Wilders Security Forums  

Go Back   Wilders Security Forums > Browser Hijacks and Spyware Problems > news, general information and FAQs
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old January 17th, 2004, 03:27 PM
Pieter_Arntz's Avatar
Pieter_Arntz Pieter_Arntz is offline
Spyware Veteran
 
Join Date: Apr 2002
Location: Netherlands
Posts: 12,298
Default smartsearch removal

Research and fixes by Mosaic1.

These will remove the startup for the file which is putting this back in place.

Windows 2000 and XP

Copy the contents of the Quote Box to Notepad. Name the file go away.reg
Save as all files.
Double click on go away.reg to enter into the registry.

Quote:

Windows Registry Editor Version 5.00

[-HKEY_CLASSES_ROOT\CLSID\{3F143C3A-1457-6CCA-03A7-7AA23B61E40F}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{3F143C3A-1457-6CCA-03A7-7AA 23B61E40F}"=-

Restart the Computer
Once back in Windows.
Delete these two files from system32.
mtwirl32.dll and mtwcnl32.dll


Windows 95, 98 and ME

Copy the contents of the Quote Box to Notepad.
Name the file go away.reg
Save as all files.
Double click on go away.reg to enter into the registry.

Quote:

REGEDIT4

[-HKEY_CLASSES_ROOT\CLSID\{3F143C3A-1457-6CCA-03A7-7AA23B61E40F}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

"DDE Control Module"=-

Restart the Computer
Once back in Windows delete these two files from the Windows\system Folder

mtwirl32.dll and mtwcnl32.dll

In HijackThis 1.98.0 these will be shown as:

O21 - SSODL: DDE Control Module - {3F143C3A-1457-6CCA-03A7-7AA23B61E40F} - (no file)

Fixing that entry will have the same effect as using the regfiles I posted above.
__________________
Regards,

Pieter
It´s nice to be important, but it´s more important to be nice.
Remove & Prevent spyware
It's human to make mistakes. It's even more so to blame the computer for it.

Last edited by Pieter_Arntz : July 28th, 2004 at 04:09 PM. Reason: Adapted for HJT 1.98.0
 

Wilders Security Forums > Browser Hijacks and Spyware Problems > news, general information and FAQs « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -5. The time now is 08:44 PM.


Powered by vBulletin® Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2009, Wilders Security Forums