Removing Clientman
How to uninstall and remove client man

In this series of our getting rid of Spyware and Adware articles, you shall learn about how to successfully remove the ClientMan Spyware and successfully get rid of it from your system.

Clientman an introduction

ClientMan is an advertising spyware with multiple modes of operation. The various versions released have add different functionality ranging from adding advertising links to web pages, opening popup ads, and redirecting your search engine results, address bar searches and error pages.

What is ClientMan and what exactly does it do?

ClientMan is bundled with file sharing programs or its affiliates. The software does not contain any information about its source or purpose. Its default location is "C:\Program Files\ClientMan". ClientMan starts up every time when the computer is rebooted.

It makes all targeted words in all web pages links with a yellow background, pointing to ClientMan's server odysseusmarketing.com. This may redirect to a search results site such as 1stblaze.com or epilot.com. Periodically opens pop-up advertising from odysseusmarketing.com, which may redirect to popupmarketing.com.

ClientMan is supposed to gathers a list of running processes along with any user details it can get from:

• Outlook Express mail accounts
  
• Windows/MSN Messenger accounts
• AOL Instant Messenger (AIM) accounts
• ICQ accounts
• Yahoo Pager accounts
• Speedbit Download Accelerator software registration
• Zone Alarm software registration
• Creative SoundBlaster software registration
• Windows dialling location

ClientMan has been observed sending unknown data to its servers at ipend.datastorm.biz; it is suspected this may be an encoded version of this information. ClientMan can silently download and execute arbitrary unsigned code from its controlling server as an update feature.

Clientman exists in three variants :

• Client Man / Helper: The first version. Includes two Browser Helper Objects Adds yellow advertising links to pages. It includes two IE Browser Helper Objects - a 'browserhelper' and a 'trackurl' DLL, used to add yellow advertising links to pages - along with various other processes.
  
  
• Client Man / Tagger: Second version. Files include taggerbho.dll, fixtitle.exe, getbuys.exe The 'browserhelper' DLL is replaced by a 'taggerbho' one, and there is a new 'searchrep' DLL which redirects search engine usage, plus new EXE files 'fixtitle' and 'getbuys'.
  
  
• Client Man / 2in1: Current version. Files include 2in1.dll, dnsrep.dll, urlcli.dll, msvrfy.dll, gstylebho.dll The taggerbho is replaced with a '2in1' DLL; the yellow links are no longer added to the page. Instead, all address bar searches, unknown domains and web server error pages are redirected (currently to searchassistant.net) by the new 'dnsrep' DLL, and pop-up adverts are opened at regular intervals by the new 'urlcli' DLL.

It is bundled with some versions of Grokster from late March 2003. It is also installed by Favouriteman.

It causes IE to crash down randomly. It seems to add itself to Norton Firewall allow list.

SPYWARE / ADWARE REMOVAL INSTRUCTIONS

Removing clientman. How to easily delete and remove Client man Spyware and get rid of it for free

Download Spy Sweeper to get rid of Clientman and protect your computer from all such spyware pests which infect your computer. Spy Sweeper wil scan your computer fro Client man and safely remove it.

Removing Clientman. How to manually remove Clientman Spyware from your system

* WARNING : Removing Clientman by modifying your registry or system files can render your system unusable in case of any error, we strongly recommend you to download spy sweeper. in order to safely remove client man from your system.

If there is an entry for mscman in the Control Panel's Add/Remove Programs list, then you can use it to remove ClientMan. If not, then follow the manual removal instructions given below.

• Removing Clientman step 1) Open the registry and find the key Software\Microsoft\Windows\CurrentVersion\Run, inside HKEY_LOCAL_MACHINE (for ClientMan/Helper and ClientMan/Tagger) or HKEY_CURRENT_USER (for ClientMan/2in1). On the right, right-click the entry 'ClientMan' or 'ClientMan1' and choose 'Delete'.

• Removing Clientman step 2) Now open the 'run' folder inside 'ClientMan' in the Program Files folder, and note the names of the DLLs. If you have the Helper variant, you should see 'browserhelperX.dll' and 'trackurlX.dll', where X is a random eight-digit hexadecimal value. If you have the Tagger variant, you should have 'taggerbhoX.dll', 'trackurlX.dll' and 'searchrepX.dll'. In either variant, you may have further leftover DLLs from previous updates.

• Removing Clientman step 3) Open a DOS command prompt window (from Start->Programs->Accessories). Enter the following commands in the DOS window, for the Helper variant:

  cd "%WinDir%\System" regsvr32 /u "\Program Files\ClientMan\run\browserhelperX.dll" regsvr32 /u "\Program Files\ClientMan\run\trackurlX.dll"

  Or, for the Tagger variant:

  cd "%WinDir%\System" regsvr32 /u "\Program Files\ClientMan\run\taggerbhoX.dll" regsvr32 /u "\Program Files\ClientMan\run\trackurlX.dll" regsvr32 /u "\Program Files\ClientMan\run\searchrepX.dll"

  Or, for the 2in1 variant:

  cd "%WinDir%\System" regsvr32 /u "\Program Files\ClientMan\run\urlcliX.dll" regsvr32 /u "\Program Files\ClientMan\run\trackurlX.dll" regsvr32 /u "\Program Files\ClientMan\run\searchrepX.dll" regsvr32 /u "\Program Files\ClientMan\run\msvrfyX.dll" regsvr32 /u "\Program Files\ClientMan\run\gstylebhoX.dll" regsvr32 /u "\Program Files\ClientMan\run\dnsrepX.dll" regsvr32 /u "\Program Files\ClientMan\run\2in1X.dll"

  Replace the 'X' in these commands with the random letters and numbers you see in the filenames in the folder view. If there's more than one file with the same name but a different set of numebrs you can use either, it doesn't matter. Now restart the computer and you should be able to delete the entire 'ClientMan' folder inside Program Files. Also delete the 'words.lst' file inside the Windows folder and the 'cachelut.dat' file which you may find inside the Windows folder or inside the Internet Explorer folder in Program Files. Finally, to clean up, you can delete the registry keys 'HKEY_CURRENT_USER\Software\CliMan' and 'HKEY_CURRENT_USER\Software\iPend'.

Congratulations, you have successfully removed ClientMan from your computer by following our clientman removal and uninstalling guide.

In general we strongly recommend to use a anti spy software to remove clientman or other spyware as manually uninstalling and editing can seriously hurt your system.

Click Here Now! and download spy sweeper. Spy Sweeper wil scan your computer for client man and other spyware and adware. Use it to SAFELY remove clientman and all of its components. Protect your privacy NOW!