Home Malware Programs Browser Hijackers Neatsearchsystem.com

Neatsearchsystem.com

Posted: October 17, 2011

Like other websites that use the CC Search format for search engine scamming, Neatsearchsystem.com pretends to offer useful website search results, but has no genuine search engine functionality. In addition to stealing search results from other sites and corrupting them with advertisement-based additions, Neatsearchsystem.com has also been caught distributing malicious software that causes browser hijacks. Neatsearchsystem.com browser hijacks will redirect you to Neatsearchsystem.com or another CC Search site when you attempt to use a search engine and are an indicator of your PC being actively-infected. SpywareRemove.com malware researchers strongly encourage you to delete Neatsearchsystem.com software with a competent anti-malware program, if you see signs of your browser being redirected by Neatsearchsystem.com, and to avoid contact with Neatsearchsystem.com and Neatsearchsystem.com's potentially harmful search results.

Neatsearchsystem.com's Shoddily-Disguised Search Engine Scam

Neatsearchsystem.com is identical to other CC Search sites that use similar attack methods to earn easy money from artificial website traffic. As such, any attack that redirects you to Neatsearchsystem.com may alternately redirect you to another CC Search website, such as marveloussearchsystem.com, wickedsearchsystem.com, raresearchsystem.com, noblesearchsystem.com or strikingsearchsystem.com. Aside from a slightly different name and URL, Neatsearchsystem.com can be considered the same as these other malicious websites, from Neatsearchsystem.com's questionable search results all the way right down to the CC Search logo and the blue sky background.

Neatsearchsystem.com search results, unlike those of a real search engine, are designed to earn revenue for Neatsearchsystem.com's web masters, by driving you to sites that pay affiliate revenue for traffic. As a result, Neatsearchsystem.com doesn't try very hard to provide relevant search links, since Neatsearchsystem.com is more interested in taking you to websites that earn cash for it. The few useful search results that you can find at Neatsearchsystem.com are all stolen from search engines that would give you the same links, only without Neatsearchsystem.com's clutter, and thus, SpywareRemove.com malware experts can't recommend Neatsearchsystem.com as a search engine site of good repute.

Getting Your Searches Back to Neat and Tidy without Neatsearchsystem.com in the Way

Unfortunately, even if you're willing to avoid Neatsearchsystem.com, Neatsearchsystem.com itself may take that choice out of your hands. Neatsearchsystem.com doesn't have any problems with forcing you to visit Neatsearchsystem.com, even when you intend to use another search engine site. Contact with any CC Search site, including Neatsearchsystem.com, can be a source of infection by these browser hijackers, which SpywareRemove.com malware experts have found to cause symptoms like the following:

  • Being redirected to Neatsearchsystem.com or an affiliated site when you try to use Google or similarly-popular search engines. Most victims of Neatsearchsystem.com infections have reported that these redirects occur after they try to click a search result's link, but they can also happen when you try to navigate to the original search engine website or when you try to enter a search query.
  • Having your browser settings locked to undesirable values, such as suffering from your homepage being set to Neatsearchsystem.com. Neatsearchsystem.com browser hijackers may prevent you from changing these settings even if you reinstall your web browser from scratch.

You can stop all of these problems and remove Neatsearchsystem.com's browser hijacker by using a qualified anti-malware program that's capable of removing Trojans and rootkits (such as the ZeroAccess rootkit and TDSS Rootkit, which are often associated with browser hijackers). SpywareRemove.com malware researchers encourage the use of Safe Mode prior to scanning for a Neatsearchsystem.com-related infection, and recommend that you update your scanner's threat definitions database if it's significantly out-of-date.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%UserProfile%\Start Menu\neatsearchsystem.com\Help.lnk File name: %UserProfile%\Start Menu\neatsearchsystem.com\Help.lnk
File type: Shortcut
Mime Type: unknown/lnk
%UserProfile%\Start Menu\neatsearchsystem.com\Registration.lnk File name: %UserProfile%\Start Menu\neatsearchsystem.com\Registration.lnk
File type: Shortcut
Mime Type: unknown/lnk
%UserProfile%\Desktop\neatsearchsystem.com.lnk File name: %UserProfile%\Desktop\neatsearchsystem.com.lnk
File type: Shortcut
Mime Type: unknown/lnk
%UserProfile%\Start Menu\neatsearchsystem.com\neatsearchsystem.com.lnk File name: %UserProfile%\Start Menu\neatsearchsystem.com\neatsearchsystem.com.lnk
File type: Shortcut
Mime Type: unknown/lnk
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\neatsearchsystem.com.lnk File name: %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\neatsearchsystem.com.lnk
File type: Shortcut
Mime Type: unknown/lnk
%Program Files%\neatsearchsystem.com\neatsearchsystem.com.exe File name: %Program Files%\neatsearchsystem.com\neatsearchsystem.com.exe
File type: Executable File
Mime Type: unknown/exe

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\{CLSID Path}HKEY_CLASSES_ROOT\TypeLib\{506F578A-91E1-46CE-830F-E2F4268E9966}HKEY_CLASSES_ROOT\TypeLib\{E79BB61D-7F1A-41DF-8AD0-402795E3B566}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar={4B3803EA-5230-4DC3-A7FC-33638F3D3542}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}HKEY_CURRENT_USER\Software\13376694984709702142491016734454HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "13376694984709702142491016734454"HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\""={4B3803EA-5230-4DC3-A7FC-33638F3D3542}HKEY..\..\..\..{Subkeys}HKEY_CLASSES_ROOT\PROTOCOLS\Handler\tbr
Loading...