How to Remove Websearch.flyandsearch.info

by News Editor on July 31st, 2014 in Security Tips.

Websearch.flyandsearch.info is a Browser Helper Object that injects itself into users' Internet browsers. Once websearch.flyandsearch.info infiltrates you PC it will immediately change your default home page and search provider. Extension names might differ depending on the version of the hijacker. It will either be MySearch or SearchNewTab.

Some users reported that these extensions were used in order to provide third-party commercial adverts. It is important to remove them along with the hijacker if you want to maintain an entirely clean system.
Websearch.flyandsearch.info also creates several fake folders with the same malicious files. To make you believe all those files are trustworthy, it may even name one of the folders as ”Administrator”. 

Once installed it will change your browser homepage to websearch.flyandsearch.info and set the search engine to http://search.smartaddressbar.com.

Usually, Websearch.flyandsearch.info may be installed in a bundle with other free program from the internet. The majority of PUPs can be installed in a bundle with some freeware or shareware you want. But you don't realize that you're getting Potentially Unwanted Program in addition with it too. Typically, users are not aware they installed these browser extensions while downloading free software. That is why it is always recommended to choose Custom Installation. Be attentive and never install software that you don’t know or trust.

 
Websearch.flyandsearch.info is classified as potentially unwanted considering its behavior shown above. If you already get infected with it, follow this step by step removal guide below to do that.
 
Removal guide*

1.    Delete the original PUP file.
Click Start -> Control Panel -> Uninstall a Program.
When in the Add/Remove Programs/Uninstall a Program, look for recently installed/unfamiliar applications.



2.    Make sure you don’t have any files created/modified by the PUP:

C:\Program Files\Search-NewTab\dbKNMjwWT.dat        
C:\Program Files\Search-NewTab\dbKNMjwWT.dll    
C:\Program Files\Search-NewTab\dbKNMjwWT.tlb            
C:\Program Files\Search-NewTab\dbKNMjwWT.x64.dll C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS00017.log        
C:\ProgramData\Search-NewTab\i8_lnkU19E.dat            
C:\ProgramData\Search-NewTab\i8_lnkU19E.exe
C:\Users\All Users\Search-NewTab\i8_lnkU19E.exe
C:\Users\"%CurrentUserName%"\AppData\Local\Torch\User C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\newtab.html (631 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Torch\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\newtab.html (631 bytes)
C:\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\lsdb.js (264 bytes)
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\lsdb.js (264 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\manifest.json (811 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\Owr9ZwrnZHz.js (1040 bytes)
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\Owr9ZwrnZHz.js (1040 bytes)
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\newtab.html (631 bytes)
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\manifest.json (811 bytes)
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\Owr9ZwrnZHz.js (1040 bytes)
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\lsdb.js (264 bytes)
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\lsdb.js (264 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromatic Browser\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\Owr9ZwrnZHz.js (1040 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Torch\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\lsdb.js (264 bytes)
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\background.html (148 bytes)
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\background.html (148 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromatic Browser\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\background.html (148 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\content.js (262 bytes)
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\manifest.json (811 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Torch\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\Owr9ZwrnZHz.js (1040 bytes)
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\background.html (148 bytes)
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\manifest.json (811 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\content.js (262 bytes)
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\newtab.html (631 bytes)
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\manifest.json (811 bytes)
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\newtab.html (631 bytes)
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\manifest.json (811 bytes)
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\manifest.json (811 bytes)
C:\ProgramData\c6538a7476a020cd\{C670DCAE-E392-AA32-6F42-143C7FC4BDFD}.20140722185148 (104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\Owr9ZwrnZHz.js (1040 bytes)
C:\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\manifest.json (811 bytes)
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\background.html (148 bytes)
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\background.html (148 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromatic Browser\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\content.js (262 bytes)
%Program Files%\Search-NewTab\dbKNMjwWT.dat (260 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\manifest.json (811 bytes)
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\content.js (262 bytes)
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\background.html (148 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\background.html (148 bytes)
C:\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\content.js (262 bytes)
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\newtab.html (631 bytes)
C:\ProgramData\Search-NewTab\i8_lnkU19E.exe (24192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\background.html (148 bytes)
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\newtab.html (631 bytes)
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\lsdb.js (264 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\Owr9ZwrnZHz.js (1040 bytes)
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\manifest.json (811 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromatic Browser\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\lsdb.js (264 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromatic Browser\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\manifest.json (811 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\lsdb.js (264 bytes)
C:\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\background.html (148 bytes)
C:\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\background.html (148 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Torch\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\content.js (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\newtab.html (631 bytes)
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\newtab.html (631 bytes)
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\Owr9ZwrnZHz.js (1040 bytes)
C:\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\newtab.html (631 bytes)
C:\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\manifest.json (811 bytes)
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\lsdb.js (264 bytes)
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\content.js (262 bytes)
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\background.html (148 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\background.html (148 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromatic Browser\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\newtab.html (631 bytes)
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\Owr9ZwrnZHz.js (1040 bytes)
C:\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\Owr9ZwrnZHz.js (1040 bytes)
C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\content.js (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Torch\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\manifest.json (811 bytes)
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\Owr9ZwrnZHz.js (1040 bytes)
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\Owr9ZwrnZHz.js (1040 bytes)
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\content.js (262 bytes)
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\newtab.html (631 bytes)
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\lsdb.js (264 bytes)
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\content.js (262 bytes)
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\newtab.html (631 bytes)
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\content.js (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\content.js (262 bytes)
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\content.js (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\manifest.json (811 bytes)
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\Owr9ZwrnZHz.js (1040 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Torch\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\background.html (148 bytes)
C:\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\content.js (262 bytes)
%Program Files%\Search-NewTab\dbKNMjwWT.tlb (259 bytes)
C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\background.html (148 bytes)
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\content.js (262 bytes)
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\lsdb.js (264 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\newtab.html (631 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\lsdb.js (264 bytes)
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\manifest.json (811 bytes)
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\Owr9ZwrnZHz.js (1040 bytes)
C:\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\newtab.html (631 bytes)
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\lsdb.js (264 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\lsdb.js (264 bytes)
C:\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\lsdb.js (264 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\{12D7BF59-1460-3484-7C08-88C20C902642}\Search-NewTab.2.9.dat (238 bytes)
C:\ProgramData\Search-NewTab\i8_lnkU19E.dat (260 bytes)
%Program Files%\Search-NewTab\dbKNMjwWT.dll (16238 bytes)
C:\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\alldeieeieffelkgenngdfnabhkhkdnh\2.1\Owr9ZwrnZHz.js (1040 bytes)

