The following instructions have been created to help you to get rid of "SearchIt" manually.
Use this guide at your own risk; software should usually be better suited to remove malware, since it is able to look deeper.

If this guide was helpful to you, please consider donating towards this site.

Threat Details:

Categories:
  • spyware
  • bho

Description:
Basically the software grants search capabilities. The terms of use allow SearchIt.Com to spy on your data as much as they want.
Supposed Functionality:
Search toolbar
Privacy Statement:
12. UPDATES. You grant SearchIt.Com permission to add/remove features and/or functions to the existing software and/or service, or to install new applications, at any time, in its sole discretion with or without your knowledge and/or interaction. You also grant SearchIt.Com permission to make any changes to the software and/or service provided at any time.
13. SERVER INTERACTION. You understand and accept that when the software is installed, it periodically comminutes with a server operated by SearchIt.Com and/or third party servers.
14. INFORMATION COLLECTION. You understand and grant SearchIt.Com permission to assign each copy of the software an unique software identify code. You also grant SearchIt.Com permission to collect and store information of your internet usage habit, including but not limited to information about every web page you view with the full Uniform Resource Locators, and the content of web page. You understand and accept that Uniform Resource Locators and the content of web pages you view may include your personally identifiable information. You grant SearchIt.Com permission to collect and store information on which toolbar buttons you click on, your response to advertising, the search terms you entered on the toolbar and/or all ot er information relates to your internet usage habit. [...] SearchIt.Com does not currently enable users to access, review, edit, or delete information, including internet usage information, collected during use of the Service. By using the SearchIt.Com Software and/or Service you agree to waive any constitutional, common law, statutory, or regulatory right of access to such information that you might otherwise have or acquire. [Remark: this last part violates german law that allows every user to get insight into the data saved about him. The final sentence is legally not valid in Germany.]
Links (be careful!):
Website: http://www.searchit.com/
Product: http://www.searchit.com/toolbar/
Privacy: http://www.searchit.com/toolbar/terms.htm
Removal Instructions:

Installed Software List:

You can try to uninstall products with the names listed below; for items identified by other properties or to avoid malware getting active again on uninstallation, use Spybot-S&D or RunAlyzer to locate and get rid of these entries.
  • Products that have a key or property named "SearchitSearchit".

Files:

Please use Windows Explorer or another file manager of your choice to locate and delete these files.
  • The file at "<$WINDIR>\Downloaded Program Files\srchitbar.dll".
  • The file at "<$WINDIR>\Downloaded Program Files\searchit.xml".
Make sure you set your file manager to display hidden and system files. If SearchIt uses rootkit technologies, use our RootAlyzer or our Total Commander anti-rootkit plugins.
You will have to use a global search for files without a name specified. Be extra careful, because just the name might not be enough to identify files!

Registry:

You can use regedit.exe (included in Windows) to locate and delete these registry entries.
  • Delete the registry key "Searchit" at "HKEY_CURRENT_USER\Software\".
  • Delete the registry key "{6C413541-29A1-4ffe-894C-9D68313C9F73}" at "HKEY_CLASSES_ROOT\CLSID\".
  • Delete the registry key "{1997CBCA-0368-47C4-96B7-7F02206F325F}" at "HKEY_CLASSES_ROOT\TypeLib\".
  • Delete the registry key "{3717DF57-0396-463D-98B7-647C7DC6898A}" at "HKEY_LOCAL_MACHINE\Software\Microsoft\Code Store Database\Distribution Units\".
  • References to the file "Downloaded Program Files\srchitbar.dll" at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\.
  • References to the file "Downloaded Program Files\srchitbar.dll" at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls\.
  • Delete the registry value "{6C413541-29A1-4FFE-894C-9D68313C9F73}" at "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\".
  • Delete the registry value "{6C413541-29A1-4ffe-894C-9D68313C9F73}" at "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\".
If SearchIt uses rootkit technologies, use our RegAlyzer, RootAlyzer or our Total Commander anti-rootkit plugins.

Browser:

The following browser plugins or items can either be removed directly in your browser, or through the help of e.g. Spybot-S&D or RunAlyzer.
  • Look for ActiveX software installed from "http://www.searchit.com/toolbar/srchitbar.cab".

Final Words:

If neither Spybot-S&D nor self help did resolve the issue or you would prefer one on one help,
  1. Please read these instructions before requesting assistance,
  2. Then start your own thread in the Malware Removal Forum where a volunteer analyst will advise you as soon as available.