Removing Clientman

Learn how to uninstall and remove clientman spyware in our clientman removal article. In this series of our getting rid of Spyware and Adware articles, you shall learn about how to successfully remove the clientman Spyware and successfully get rid of it from your system.

clientman remove instructions, learn more about this adware and how to uninstall clientman in our removing and uninstaller guide

CLIENTMAN is a wide-ranging advertising threat. The various versions released may add advertising links to web pages, open popup adverts, and redirect search engine results, address bar searches and error pages.

CLIENTMAN is a spyware application that submits various Internet usage information to a server, including email and instant messaging details. It also submits personal information, such as IP address, browser used, and user details retrieved from other installed applications on the system.

CLIENTMAN is bundled with file sharing programs or its affiliates. The software does not contain any information about its source or purpose. Its default location is "C:\Program Files\ CLIENTMAN ". CLIENTMAN starts up every time when the computer is rebooted. The installer says the software is delivered from odysseusmarketing.com.

This software has a number of variants:

CLIENTMAN .b99 variant runs at reboot.

CLIENTMAN .bho1 is a browser helper object variant.

CLIENTMAN .bho2 is a browser helper object variant.

CLIENTMAN .mskhhe is implemented as a browser helper object.

CLIENTMAN .msmc runs at reboot.


CLIENTMAN has been bundled with some versions of Grokster from late March 2003. Installed by the FavoriteMan spyware threat.

Makes all targeted words in all web pages links with a yellow background, pointing to CLIENTMAN 's server odysseusmarketing.com. This may redirect to a search results site such as 1stblaze.com or epilot.com.

Periodically opens pop-up advertising from odysseusmarketing.com, which may redirect to popupmarketing.com.

The Tagger variant redirects use of known search engines (at the time of writing, Google and Yahoo only) to firstbookmark.com; the address bar will still show the address of the original search engine, but the content of the page will be overwritten with results from firstbookmark.com (which are currently sourced from 123search.com).

clientman behavior

• Outlook Express mail accounts
• Windows/MSN Messenger accounts
• AOL Instant Messenger (AIM) accounts
• ICQ accounts
• Yahoo Pager accounts
• Speedbit Download Accelerator software registration
• Zone Alarm software registration
• Creative SoundBlaster software registration
• Windows dialling location

clientman remove and uninstalling Introduction

There may be an entry in the Control Panel's Add/Remove Programs list for 'mscman'. Try selecting this and clicking 'Remove' if it is there.

Ad-Aware reflist 07.04.2003 can remove at least ClientMan/Helper.

Manual Removal

Open the registry (click 'Start', choose 'Run' and enter 'regedit') and find the key Software\Microsoft\Windows\CurrentVersion\Run, inside HKEY_LOCAL_MACHINE (for ClientMan/Helper and ClientMan/Tagger) or HKEY_CURRENT_USER (for ClientMan/2in1). On the right, right-click the entry 'ClientMan' or 'ClientMan1' and choose 'Delete'.

Now open the 'run' folder inside 'ClientMan' in the Program Files folder, and note the names of the DLLs. If you have the Helper variant, you should see 'browserhelperX.dll' and 'trackurlX.dll', where X is a random eight-digit hexadecimal value. If you have the Tagger variant, you should have 'taggerbhoX.dll', 'trackurlX.dll' and 'searchrepX.dll'. In either variant, you may have further leftover DLLs from previous updates.

Open a DOS command prompt window (from Start->Programs->Accessories). Enter the following commands in the DOS window, for the Helper variant:

Or, for the Tagger variant:

Or, for the 2in1 variant:

Replace the 'X' in these commands with the random letters and numbers you see in the filenames in the folder view. If there's more than one file with the same name but a different set of numebrs you can use either, it doesn't matter. Tip: if you drag the DLL file from the folder view into the DOS command prompt window, it will put the filename in for you, so you don't have to type it out.

Users of non-English versions of Windows may also need to replace the name 'Program Files' with the name of the Program Files folder on their operating system. Tip: if you drag the file in question into the DOS command prompt window, its full name will be inserted for you. Remember to include the space after '/u' before dragging in a file if you do this.

Now restart the computer and you should be able to delete the entire 'ClientMan' folder inside Program Files. You can also delete the 'words.lst' file inside the Windows folder and the 'cachelut.dat' file which you may find inside the Windows folder or inside the Internet Explorer folder in Program Files. Finally, to clean up, you can delete the registry keys 'HKEY_CURRENT_USER\Software\CliMan' and 'HKEY_CURRENT_USER\Software\iPend', if you wish.