Over 1 million tech questions and answers.

Remove Autocomplete entries from Windows Explorer

Q: Remove Autocomplete entries from Windows Explorer

I am trying to disable and remove Autocomplete entries from Windows Explorer Search Windows NOT Internet Explorer. IE Tools / Options / Content / Autocomplete and clearing everything and unchecking everything does NOT work for Windows Explorer.

Without using additional software is there any way to do this in XP?

Thanks.

RELEVANCY SCORE 200
Preferred Solution: Remove Autocomplete entries from Windows Explorer

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Remove Autocomplete entries from Windows Explorer

In the registry HKCU\Software\Microsoft\Search Assistant\ACMru\(subfolder)......

Look in the (subfolder)<some number.

Read other 6 answers
RELEVANCY SCORE 72

Such as "Publish DWFx." See attached screenshot.

*Edit*
I have been informed by the Autodesk boards that there is no option in the software to remove the context menu items in question. I have succeeded in removing them by deleting the registry key

[HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Autodesk.DWF.ContextMenu]


 

Read other answers
RELEVANCY SCORE 66

Hi,
I have Vista Home-Premium. Is there a way to remove the autocomplete entries [not passwords] such as when you do a search or something like that and have to type the entry. There was software that let me do this when I was using 98se but nothing that I can find for Vista. Thanks.

Charles
 

A:Autocomplete entries

Go to tools,internet options and clesr browser history.
 

Read other 2 answers
RELEVANCY SCORE 65.6

Hi,

I've got a user whose computer had a CD-ROM drive button missing. Thus we gave her a different one to use since we have that one under warranty. However, the user complains that her autocomplete entries are not showing up when she goes to type in an email address in Outlook 2003.

So I followed this path:

C:\Documents and Settings\<username>\Application Data\Microsoft\Outlook

and copied the NK2 file from her old PC to her new one. When that didn't work I copied the entire contents of this location into the appropriate place on her new PC but that also didn't work.

Is there something else I need to port over? Another file maybe?

Also we did restart Outlook and PC etc. and it did not fix the issue.

Any ideas would be greatly appreciated.

Thanks!

JFresh
 

Read other answers
RELEVANCY SCORE 65.6

Whenever I upgrade IE I have to type in all of my user names and passwords again. I save these so they do not have to be typed everytime. Where in Windows is the file located that saves these and can I back them up before an upgrade so that I can use them with the new version of IE?
Thank you.
 

A:Saving Autocomplete entries

Export This Entry form the registry. After upgrading IE, import it back in.

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer
 

Read other 1 answers
RELEVANCY SCORE 64.8

Okay.... I'm baffled on this one. Am a professional tech, with a great deal of experience with systems, but have no clue what's controlling this....

WinXP Home... all service paks installed
Internet Explorer 6.... ditto.

Just rebuilt my father-in-law's system within the last 60 days from scratch, so it's nice and clean. Only additional apps are SpyBotSearch&Destroy and AVG AntiVirus-Personal, Google toolbar. He uses this system exclusivly for web browsing, and e-mail. Internet access is via DSL, no goofy MSN/AOL/etc.

With Form Autocomplete enabled in Explorer, the problem is that for a given web page, Explorer is purging autocomplete form entries that are over X days old. We have proven this by having him enter in the desired form field a date tag, for example; for today he'd enter '19Mon'. Deletion occurs on Mondays, for days N-12 thru N-5... so today, '07Wed' thru '14Wed' disappeared.

Anyone have any ideas?

Thanks, Huge!

-Kurt

A:Autocomplete Form Entries Get Purged?

Does he have a tracks cleaner like cccleaner installed?
This sounds like a scheduled task in a cleanup utility.

Read other 1 answers
RELEVANCY SCORE 64.8

HOw can i selectivly delete autocomplete entries?

I have an aunt whose computer i am working on , and her nephew was up to some bad things, HOwever she does not want all of her entries deleted, because she uses them often, is a slow typer and there are over onehundred of them.

Are these values stored in the registry or where?
 

