{"id":1333,"date":"2014-08-10T08:47:37","date_gmt":"2014-08-10T08:47:37","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=1333"},"modified":"2018-05-29T12:02:48","modified_gmt":"2018-05-29T12:02:48","slug":"keepmysearch-onekit-removal-instructions","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/keepmysearch-onekit-removal-instructions\/","title":{"rendered":"KeepMySearch and OneKit &#8211; Removal Instructions"},"content":{"rendered":"<p>Yesterday I was fooling around with one of those downloads that I know bundles various types of unwanted software. I ran the installer over and over again to see if any new bundled software would install. Bingo.<\/p>\n<p>Found something called <strong>OneKit\u00a0<\/strong>and <strong>KeepMySearch<\/strong>, which added a desktop icon in form of a orange magnifying glass and a process named <a href=\"http:\/\/www.freefixer.com\/library\/file\/onekit.exe-136671\/\">onekit.exe<\/a> running in the background. The onekit.exe file was digitally signed by <strong>Montiera Technologies LTD.\u00a0<\/strong>The company description on the file is <strong>Pay By Ads LTD<\/strong>.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/onekit-icon.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-1339\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/onekit-icon.png\" alt=\"onekit icon\" width=\"94\" height=\"88\" \/><\/a><\/p>\n<p>When double-clicking on the OneKit icon a dialog for something called <strong>KeepMySearch<\/strong> popped up.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/keepmysearch-popup.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-1341\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/keepmysearch-popup.png\" alt=\"keepmysearch popup\" width=\"465\" height=\"414\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/keepmysearch-popup.png 465w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/keepmysearch-popup-300x267.png 300w\" sizes=\"(max-width: 465px) 100vw, 465px\" \/><\/a><\/p>\n<p>And when opening my Firefox browser, the <strong>Keep My Search<\/strong> widget appeared on the left side:<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/keepmysearch-widget.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-1342\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/keepmysearch-widget.png\" alt=\"keepmysearch widget\" width=\"139\" height=\"344\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/keepmysearch-widget.png 139w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/keepmysearch-widget-121x300.png 121w\" sizes=\"(max-width: 139px) 100vw, 139px\" \/><\/a><\/p>\n<p>The same <strong>KeepMySearch<\/strong> widget also appeared in Google Chrome.<\/p>\n<p>Only a few of the anti-virus scanners are detecting the onekit.exe file according to VirusTotal. Just a 9% detection rate.\u00a0<strong>Montiera<\/strong> and <strong>PUP.Optional.PayByAds.A<\/strong> are two of the detection names for onekit.exe.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/onekit.exe-virustotal-report.png\"><img loading=\"lazy\" class=\"alignnone wp-image-1338 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/onekit.exe-virustotal-report.png\" alt=\"onekit.exe virustotal report: 9% detection rate\" width=\"781\" height=\"243\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/onekit.exe-virustotal-report.png 781w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/onekit.exe-virustotal-report-300x93.png 300w\" sizes=\"(max-width: 781px) 100vw, 781px\" \/><\/a><\/p>\n<p><strong>OneKit<\/strong>\u00a0has an entry in the Uninstall\u00a0program dialog which should allow you to uninstall it. I have not tried it though. <a title=\"About FreeFixer\" href=\"http:\/\/www.freefixer.com\/b\/about-freefixer\/\">FreeFixer<\/a> can remove the OneKit software by selecting the two entries in the scan result as shown in the screenshots below.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/onekit-uninstaller.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-1335\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/onekit-uninstaller.png\" alt=\"onekit uninstaller\" width=\"645\" height=\"196\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/onekit-uninstaller.png 645w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/onekit-uninstaller-300x91.png 300w\" sizes=\"(max-width: 645px) 100vw, 645px\" \/><\/a><\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/onekit.exe-process.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-1336\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/onekit.exe-process.png\" alt=\"onekit.exe process\" width=\"839\" height=\"355\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/onekit.exe-process.png 839w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/onekit.exe-process-300x126.png 300w\" sizes=\"(max-width: 839px) 100vw, 839px\" \/><\/a> <a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/onekit.exe-startup.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-1337\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/onekit.exe-startup.png\" alt=\"onekit.exe startup\" width=\"785\" height=\"270\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/onekit.exe-startup.png 785w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/onekit.exe-startup-300x103.png 300w\" sizes=\"(max-width: 785px) 100vw, 785px\" \/><\/a><\/p>\n<p>Did you also get the <strong>OneKit<\/strong> and the <strong>KeepMySearch<\/strong> software on your computer? Any idea where you got it?<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Yesterday I was fooling around with one of those downloads that I know bundles various types of unwanted software. I ran the installer over and over again to see if any new bundled software would install. Bingo. Found something called OneKit\u00a0and KeepMySearch, which added a desktop icon in form of a orange magnifying glass and &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/keepmysearch-onekit-removal-instructions\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">KeepMySearch and OneKit &#8211; Removal Instructions<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/1333"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=1333"}],"version-history":[{"count":3,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/1333\/revisions"}],"predecessor-version":[{"id":1345,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/1333\/revisions\/1345"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=1333"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=1333"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=1333"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}