Troj Revop.A, help please

[steamwiz]

I have the same problem in another thread....also on a WinME machine....

But my thread has 3 searchhooks that hijackthis can't fix..

This one and 2 incredifind...

R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497}_ - (no file)
R3 - URLSearchHook: (no name) - {5D60FF48-95BE-4956-B4C6-6BB168A70310}_ - (no file)
R3 - URLSearchHook: (no name) - {4FC95EDD-4796-4966-9049-29649C80111D}_ - (no file)

I'll be interested to see how this pans out

Anything I can get my poster to do to help ?

steam

[Pieter_Arntz]

Originally Posted by steamwiz

I have the same problem in another thread....also on a WinME machine....

But my thread has 3 searchhooks that hijackthis can't fix..

This one and 2 incredifind...

R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497}_ - (no file)
R3 - URLSearchHook: (no name) - {5D60FF48-95BE-4956-B4C6-6BB168A70310}_ - (no file)
R3 - URLSearchHook: (no name) - {4FC95EDD-4796-4966-9049-29649C80111D}_ - (no file)

I'll be interested to see how this pans out

Anything I can get my poster to do to help ?

steam

Graham,

Is that you?

Welcome at Wilders anyway.


Download Registrar Lite from here:
http://www.resplendence.com/download/reglite.exe

Put it in its own folder. You may want to keep this program. It is an excellent free, registry editor.

Copy and paste the follow text into the address bar, then hit 'Go':
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks

In the pane on the right are the values associated with that key.
We want to remove this one -> {CFBFAE00-17A6-11D0-99CB-00C04FD64497}_ Notice the underscore at the end, all the others with that need to go as well.

Right click on it, and select delete.
If you get a confirmation question, respond OK then close out the program.

Regards,

Pieter

[steamwiz]

HI Pieter

Yes it's me....thanks for the welcome

I've only just seen your reply.....I didn't start this thread.....I posted to an existing thread, where you appeared to be having trouble deleting these registry keys.

http://www.wilderssecurity.com/showt...232#post168232

I thought my post had been deleted, when in fact it had been moved to it's own thread, but no link left to point here.

Thanks for the info above ..... I'll give it a go

steam