A:Selectivley Deleteing Autocomplete Entries (IE)

To selectively delete the entries, go to a page with a form, click in a form field containing the auto-complete entries you want to delete, press the down arrow on the keyboard to display everything in the list. Then use the down arrow to select on, press the delete key on the keyboard and keep going until all the unwanted entries are gone.

This method does not work, however, in the Start>Run box. The Run history is stored in one (or both) of these folders:
Hkey_users\software\microsoft\windows\currentversion\explorer\runmru
Hkey_current_user\software\microsoft\windows\currentversion\explorer\runmru. Simply look in the window on the right for the entry you want to remove. Each stored entry is listed with a letter in the Name column, and the complete entry appears in the Data column. Select the name of the entry you want to remove, press Delete.
 

Read other 1 answers
RELEVANCY SCORE 63.2

Hi guys

We're migrating a user from IMAP to POP. She's using Outlook 2013 and has lots of autocomplete entries. There's no suggested contacts folder and no .nk2 files. Any idea where they're stored?

Thanks
 

A:Outlook 2013 autocomplete entries for IMAP account

You need to check with the source (email ISP) to find how there service does it.
 

Read other 2 answers
RELEVANCY SCORE 57.6

Hi,
is this possible?
I currently have things like Favourites, Libraries, and Homegroup (all of which I don't care for). Not sure what that folder pane is actually called, so not sure what to search for.
I just want an expanded folder tree of My Computer.

Any suggestions?
thanks

[edit:
Favorites - Add or Remove from Navigation Pane for Favourites apparently. still not sure about libraries or homegroup]
[another edit:
Libraries Folder - Add or Remove from Navigation Pane
for Libraries
ok, at least it's searchable now that I know it's called navigation pane]

A:Change/remove entries in "Folder view" pane (left side of Explorer)

I'm not sure why one would do this. Right click on what ever you don't want and select delete. Be very sure you want to do this. Those things do no harm being there.

Read other 4 answers
RELEVANCY SCORE 56.8

Help Please: I have used Msicuu,exe (older windows installer help cleanup files) to examine left overs from the windows installer. The picture attached show entries that have no real identification on ot to or about them to know which program they are or were. I realize if I delete the wrong ones and these are working programs that I will be unable to remove the working program later and yet some installation of products will not proceed because of some left overs form a previous failed or removed installation.. How can I find out what the figures in the photo shot are so that I can if needed remove them via the cleanup file Anyone help please

A:Windows installer entries without information - how to remove

I guess no-one has experienced this area of not being able to reinstall or renew an install..because maybe windows installer left a 'bit' behind..anyone help please..how can I see what the installer has via the registry..?

Read other 1 answers
RELEVANCY SCORE 56.8

I've been using IE9 beta for a couple of months and have a minor issue concerning AutoComplete. I have it turned off via Internet Options. Every time I use IE9 to search for a website I get a pop-up at the bottom of my screen asking if I want AutoComplete to remember web form entries.



I used Option 3 to see if I needed to edit the AutoComplete registry entry but it's not even showing.



I have a habit of clearing cookies whenever I turn off my computer so I thought this pop-up was cookie related. It's not. It still shows up even if cookies have not been deleted. Is this just an annoying glitch in IE9 or do I need to configure some other setting?

A:Turn off "AutoComplete to remember web form entries" pop-up in IE

Hello Lee,

Not sure if just clicking on No in the pop-up alone would stop it from popping up again.

This tutorial is not really for that, but you might see if using step 2 in OPTION TWO may be able to stop the Auto Complete message from popping up again afterwards.

Read other 9 answers
RELEVANCY SCORE 56.4

Hi I cannot remove wrong or miss spelt names from our hotmail sign in drop down list.  I have tried using the down arrow key to highlight the miss spelt name in the drop down list and then pressed the delete key but nothing happens.  Can you
please assist me?

Read other answers
RELEVANCY SCORE 55.2

Need assistance with this problem. When booting system sometimes I hit F9 to select boot device, when I want to boot from dvd or usb. Before you say I can list boot devices in bios I know this, the problem Is UEFI and Legacy my UEFI system is not secure boot and for whatever reason I have to F9 and manually select usb or dvd legacy, some versions of linux will not boot otherwise.

