What is Topsearch.dll and How to Remove It

What is topsearch.dll?

Topsearch.dll is an adware program that is attached with some file sharing applications, such as KaZaa and Grokster. It is installed on your PC when you download such programs. Topsearch.dll is known to display unwanted advertisements (adware) on computers that have KaZaa or Grokster installed.

File Information

When topsearch.dll is executed, it creates number of files and registry entries. Some of the known files are:

%ProgramFiles%\KaZaA\topsearch.dll (may be installed at other locations.)
%ProgramFiles%\Altnet\Download Manager\asm.exe
%ProgramFiles%\Altnet\Download Manager\asmps.dll
%ProgramFiles%\Altnet\Download Manager\altinst1.dll
%ProgramFiles%\Altnet\Download Manager\altinst2.dll
%ProgramFiles%\Altnet\DBBackup\Sigfiles.db
%ProgramFiles%\Altnet\Points Manager\points manager.exe
%ProgramFiles%\Altnet\Points Manager\Points Manager.exe.Manifest
%ProgramFiles%\Altnet\Points Manager\settings.cab
%ProgramFiles%\Altnet\Points Manager\setup.cab
%ProgramFiles%\Altnet\Points Manager\sysdetect.dll
%Windir%\smdat32m.sys
%Windir%\smdat32a.sys
%Windir%\Fonts\acrsec.fon
%Windir%\Fonts\acrsecI.fon
%Windir%\Fonts\acrsecB.fon
%System%\TopSearch.dll

In addition to the above files, topsearch.dll also adds a number of .gif, .html, and .bmp files in the following folders:

%ProgramFiles%\Altnet\My Altnet Shares\
%ProgramFiles%\Altnet\Points Manager\Local Pages
%ProgramFiles%\Altnet\Points Manager\Skin
%ProgramFiles%\Altnet\Points Manager\Temp Internet Shares

The following are the registry entries added by this malicious program::

HKEY_CLASSES_ROOT\CLSID\{3646C2BD-3554-49CA-8125-44DEEFB881DE}
HKEY_CLASSES_ROOT\AppID\{8B0FEF15-54DC-49F5-8377-8172DE975F75}
HKEY_CLASSES_ROOT\CLSID\{3f4d4f88-0198-4921-b630-957f3eb814e0}
HKEY_CLASSES_ROOT\CLSID\{9BBCF06C-DCD7-495D-80DF-CDD5399D0FF8}
HKEY_CLASSES_ROOT\CLSID\{E813099D-5529-47F4-9B37-4AFAFCB00A43}
HKEY_CLASSES_ROOT\Interface\{AD5BC1F0-72D8-44B3-8E3D-8E8FECCE43FB}
HKEY_CLASSES_ROOT\Interface\{E813099D-5529-47F4-9B37-4AFAFCB00A43}
HKEY_CLASSES_ROOT\AppID\Altnet Signing Module.EXE
HKEY_CLASSES_ROOT\SigningModule.SigningModule
HKEY_CLASSES_ROOT\SigningModule.SigningModule.1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AltnetDM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AltnetDM
HKEY_LOCAL_MACHINE\SOFTWARE\Altnet

Topsearch.dll also adds the "AltnetPointsManager" = "Random Location"
value to the registry key, HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Run. This ensures that the malware processes associated with this malware load automatically when you start your system.

Is topsearch.dll removed completely when the DLL file is deleted?

No, it isn?t. Topsearch.dll, like other adware programs recreates itself when you start your PC after deleting the file.

How to remove topsearch.dll

To remove topsearch.dll you first need to uninstall the program to which it is attached. For instance, if you use KaZaa application, uninstall it, using the built-in Add or Remove Programs utility. For more efficient and complete removal of this stubborn software, you may opt for a much better, third-party program removal tool, such as Perfect Uninstaller.

After uninstalling the application, run a virus/malware scan of your entire system, using reliable antivirus and antispyware tools, such as STOPzilla Antivirus and Spyware Cease and delete all the files that are reported as Adware in the scan results.

How to fix ?Couldn’t load library TopSearch.dll? error

The above error often appears on systems that have KaZaa or Grokster installed. To fix the error, uninstall the file-to-file sharing application you are using and run a virus scan of your entire system.

Should we not use any file sharing applications?

Well, we don?t say you should stop using file sharing applications altogether, but you should stop using those file sharing applications that come bundled with spyware or adware programs.

If you use KaZaa, we recommend that you uninstall this program and instead use KaZaa Lite, which provides you the same features, minus any security threats. One more thing, do not click ?Yes? when KaZaa Lite prompts you to update the application, as it will install KaZaa again on your system.