answer 1

Probably you are referring to the SearchIt toolbar? Which is a malware, particularly an adware.

SearchIt is a website search engine. It may gather information about you that may be personally identifiable, such as your name, street address, city, state, zip code, country, telephone numbers, email addresses. SearchIt may also collect certain types of personally identifiable information which you divulge about other people, such as referrals, gift purchases, or other situations.

Refer to the following sites:

http://www.spywareremove.com/removeSearc...

http://www.sophos.com/security/analyses/...

Why in two places? Adwares create backups on different palces, be it a file or registry entry or in the SVI so that when one is detected the other could replicate or recopy itself to the deleted file.

I recommend that you install: Spybot-Search & Destroy http://www.spybot.com/en/download/index.... and SpywareBlaster http://www.javacoolsoftware.com/spywareb... These two (2) applications have proven their worth in spyware protection; and best of all they're both free and signature updated regularly. SpyBot S&D will delete spyware when found; while SpywareBlaster will block malware from being installed when you are online.

Once both are installed, scan for spware/malware in Safe Mode using these two tools. You could also try scanning using Kaspersky in Safe Mode. To scan in Safe Mode, do these first:

1. Update your antivirus and antispyware definition databases.

2. Disable your System Restore, clean up all Temporary and Recycle Bins. Use ATF-Cleaner from http://www.atribune.org , or use CCleaner from http://www.majorgeeks.com/CCleaner_Porta...

3. Boot to Safe Mode,  [restart, press F8, choose Safe Mode, login] then run Kaspersky. Clean/Quarantine when necessary.

4. In Safe Mode, also scan for spyware, or malwares using Spybot-Search & Destroy http://www.spybot.com/en/download/index....