Anyway my problem is when booting system I hit F9 and this is what it looks like:

Please select boot device:

UEFI boot sources:

Windows boot manager
Linux Mint
Linux mint
Linux Mint
Linux Mint
Ubuntu
Ubuntu
Ubuntu
Ubuntu

Legacy boot sources:
Hard Drive
SATA0
Network controller
Atapi cd/dvd drive
SATA2

Over the course of the last year I have dual booted several version of linux, but it seems that linux mint and ubuntu add entries to my UEFI boot sources list...how do I remove them, the list is getting to long, and currently only windows 7 is installed.

Henry

Hp Pavillion Slimline s5-1114
Bios version 7.16

Ps other than this annoying list the system boots fine right into windows.

A:Remove multiple entries in boot device list on Hp desktop windows 7

I would avoid EFI if it doesn't offer advantages and only trouble: Bypass UEFI to Install WIn7

Read other 2 answers
RELEVANCY SCORE 55.2

I inadvertantly added my password onto the end of my email  address while trying to sign in to hotmail. Now whenever I  start to sign in,as soon as I type the first letter of my email address, I see a drop down list containing
an "email address" which is my email address AND my password combined. 
how do I clear the drop down list or remove unwanted entries.

A:remove entries from windows-live / hotmail sign-in drop down list

To remove an entry highlight it using the Down Arrow (not the mouse) and press
Del on your keyboard.



Regards.Vincenzo Di Russo
Microsoft® MVP Windows Internet Explorer, Windows & Security Expert - since 2003.
Moderator in the Microsoft Answers and TechNet Forums
My MVP Profile: https://mvp.support.microsoft.com/profile/Vincenzo

Read other 18 answers
RELEVANCY SCORE 55.2

Anyone ever heard of not being able to clear your autocomplete entries.

When I go to Tools>>Content>>Autocomplete and click "Clear Forms", nothing happens. The hourglass will come up and stay up for hours. If I hit CTR/ALT/DEL, my IE says (Not Responding).

Using IE6 with all service packs.
Have reinstalled IE already.
Is there any other way to clear autocomplete entries other than going to each box and deleting them one by one???

Thanks
 

Read other answers
RELEVANCY SCORE 55.2

Hi,

My computer has this annoying problem: windows explorer is showing the CD drive and user documents folder multiple times (see example below).

I couldn't find solution for this yet. will appriciate you help.

Thanks,
David
 

Read other answers
RELEVANCY SCORE 55.2

Hi there TSF.

I run a desktop with XP SP3. My seemingly stupid question is how do I control the font color in Windows Explorer? Sometines I get Black, sometimes I get Blue. This makes no sense to me whatsoever and it is annoying. Can you please advise how to control the font colors in Windows Explorer,

Thank you very much in advance for your help. I've got to be missing something really simple and stupid, but I'll take my lumps to straighten out this annoying problem

A:Multi color entries in Windows Explorer?

Blue means the file is Compressed. Green means it's Encrypted.
You can turn that off in Folder Options
In Windows Explorer click Tools | Folder Options
Click the View tab
Uncheck Show encrypted or compressed NTFS files in color

If someone encrypts your files (XP Pro only) "just to try it out" you'd never know it though, and if you ever re-install Windows and don't have the encryption key you could lose all of your files.

You can change the color using TweakUI, or you can edit the registry.
Click Start | Run, type Regedit, press Enter
Navigate to here:

Code:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
Create or edit these Binary values
AltColor
AltEncryptionColor
and enter the RGB color that you want.
00 00 FF 00 is Blue, 00 00 00 00 would be Black
The last byte is not used

Read other 1 answers
RELEVANCY SCORE 53.6

Hi all. I'm tuning up a pc for a friend whose kids have installed numerous trial games, itunes, music oasis, etc., and other misc. crap. Got most of it to my liking except this: can't get rid of 2 entries in the Add/ Remove Programs applet in Control Panel (itunes and music oasis). Here's what I've done so far:

Searched the web high and low and tried every suggestion offered to no avail

In Regedit went to HKEY_LOCAL_MACHINE\Software\Microsoft\Current Version|Uninstall and removed all the entries I wanted, then rebooted, went back into Add/Remove and itunes and music oasis are still there

