Xupiter.OrbitExplorer Description:

'OrbitExplorer.com is a website search engine catering to a wide varity of groups. The goals of OrbitExplorer.com are to provide the most relevant content to any search. Our content is organized into categories accessible from our front page, and is as well searchable via keywords.'

Also known as: TrojanDownloader.Win32.Comet

Xupiter.OrbitExplorer Automatic Removal:

Using BPS Adware & Spyware Remover to remove Xupiter.OrbitExplorer AUTOMATICALLY, also Spyware Doctor!

Xupiter.OrbitExplorer Manual Removal:

Follow these steps to remove Xupiter.OrbitExplorer from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.

1. Kill these running processes with Task Manager:
   programfilesdir+\comet systems\dm\bin\dmserver.exe
   programfilesdir+\comet\bin\comet.exe
   programfilesdir+\comet\bin\csinstall.exe
   programfilesdir+\comet\bin\cstray.exe
   programfilesdir+\comets~1\platform\bin\comet.exe
   programfilesdir+\comets~1\platform\bin\packageinstaller.exe
   programfilesdir+\comets~1\platform\bin\unins.exe
   programfilesdir+\orbit\ad.exe
   programfilesdir+\orbit\update.exe
   programfilesdir+\orbit\view.exe
   systemroot+\bobsaver.exe
   systemroot+\downloaded program files\conflict.1\oeloader.exe
   systemroot+\downloaded program files\oeloader.exe
    
2. Go to the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run.
   If you find the value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\cc2kui, delete it and reboot the machine immediately.
   If you find the value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\orbitupdate, delete it and reboot the machine immediately.
   If you find the value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\orbitview, delete it and reboot the machine immediately.
   If you find the value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\sswplauncher, delete it and reboot the machine immediately.
    
3. Unregister these DLLs with Regsvr32, then reboot:
   programfilesdir+\comet systems\dm\bin\cssecure.dll
   programfilesdir+\comet systems\dm\bin\dmproxy.dll
   programfilesdir+\comet\bin\comutil.dll
   programfilesdir+\comet\bin\csadzap.dll
   programfilesdir+\comet\bin\csapputil.dll
   programfilesdir+\comet\bin\csband.dll
   programfilesdir+\comet\bin\csbho.dll
   programfilesdir+\comet\bin\csbrange.dll
   programfilesdir+\comet\bin\cscore.dll
   programfilesdir+\comet\bin\csctx.dll
   programfilesdir+\comet\bin\cseng.dll
   programfilesdir+\comet\bin\csietb.dll
   programfilesdir+\comet\bin\csinst.dll
   programfilesdir+\comet\bin\csutil.dll
   programfilesdir+\comet\bin\fileutil.dll
   programfilesdir+\comet\bin\skinui.dll
   programfilesdir+\comet\install\temp\brbho.dll
   programfilesdir+\common files\oe\msbb.dll
   programfilesdir+\common files\oe\redirector.dll
   programfilesdir+\common files\oe\search.dll
   programfilesdir+\common files\oe\toolbar.dll
   systemroot+\downloaded program files\conflict.1\oeloader.dll
   systemroot+\system\redirector.dll
   systemroot+\system32\redirector.dll
   ......
    
