|
Dec
22
|
Malware Analysis:
A great many web-surfers have been lately reporting problems with their browsing experience due to a strange virus taking over their PCs. The issue is about unexpected redirection of Internet search results to unwanted pages like Crehtynet.com. Please have a look at the image below – that’s what the fraudulent sites look like. If this is the problem you have run into, we are afraid you got to get busy right now scanning your computer in search for a piece of malware that triggers these random diverts. In case the infection is on board your machine, whichever search engine you try to use is not going to work because once you enter the word of phrase in there and hit the button to initiate the search, you will be repeatedly directed to one of the domains associated with this “Click System” scam. These pages are actually pretty harmless if isolated from the redirect badware, but combined with the infection it’s a pretty explosive mix. The workaround here is to use a trusted security product to spot and exterminate the bug. In the section following this description, we outline a method that works in this context. Also, you can check out additional websites related to this campaign:
- bestofthebestsearchsystem.com
- clicksystemsion.com
- clicksystemtoolbar.com
- crehtynet.com
- customizeprivacy.com
- dunamicsystem.com
- efficiency01.com
- fgsagagacsa.com
- mediashifting.com
- mesearchsystem.com
- poiskwebdll.com
- rg45clickmaster.com
- upgreidclickhosting.com
- verificationoftheproduct.com
- wtfwtfwtfred.com
If this or similar problem occurs with your web activity, you might try the fix described in our removal section (see below).
Determine if your PC is infected with the Click System virus:
Download Click System Hijacker Free Scanner with Remover
Click System Landing Page Screenshot:

How to remove this malware manually:
To perform manual removal of this hijacker, you should do the following:
Delete the following corrupt files:
- %WINDOWS%\System32\consrv.dll
- %WINDOWS%\System32\Drivers\mrxsmb.sys
Remove registry entries related to Us-srch-system.com hijacker:
- SubSystems: Windows = basesrv,1 winsrv:UserServerDllInitialization,3 consrv:ConServerDllInitialization,2 sxssrv,4
Please, note that manual removal of Click System redirect malware is a procedure of high complexity and should be performed with extreme caution. Lack of the required skills and even the slightest deviation from the instructions may lead to irreparable system damage. To ensure trouble-free deletion, it is recommended to use the automatic removal tool below:
![]() |
Download Click System Hijacker Removal Tool |