Opened C:\Windows\inf\sysoc.inf, but the 2 entries aren't even listed

Someone suggested using Tweakui, but, as far as I can tell, that only removes the applets in Control Panel (unless I'm missing something there)

Installed a program called Add Remove Program Cleaner, but the 2 offending entires aren't listed in there either

And, finally, reinstalled itunes and music oasis, then rebooted, uninstalled them again, and the entries are still in the Add/Remove Programs list

This is starting to irritate me.
Thanks in advance for any new suggestions as I'd like to get this thing back to him cuz he needs to watch the farm markets tomorrow a.m. if he can
 

A:remove unwanted entries in add/remove programs applet

Read other 16 answers
RELEVANCY SCORE 53.6

remove unwanted entries in add/remove programs applet
Hi all. I'm tuning up a pc for a friend whose kids have installed

numerous trial games, itunes, music oasis, etc., and other misc. crap.

Got most of it to my liking except this: can't get rid of 2 entries in

the Add/ Remove Programs applet in Control Panel (itunes and music

oasis). Here's what I've done so far:

Searched the web high and low and tried every suggestion offered to no

avail, so I'm trying as many forums as I can keep track of. There are

a lot more sharper minds than mine out there.

In Regedit went to HKEY_LOCAL_MACHINE\Software\Microsoft\Current

Version|Uninstall and removed all the entries I wanted, then rebooted,

went back into Add/Remove and itunes and music oasis are still there

Opened C:\Windows\inf\sysoc.inf, but the 2 entries aren't even listed

Someone suggested using Tweakui, but, as far as I can tell, that only

removes the applets in Control Panel (unless I'm missing something

there)

Installed a program called Add Remove Program Cleaner, but the 2

offending entires aren't listed in there either

Ran Hijack This>Misc. Tools>Unistall Manager, and the entries aren't

there either (no big surprise there either)

And, finally, reinstalled itunes and music oasis, then rebooted,

uninstalled them again, and the entries are still in the Add/Remove

Programs list

This is starting to irritate me.
Thanks in ... Read more

A:remove unwanted entries in Add/Remove Programs applet

From the Web:One method: This method avoids editing the registry and should be tried first. The easiest way is to open Add/Remove Programs and select the listing for the program you know has already been deleted. Select the application and click the Remove button. Since there is no application to 'remove', the process will time out and you'll be presented with an option to remove the entry.Another method: To manually remove the orphaned entries from the Add or Remove Programs applet, follow these steps:Click Start, Run and type regedit.exeNavigate to the following key: HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Uninstall

Backup the branch to a file Note: Each subkey represents a program that you've installed. To determine which program that each key represents, click the key, and then view the DisplayName value data in the right pane Select the subkey that you want to deleteRight-click on the subkey and choose DeleteClose Registry Editor

Read other 16 answers
RELEVANCY SCORE 53.2

Microsoft Outlook somehow saves all email addresses that you send to, even if they aren't part of your contacts lists. When typing filling out the To section of a new message, Outlook tries to autocomplete with a huge list of email addresses that you have used in the past. I find it extremely annoying to repeatedly see an email address that I used only once several months ago and will never use again.

Where does it same them? How do you remove them?

Thanks

Outlook 2003
 

A:Solved: Outlook - Remove Addys From Autocomplete

I found the solution in the archives here.

It's amazing what you find when you search with the right terms. Duh. . . ;-)
 

Read other 1 answers
RELEVANCY SCORE 52.4

Okay, let me explain. This happened last month.

Once I decided to get rid of ZoneAlarm after installing it, in favour of COMODO. But after it uninstalled and requested a restart, the computer froze and the BSOD appeared. After reboot, ZoneAlarm was obviously gone, no registry keys, system files and no entry in Windows Security Center. But I forgot to check the Add/Remove Programs.

Now the entry's still there even though I uninstalled it a month ago. How do I remove it?

A:How do I remove phantom entries in Add/Remove Programs?

See Removing Invalid entries from Add/Remove: http://windowsxp.mvps.org/AddRemove.htm

Read other 2 answers
RELEVANCY SCORE 52.4

Steps to reproduce:

1. Create a basic form with an input element for email
2. Add autocomplete attribute with value "email" and name attribute with some random value (not email).
3. When filling this form, autocomplete doesn't work(no previously used values of emails are listed).


