About 7FaSSt

Also known as: 7search FSInstall

IE toolbar providing a search field which queries the engine 7search.com.

7FaSSt is an IE toolbar providing a search field which queries the engine 7search.com. Through ActiveX installation, likely forwarded from one of 7Search's affiliate sites. The addresses of all Explorer windows are passed to the server fstrack.7search.com. This includes the URLs of all web pages visited, pseudo-URLs like 'about:', and the names of folders, images and other objects in local file system.

Removal Instructions

Automatic Removal:

7FaSSt can be detected and removed Automatically by Spyware Doctor, also SpyEraser.

Manual Removal:

There is an entry for 7FaSSt Search in Add/Remove Programs, which removes the main part of the software. To clean up, go to 'Downloaded Program Files' in the Windows folder and remove the entries for '{669695BC-A811-4A9D-8CDF-BA8C795F261E}' and 'FSInstall_1 Control'. (The latter is not actually an installer; it's just used by the installing web page to set an affiliate and unique user number before installing the software.)

You can also run 'regedit' and remove the key 'HKEY_CURRENT_USER\Software\7Search' from the registry if you like.

1. Kill these running processes with Task Manager:

programfilesdir+\fs\fsgetuserid.exe
programfilesdir+\fs\fsregister3.exe
programfilesdir+\fs\uninstx.exe

2. Unregister these DLLs with Regsvr32, then reboot:

programfilesdir+\fs\7search.dll
systemroot+\system32\7search.dll
systemroot+\system\7search.dll

3. Remove these registry items (if present) with RegEdit:

HKEY_CLASSES_ROOT\clsid\{06dfedaa-6196-11d5-bfc8-00508b4a487d}
HKEY_CLASSES_ROOT\clsid\{3277cd27-4001-4ef8-9d96-c6ca745ac2f9}
HKEY_CLASSES_ROOT\clsid\{37686c62-d497-42e3-baab-78d89a74e151}
HKEY_CLASSES_ROOT\clsid\{669695bc-a811-4a9d-8cdf-ba8c795f261e}
HKEY_CLASSES_ROOT\clsid\{b8875bfe-b021-11d4-bfa8-00508b8e9bd3}
HKEY_CLASSES_ROOT\interface\{06dfeda9-6196-11d5-bfc8-00508b4a487d}
HKEY_CLASSES_ROOT\interface\{38493f7f-2922-4c6c-9a9a-8da2c940d0ee}
HKEY_CLASSES_ROOT\kbbar.kbbarband
HKEY_CLASSES_ROOT\kbbar.kbbarband.1
HKEY_CLASSES_ROOT\kbbar.showbar
HKEY_CLASSES_ROOT\kbbar.showbar.1
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer
\browser helper objects\{06dfedaa-6196-11d5-bfc8-00508b4a487d}
HKEY_CLASSES_ROOT\typelib\{3277cd27-4001-4ef8-9d96-c6ca745ac2f9}
HKEY_CLASSES_ROOT\typelib\{37686c62-d497-42e3-baab-78d89a74e151}
HKEY_CURRENT_USER\software\7search
HKEY_LOCAL_MACHINE\clsid\{06dfedaa-6196-11d5-bfc8-00508b4a487d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{06dfedaa-6196-11d5-bfc8-
00508b4a487d}
HKEY_LOCAL_MACHINE\software\classes\kbbar.kbbarband
HKEY_LOCAL_MACHINE\software\classes\kbbar.kbbarband.1
HKEY_LOCAL_MACHINE\software\classes\kbbar.kbbarband\curver
HKEY_LOCAL_MACHINE\software\classes\kbbar.showbar
HKEY_LOCAL_MACHINE\software\classes\kbbar.showbar.1
HKEY_LOCAL_MACHINE\software\classes\kbbar.showbar\clsid
HKEY_LOCAL_MACHINE\software\classes\kbbar.showbar\curver
HKEY_LOCAL_MACHINE\software\classes\typelib\{3277cd27-4001-4ef8-9d96-
c6ca745ac2f9}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{669695bc-a811-4a9d-8cdf-ba8c795f261c}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall
\7fasstsearch (version 3.0)

4. Remove these files (if present) with Windows Explorer:

programfilesdir+\fs\7search.dll
programfilesdir+\fs\fsgetuserid.exe
programfilesdir+\fs\fsregister3.exe
programfilesdir+\fs\uninstx.exe
systemroot+\system32\7search.dll
systemroot+\system\7search.dll
7fasstsearch.log

5. Remove these directories (if present) with Windows Explorer:

programfilesdir+\fs

Removal Instructions for Other Adwares & Spywares