PowerSearch Description:

PowerSearch is a Internet Explorer search toolbar. When searching in the toolbar you will be directed to www.sirsearch.com. PowerSearch is bundled with 'One Nutty Santa Screensaver'.

PowerSearch Automatic Removal:

Using Spyware Doctor to detect and remove PowerSearch AUTOMATICALLY!

PowerSearch Manual Removal:

Follow these steps to remove PowerSearch from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.

1. Kill these running processes with Task Manager:
   programfilesdir+\powersearch\toolbar\tipb.exe
   
2. Unregister these DLLs with Regsvr32, then reboot:
    programfilesdir+\powersearch\toolbar\pwrsbikd.dll
   programfilesdir+\powersearch\toolbar\pwrstlbr.dll
   programfilesdir+\powersearch\toolbar\pwrswmda.dll
   programfilesdir+\powersoft\toolbar\pwrswmda.dll
   systemroot+\system32\pwrs0102.dll
   systemroot+\system32\pwrs0108.dll
   systemroot+\system32\pwrs0rbi.dll
   systemroot+\system32\pwrsbikd.dll
   systemroot+\system32\pwrsc032.dll
   systemroot+\system32\pwrswmda.dll
   systemroot+\system\pwrs0102.dll
   systemroot+\system\pwrs0108.dll
   systemroot+\system\pwrs0rbi.dll
   systemroot+\system\pwrsbikd.dll
   systemroot+\system\pwrsc032.dll
   systemroot+\system\pwrswmda.dll
   
3. Remove these registry items (if present) with RegEdit:
   HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-a08d-8f6fa787ad2d}
   HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-a08e-8e1ca787ad2d}
   HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-aa8e-8e1ca787ad2d}
   HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-c0fc-f378a787ad2d}
   HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-d3fa-f27ba787ad2d}
   HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-d6f5-f66ea787ad2d}
   HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-dbfc-ed1ca787ad2d}
   HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{4e7bd74f-2b8d-469e-d6f5-f66ea787ad2d}
   HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser\{4e7bd74f-2b8d-469e-c0fc-f378a787ad2d}
   HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser\{4e7bd74f-2b8d-469e-d6f5-f66ea787ad2d}
   HKEY_LOCAL_MACHINE\clsid\{4e7bd74f-2b8d-469e-a08d-8f6fa787ad2d}
   HKEY_LOCAL_MACHINE\clsid\{4e7bd74f-2b8d-469e-a08e-8e1ca787ad2d}
   HKEY_LOCAL_MACHINE\clsid\{4e7bd74f-2b8d-469e-aa8e-8e1ca787ad2d}
   HKEY_LOCAL_MACHINE\clsid\{4e7bd74f-2b8d-469e-d3fa-f27ba787ad2d}
   HKEY_LOCAL_MACHINE\clsid\{4e7bd74f-2b8d-469e-d6f5-f66ea787ad2d}
   HKEY_LOCAL_MACHINE\clsid\{4e7bd74f-2b8d-469e-dbfc-ed1ca787ad2d}
   HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-a08d-8f6fa787ad2d}
   HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-a08e-8e1ca787ad2d}
   HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-aa8e-8e1ca787ad2d}
   HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-c0fc-f378a787ad2d}
   HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-d3fa-f27ba787ad2d}
   HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-d6f5-f66ea787ad2d}
   HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-dbfc-ed1ca787ad2d}
   HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{4e7bd74f-2b8d-469e-a08d-8f6fa787ad2d}
   HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{4e7bd74f-2b8d-469e-a08e-8e1ca787ad2d}
   HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{4e7bd74f-2b8d-469e-aa8e-8e1ca787ad2d}
   HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{4e7bd74f-2b8d-469e-c0fc-f378a787ad2d}
   HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{4e7bd74f-2b8d-469e-d3fa-f27ba787ad2d}
   HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{4e7bd74f-2b8d-469e-d6f5-f66ea787ad2d}
   HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{4e7bd74f-2b8d-469e-dbfc-ed1ca787ad2d}
   
4. Remove these files (if present) with Windows Explorer:
   programfilesdir+\powersearch\toolbar\pwrsbikd.dll
   programfilesdir+\powersearch\toolbar\pwrstlbr.dll
   programfilesdir+\powersearch\toolbar\pwrswmda.dll
   programfilesdir+\powersearch\toolbar\tipb.exe
   programfilesdir+\powersoft\toolbar\pwrswmda.dll
   systemroot+\system32\pwrs0102.dll
   systemroot+\system32\pwrs0108.dll
   systemroot+\system32\pwrs0rbi.dll
   systemroot+\system32\pwrsbikd.dll
   systemroot+\system32\pwrsc032.dll
   systemroot+\system32\pwrswmda.dll
   systemroot+\system\pwrs0102.dll
   systemroot+\system\pwrs0108.dll
   systemroot+\system\pwrs0rbi.dll
   systemroot+\system\pwrsbikd.dll
   systemroot+\system\pwrsc032.dll
   systemroot+\system\pwrswmda.dll
   
5. Remove these directories (if present) with Windows Explorer:
   programfilesdir+\powersoft\toolbar
   
6. After following the instructions above, you will still need to restore your original settings and prevent this from happening again. Here's how.

More Removal Instructions for Adware/Spyware Programs - 'P'