Ricercadoppia Spyware Profile

Ricercadoppia is a spyware program disguised as a browser toolbar add-on.  It was first discovered on June 29 of 2006.  It can be manually downloaded at Ricercadoppia.com or may be bundled with other software.

Ricercadoppia pretends to be an mp3-playing toolbar.  In reality, it monitors your browsing habits and collects web page information from sites you visit.  It also automatically updates itself, so it may download other spyware.  It also redirects your browser to display its affiliate sites.

Ricercadoppia is not worth the hassle of keeping it.  You should remove it with ZookaWare PC Cleaner.

Also Known As: No known aliases

Spyware Type: Toolbar, Data Miner, Downloader, Browser Hijacker

Associated Files:
foto al mare.lnk
free-video2.exe
hsearch_frame.html
ibwire[1].exe
idro.exe
iedunper.exe
lateshow.exe
libero[1].exe
mp3player_background.jpg
mp3player_banner.html
mp3player_bar.jpg
mp3player_miniconfig.xml
mp3player_next.jpg
mp3player_pause.jpg
mp3player_play.jpg
mp3player_prev.jpg
mp3player_slider.jpg
mp3player_song0.mp3
mp3player_song1.mp3
mp3player_stop.jpg
mp3player_wmplayer.swf
msfirewall.exe
msn_loader.exe
panicbutton_plugin.dll
ricercadoppia.crc
ricercadoppia.dll
ricercadoppia.dll.lnk
ricercadoppia.inf
ricercadoppia[1].cab
ricercadoppia[1].lnk
simpabar.bmp
smallactive.dll
smallactive.inf
superinstaller.exe
superinstaller[1].exe
tbhelper.dll
tialla[1].exe
troie.exe
troie[1].exe
vsearch_frame.html
HKEY_CLASSES_ROOTclsid{9ec0e71a-88be-49af-b690-7c032cdce8b4}inprocserver32, threadingmodel=apartment=
HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversioninternet settingszonemapdomainsciritorno.bizwww, *=2=
HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversioninternet settingszonemapdomainscoppiastrana.bizwww, *=2=
HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversioninternet settingszonemapdomainsmelagodo.bizwww, *=2=
HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversioninternet settingszonemapdomainsnanobyte.bizwww, *=2=
HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversioninternet settingszonemapdomainspergentina.bizwww, *=2=
HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversioninternet settingszonemapdomainsplaymore.bizwww, *=2=
HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversioninternet settingszonemapdomainspopup-freesex-adv.bizwww, *=2=
HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversioninternet settingszonemapdomainspreferiti-windows.comwww, *=2=
HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversioninternet settingszonemapdomainsricercadoppia.comwww, *=2=
HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversioninternet settingszonemapdomainssuper-videochat-community.bizwww, *=2=
HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversioninternet settingszonemapdomainsumts-gprs-mondo-telefonino-cellulare.bizwww, *=2=
HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversioninternet settingszonemapdomainsvispateresa.bizwww, *=2=
HKEY_CURRENT_USERsoftwarexbtb08814cache, http://www.ricercadoppia.com/thebar/counter.asp?tbid=%toolbar_id&do=0=1151523523=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, #editwidthcombo1#=widthcombo11=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, alertmsg=alert=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, autocomplete=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, autosearch=www.ricercadoppia.com/behaviors/errors/default.asp?text=%s=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, autoupdatemsg=new version of frame search sample is available. would you like to download and install new version?=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, blockpopups=0=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, closeallwindowsforupdate=all running ie windows will be closed before updating the frame search sample. continue?=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, connectionerror=can’t establish a connection.=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, contextmenuitemname=frame search sample search=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, contextsearch=http://www.google.com/search?q=%selection=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, corruptedmsg=one of the xml files is corrupted or invalid. press ok to uninstall.=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, countos=2=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, currentfont=tahoma=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, currentlayout=0=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, descriptivetext=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, editwidthcombo1=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, errormsg=error=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, firsttime=0=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, firsturl=http://www.ricercadoppia.com/thebar/counter.asp?tbid=%toolbar_id&do=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, fontsize=13=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, keephistory=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, lastversionmsg=you have the latest version of the frame search sample.=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, m_bworking=0=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, oldos=0=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, opennew=0=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, popstop=frame search sample has blocked a pop-up window=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, runsearchautomatically=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, runsearchdragautomatically=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, scope=0=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, serverpath=http://www.ricercadoppia.com/thebar/ricercadoppia_webinstall/=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, showfindbuttons=0=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, showhighlightbutton=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, tbbreak=0=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, tbpos=5=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, tbshow=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, tbwidth=810=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, toolbarisfailed=0=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, toolbar_id={6fd0285f-66be-437b-b05a-e7884aa0aca8}=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, toolbar_version=ricerca doppia 1.1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, uninstallmsg=this will remove the frame search sample from your computer! are you sure?=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, updateautomatically=0=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, updatemsg=this will try to update the frame search sample from the server. continue?=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, updateurl=http://www.ricercadoppia.com/thebar/ricercadoppia_webinstall/ricercadoppia.cab=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, updatexml=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, urlafteruninstall=http://www.ricercadoppia.com/thebar/counter.asp?tbid=%toolbar_id&do=2=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, urlafterupdate=http://www.ricercadoppia.com/thebar/updated.asp=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, useragent=mister x=
HKEY_CURRENT_USERsoftwarexbtb08814toolbar, versionerror=can not find current version information.=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_banner_027643=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_button_008746=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_button_011274=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_button_013249=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_button_015746=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_button_025659=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_button_031765=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_button_0aewrf=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_combo_016136=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_item_008843=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_item_011062=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_item_019623=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_item_022539=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_item_023701=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_item_024315=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_item_026027=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_item_027018=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_item_028256=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_item_032230=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_separator_001499=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_separator_007969=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_separator_008922=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_separator_019806=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_separator_019828=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_separator_022361=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, tbs_separator_029715=1=
HKEY_CURRENT_USERsoftwarexbtb08814toolbartb_items, widthcombo11=1=
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionshareddlls, [%WINDOWS%]downloaded program filesricercadoppia.crc=1=
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionshareddlls, [%WINDOWS%]downloaded program filesricercadoppia.dll=1=
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallxbtb08814.xbtb08814toolbar, displayname=ricerca doppia=
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallxbtb08814.xbtb08814toolbar, uninstallstring=regsvr32 /u /s=

Download Free Scan
ZookaWare runs on Windows Vista, 7, 8 and 10. It has no ads, popups or bundled software and fully uninstalls by clicking Start > All Programs > select ZookaWare and click Uninstall.

One Response

  1. Priam Oswald says:

    I installed a new program and after that, my anti virus system warned me about Ricercadoppia. I tried to remove it, but it was impossible. I searched on the internet and I found this blog. This software is just great!

Leave a Reply

Your email address will not be published. Required fields are marked *

css.php