4. Remove these registry items (if present) with RegEdit:
   HKEY_LOCAL_MACHINE\software\classes\cometapputil.cometuievents
   HKEY_LOCAL_MACHINE\software\classes\cometapputil.cometuievents.1
   HKEY_LOCAL_MACHINE\software\classes\cometapputil.cometuievents\clsid
   HKEY_LOCAL_MACHINE\software\classes\cometapputil.cometuievents\curver
   HKEY_LOCAL_MACHINE\software\classes\cometietoolbar.comettoolbar
   HKEY_LOCAL_MACHINE\software\classes\cometietoolbar.comettoolbar.1
   HKEY_LOCAL_MACHINE\software\classes\cometietoolbar.comettoolbar\clsid
   HKEY_LOCAL_MACHINE\software\classes\cometietoolbar.comettoolbar\curver
   HKEY_LOCAL_MACHINE\software\classes\comutil.fcparam
   HKEY_LOCAL_MACHINE\software\classes\comutil.fcparam.1
   HKEY_LOCAL_MACHINE\software\classes\comutil.fcparam\clsid
   HKEY_LOCAL_MACHINE\software\classes\comutil.fcparam\curver
   HKEY_LOCAL_MACHINE\software\classes\comutil.fctcall
   HKEY_LOCAL_MACHINE\software\classes\comutil.fctcall.1
   HKEY_LOCAL_MACHINE\software\classes\comutil.fctcall\clsid
   HKEY_LOCAL_MACHINE\software\classes\comutil.fctcall\curver
   HKEY_LOCAL_MACHINE\software\classes\contextparser.contextproxy
   HKEY_LOCAL_MACHINE\software\classes\contextparser.contextproxy.1
   HKEY_LOCAL_MACHINE\software\classes\contextparser.contextproxy\clsid
   HKEY_LOCAL_MACHINE\software\classes\contextparser.contextproxy\curver
   HKEY_LOCAL_MACHINE\software\classes\contextparser.contextproxymgr
   HKEY_LOCAL_MACHINE\software\classes\contextparser.contextproxymgr.1
   HKEY_LOCAL_MACHINE\software\classes\contextparser.contextproxymgr\clsid
   HKEY_LOCAL_MACHINE\software\classes\contextparser.contextproxymgr\curver
   HKEY_LOCAL_MACHINE\software\classes\contextparser.csregexp
   HKEY_LOCAL_MACHINE\software\classes\contextparser.csregexp.1
   HKEY_LOCAL_MACHINE\software\classes\contextparser.csregexp\clsid
   HKEY_LOCAL_MACHINE\software\classes\contextparser.csregexp\curver
   HKEY_LOCAL_MACHINE\software\classes\contextparser.urlcontextparser
   HKEY_LOCAL_MACHINE\software\classes\contextparser.urlcontextparser.1
   HKEY_LOCAL_MACHINE\software\classes\contextparser.urlcontextparser\clsid
   HKEY_LOCAL_MACHINE\software\classes\contextparser.urlcontextparser\curver
   HKEY_LOCAL_MACHINE\software\classes\core.
   HKEY_LOCAL_MACHINE\software\classes\csband.
   HKEY_LOCAL_MACHINE\software\classes\csbrange.
   HKEY_LOCAL_MACHINE\software\classes\cseng.
   HKEY_LOCAL_MACHINE\software\classes\csip.
   HKEY_LOCAL_MACHINE\software\classes\cssecurity.
   HKEY_LOCAL_MACHINE\software\classes\dmproxy.
   HKEY_LOCAL_MACHINE\software\classes\dmserver.
   HKEY_LOCAL_MACHINE\software\classes\puk.
   HKEY_LOCAL_MACHINE\software\classes\skinui.
   HKEY_LOCAL_MACHINE\software\comet systems\
   HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{d7b3e460-9968-4191-bd6f-beed1bc18482}
   HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{702ad576-fddb-4d0f-9811-a43252064684}
   HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{fe6bc4ef-5676-484b-88ae-883323913256}
   HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{702ad576-fddb-4d0f-9811-a43252064684}
   HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{d14d6793-9b65-11d3-80b6-00500487bdba}
   HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{d48f2e28-68e2-4920-9848-d6e6c7ab3eb7}
   HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage
   \c:/windows/downloaded program files/conflict.1/oeloader.exe
   HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage
   \c:/windows/downloaded program files/oeloader.exe
   HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\cc2kui
   HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\orbitupdate
   HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\orbitview
   HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\sswplauncher
   HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls
   \c:\windows\downloaded program files\conflict.1\oeloader.exe
   HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls
   \c:\windows\downloaded program files\oeloader.exe
   HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\cc2k
   \displayname
   HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\cc2k
   \uninstallstring
   ......
    