* Manual removal may cause unexpected system behavior and should be performed at your own risk.

3.    Remove Search-NewTab from your browsers:

Internet Explorer:
 Open Internet Explorer, go Tools -> Manage Add-ons -> Toolbars and Extensions. Here, look for Search-NewTab and similar entries, and click Remove. Now open IE -> Tools -> Internet Option -> General tab. Enter Google or other address to make it the default start page.

Mozilla Firefox:
Open Mozilla Firefox, go ‘Tools’ -> ‘Add-ons’ -> ‘Extensions’. Find Search-NewTab and click ‘Uninstall’. Now go to Tools -> Options -> General -> Startup. Now select 'Show a blank page' when Firefox Starts or set a certain website, like Google or similar.

Click the Firefox menu button , then Help button. From the Help menu, choose Troubleshooting Information. Click the Reset Firefox. Firefox will close itself and will revert to its default settings.


 
Google Chrome:

Click the Chrome menu button on the Google Chrome browser, select Tools -> Extensions. Here, look for Search-NewTab extension and get rid of it by clicking on the Recycle Bin. Additionally, click on wench icon, go to settings and choose 'Manage search engines'. Change search engine to google or other and delete Websearch.Flyandsearch.info from the list. Then Go to section “On start” and make sure you get blank page while creating new tab.



4.    Now please install Ad-Aware to make sure you do not have any infections:

•   Click here and follow the installation instructions from Ad-Aware User Guide (‘Installation and Uninstallation’ -> ‘Ad-Aware Install’ section).
•   Perform a full scan of your PC with Ad-Aware (following Ad-Aware User guide: ‘Scanning System’ -> ‘Running a scan’ section).

Finally, it is recommended to always keep your antivirus up-to-date and perform weekly full scans. Also, we advise you to do a custom AV scan of any application downloaded from the internet before you proceed with its installation