CustomIE is a spyware program delivered as part of a Cool Web Search infection.  It manifests as new folders in the user’s “Favorites” folder in Internet Explorer and by pop-up advertisements.

Its spyware can monitor your browsing activity and send the information to a remote server.  This is supposedly intended to deliver targeted ads to the user.  However, it also has the ability to download other spyware programs to the computer.

If you have a CustomIE infection, you should remove it immediately with SpyZooka.  Manual removal should only be done by a licensed professional due to the complexity and potential for harm to your computer.

Associated Files:
customie.dll, customie32.dll,
HKEY_CLASSES_ROOT>CustomIE.BHO HKEY_CLASSES_ROOT>CustomIE.BHO.1
HKEY_CLASSES_ROOT>MailHook.MailTo HKEY_CLASSES_ROOTMailHook.MailTo.1
HKEY_CLASSES_ROOT>CLSID>
{01A9EB7D-69BC-11D2-AB2F-204C4F4F5020}
HKEY_CLASSES_ROOT>CLSID>
{0FA33B6C-71BC-69D3-DB7A-472A4D6F3452}
HKEY_CLASSES_ROOT>CLSID>
{98DBBF16-CA43-4c33-BE80-99E6694468A4}
HKEY_CLASSES_ROOT>CLSID>
{CBEFB350-ED5B-4115-B846-C1041676B388}
HKEY_CLASSES_ROOT>Interface>
{01A9EB7C-69BC-11D2-AB2F-204C4F4F5020}
HKEY_CLASSES_ROOT>Interface>
{9DA65FF0-676F-48C7-9253-0020417F97EE}
HKEY_CLASSES_ROOT>TypeLib>
{01A9EB70-69BC-11D2-AB2F-204C4F4F5020}
HKEY_CLASSES_ROOT>TypeLib>
{01A9EB70-69BC-11D2-AB2F-204C4F4F5020}1.0
HKEY_CLASSES_ROOT>TypeLib>
{AAD9A825-7C82-4121-AB7C-C33BE0853588}
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>
Windows>CurrentVersion>Explorer>Browser Helper Objects>
{98DBBF16-CA43-4c33-BE80-99E6694468A4}
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>
Windows>CurrentVersion>Explorer>Browser Helper Objects>
{CBEFB350-ED5B-4115-B846-C1041676B388}
HKEY_CURRENT_USER>Software>Microsoft>
Internet Explorer>URLSearchHooks {0FA33B6C-71BC-69D3-DB7A-472A4D6F3452} = “”

HKEY_CURRENT_USER>Software>Microsoft>
Internet Explorer>URLSearchHooks {01A9EB7D-69BC-11D2-AB2F-204C4F4F5020} = “”
HKEY_CURRENT_USER>Software>Microsoft>
Internet Explorer>Main>Search Page
HKEY_CURRENT_USER>Software>Microsoft>
Internet Explorer>Main>Search Bar
HKEY_LOCAL_MACHINE>Software>Microsoft>
Internet Explorer>Search>Search Assistant
HKEY_LOCAL_MACHINE>Software>Microsoft>
Internet Explorer>Search>Customize Search

In %System%driversetcHOSTS:
3635716633 008k.com
3635716633 adult-series.com
3635716633 approvedlinks.com
3635716633 autosearcher.com
3635716633 ewebsearch.net
3635716633 forum.spywareinfo.com
3635716633 livesexlist.com
3635716633 nativehardcore.com
3635716633 nativehardcore.com
3635716633 ok-search.com
3635716633 runsearch.com
3635716633 searching-the-net.com
3635716633 searchv.com
3635716633 selfbookmarks.com
3635716633 spywareforum.com
3635716633 thumbnailpost.com
3635716633 webcoolsearch.com
3635716633 www.008k.com
3635716633 www.adult-series.com
3635716633 www.approvedlinks.com
3635716633 www.autosearcher.com
3635716633 www.ewebsearch.net
3635716633 www.livesexlist.com
3635716633 www.nativehardcore.com
3635716633 www.nativehardcore.com
3635716633 www.ok-search.com
3635716633 www.runsearch.com
3635716633 www.searching-the-net.com
3635716633 www.searchv.com
3635716633 www.selfbookmarks.com
3635716633 www.selfbookmarks.com
3635716633 www.spywareforum.com
3635716633 www.thumbnailpost.com
3635716633 www.webcoolsearch.com
3635716633 www.ywebsearch.info
3635716633 ywebsearch.info