Troj Revop.A, help please

Discussion in 'adware, spyware & hijack cleaning' started by steamwiz, Apr 30, 2004.

Thread Status:
Not open for further replies.
  1. steamwiz

    steamwiz Spyware Fighter

    Joined:
    Jan 14, 2004
    Posts:
    5
    I have the same problem in another thread....also on a WinME machine....

    But my thread has 3 searchhooks that hijackthis can't fix..

    This one and 2 incredifind...

    R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497}_ - (no file)
    R3 - URLSearchHook: (no name) - {5D60FF48-95BE-4956-B4C6-6BB168A70310}_ - (no file)
    R3 - URLSearchHook: (no name) - {4FC95EDD-4796-4966-9049-29649C80111D}_ - (no file)

    I'll be interested to see how this pans out

    Anything I can get my poster to do to help ?

    steam
     
  2. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,331
    Location:
    Netherlands
    Graham,

    Is that you?

    Welcome at Wilders anyway. :)


    Download Registrar Lite from here:
    http://www.resplendence.com/download/reglite.exe

    Put it in its own folder. You may want to keep this program. It is an excellent free, registry editor.

    Copy and paste the follow text into the address bar, then hit 'Go':
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks

    In the pane on the right are the values associated with that key.
    We want to remove this one -> {CFBFAE00-17A6-11D0-99CB-00C04FD64497}_ Notice the underscore at the end, all the others with that need to go as well.

    Right click on it, and select delete.
    If you get a confirmation question, respond OK then close out the program.

    Regards,

    Pieter
     
  3. steamwiz

    steamwiz Spyware Fighter

    Joined:
    Jan 14, 2004
    Posts:
    5
    HI Pieter

    Yes it's me....thanks for the welcome

    I've only just seen your reply.....I didn't start this thread.....I posted to an existing thread, where you appeared to be having trouble deleting these registry keys.

    https://www.wilderssecurity.com/showthread.php?p=168232#post168232

    I thought my post had been deleted, when in fact it had been moved to it's own thread, but no link left to point here.

    Thanks for the info above ..... I'll give it a go

    steam
     
Thread Status:
Not open for further replies.