5. Remove these files (if present) with Windows Explorer:
   administrator.txt
   adzap.lic
   bandmessage.xml
   bobsaver.exe-2b87f43a.pf
   bobsaver.scr-3492b408.pf
   buttonmessage.xml
   cars.xsl
   completedjobs.xml
   csres.dat
   defaultbuttonmessage.xml
   dmfilemap.xml
   dmserver.exe-375d1fbc.pf
   hotels.xsl
   inst43.exe-233e3ddf.pf
   inst9753.exe-222ff47c.pf
   masterconfig.xml
   msxml3.dll
   ntvdm.exe-1a10a423.pf
   oeuninstaller.exe-06b5e4b2.pf
   Spyware Doctorcl.exe-32de342c.pf
   productinfo.xml
   programfilesdir+\comet systems\dm\bin\cssecure.dll
   programfilesdir+\comet systems\dm\bin\dmproxy.dll
   programfilesdir+\comet systems\dm\bin\dmserver.exe
   programfilesdir+\comet\bin\comet.exe
   programfilesdir+\comet\bin\comutil.dll
   programfilesdir+\comet\bin\csadzap.dll
   programfilesdir+\comet\bin\csapputil.dll
   programfilesdir+\comet\products\shared\tbproducts.js
   programfilesdir+\comet\products\smileytown\smileytown.js
   programfilesdir+\comet\products\travel\travel.js
   programfilesdir+\comet\services\addremove\addremove.htm
   programfilesdir+\comet\services\addremove\addremove.js
   programfilesdir+\comet\services\addremove\addremove_cc.js
   programfilesdir+\comet\services\messaging\listeners\adzap_0001.js
   programfilesdir+\comet\services\messaging\listeners\travel_0001.js
   programfilesdir+\comet\services\messaging\messaging.js
   programfilesdir+\comet\services\tbmgr.js
   programfilesdir+\comet\services\toolbar.js
   programfilesdir+\comets~1\platform\bin\packageinstaller.exe
   programfilesdir+\comets~1\platform\bin\skinui.dll
   programfilesdir+\comets~1\platform\bin\unins.exe
   programfilesdir+\common files\oe\redirector.dll
   programfilesdir+\common files\oe\search.dll
   programfilesdir+\common files\oe\toolbar.dll
   programfilesdir+\orbit\ad.exe
   programfilesdir+\orbit\update.exe
   programfilesdir+\orbit\view.exe
   publickey.pbk
   related.xml
   related.xsl
   request.xml
   response.xml
   rundll32.exe-333c496f.pf
   settings.xml
   smileytown.xml
   sslaunch.exe-12da0b03.pf
   sstbinst.exe-18a1b725.pf
   sys_except.xml
   systemroot+\bobsaver.exe
   systemroot+\bobsaver.scr
   systemroot+\downloaded program files\conflict.1\oeloader.dll
   systemroot+\downloaded program files\conflict.1\oeloader.exe
   systemroot+\downloaded program files\oeloader.exe
   systemroot+\downloaded program files\oeloader.inf
   systemroot+\mickey32.dll
   systemroot+\system\redirector.dll
   systemroot+\system32\redirector.dll
   travel_context.xml
   un_adzap.xml
   un_autosearch.xml
   un_errorsearch.xml
   un_funbutton.xml
   un_platform.xml
   un_refbutton.xml
   un_relatedsearch.xml
   un_screensaver.xml
   un_searchassist.xml
   un_smileytown.xml
   un_travel.xml
   un_travelbutton.xml
   un_webbutton.xml
   xupiter.orbitexplorer.txt
   ......
    
6. Remove these directories (if present) with Windows Explorer:
   programfilesdir+\comet systems\dm
   programfilesdir+\comet systems\dm\bin
   programfilesdir+\comet\bin
   programfilesdir+\comet\data
   programfilesdir+\comet\products\adzap
   programfilesdir+\comet\products\funbutton
   programfilesdir+\comet\products\refbutton
   programfilesdir+\comet\products\relatedsearch
   programfilesdir+\comet\products\screensaver
   programfilesdir+\comet\products\shared
   programfilesdir+\comet\products\smileytown
   programfilesdir+\comet\products\travel
   programfilesdir+\comet\products\webbutton
   programfilesdir+\comet\services
   programfilesdir+\comet\services\messaging\base
   programfilesdir+\comet\services\messaging\campaigns\adzap
   programfilesdir+\comet\services\messaging\listeners
   programfilesdir+\comet\temp
   programfilesdir+\comet\uninstall
   programfilesdir+\comet\update
   programfilesdir+\comets~1\platform\bin
   programfilesdir+\common files\oe
   programfilesdir+\oe
   programfilesdir+\orbit
    
7. After following the instructions above, you will still need to restore your original settings and prevent this from happening again. Here's how.

More Removal Instructions for Emerging Adware Spyware