Actual results:

No previously filled values of email are listed even though we have provided autocomplete attribute as email.


Expected results:

Previously used values of emails should have been listed as we have provided the autocomplete attribute as email.

Read other answers
RELEVANCY SCORE 52

I have a question regarding using the Auto Complete function in IE 5.5; it does not work as auto saving forms, user name, and password even I had selected as:
Tools-->Internet Options-->Content-->Auto Complete, and I had checked all of the following four options:

Web addresses
Forms
User names and password on forms
Promt me to save passwords

nonetheless, it still does not work properly, please provide assistance.

Another problem which I have is that when I using Outlook Express to check my email acctouts, it still needs me to type in password every time I log in even thou I marked as "remember password"; and I have done my account seeting as:
Tools-->Accounts-->Account-->Properties-->Server-->Password-->Remember Password-->Apply

Please provide assistance to my email address at: [email protected]
Thank you very much!

Willow

Note: My computer system is SONY VAIO PCG-SR5KCinstalled with windows 2000 Professionaland Win NT.

 

A:Solved: Internet Explorer AutoComplete

Read other 9 answers
RELEVANCY SCORE 52

Hello,

I'm running Windows XP, IE7, Service Pack 3, with latest updates(excluding IE8). I want to disable AutoComplete from address bar. Ive tried the following techniques without luck:
Tools>Internet Options>Content>AutoComplete Settings, and unchecked all boxes
Tools>Internet Options>General>Browsing History>Delete>Delete All
Tools>Internet Options>General>Browsing History Settings>Days to keep history:0
Tools>Internet Options>Advanced>Use Inline AutoComplete unchecked
Tools>Internet Options>General>Browsing History>Delete All
Restarted computer after all these settings

It shouldn't be that hard. I've done it before using same techniques. Why a registry hack for such thing?

Any help is greatly appreciated.

A:internet explorer 7 not disabling autocomplete

Anyone there????

Read other 2 answers
RELEVANCY SCORE 52

Hey all. for some reason I have lost the autocomplete feature in forms and user names (not in web addresses it seems) in IE7 since I reformatted my pc.

My options are set for autcompletion and I reset IE7 and that didnt work either...

I have used Registry Mechanic AND Regcure since reformatting and I wonder if they didnt delete any registryu keys related to this issue.


Any help would be greatly appreciated!

Read other answers
RELEVANCY SCORE 50.8

I am running windows vista basic and internet explorer 8. I have tried multiple times to clear my browsing history using both the "safety" and "tools" drop down menu in internet explorer. The history under the "favorites" icon clears, but the history and autocomplete in the address bar does not unfortunately delete. I have tried to delete each item in the address bar separately, but every time I load internet explorer, the history is still there. I have tried to reset the internet explorer settings under the advanced tab, and I have also tried to reset the history under "control panels." I have tried to delete the autocomplete history under the content tab and the sites remain. I tried running CCleaner and am still having the same problem. The history is cleared, but the address bar with autocomplete stills shows the browsing history. I have run multiple antivirus and malware scans on my computer using AdAware, superantispyware, defender, symantec, and malware bytes. The only thing that came up was superantispyware detected "rootkit.agent/gen_local." I deleted this from my system yet the problem remains. I have also tried to go under the registry HKEY_CURRENT_USER\software\microsoft\internet explorer\typed URLs but no files show up to delete individually. Any thoughts? Thanks

A:internet explorer 8 autocomplete address bar history not clearing

Hi elliott05,Very sorry, you slipped through the cracks. Did you rerun SuperAntiSpyware to make sure it comes up clean? If not, please do that using the following settings for the scan. They are slightly different than the default settings.Double-click SUPERAntiSypware.exe to launch the program.If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from SAS updates. Double-click on the hyperlink for Download Installer and save SASDEFINITIONS.EXE to your desktop. Then double-click on SASDEFINITIONS.EXE to install the definitions.)Click the "Close" button to leave the control center screen and exit the program.Do not run a scan just yet.
In the Main Menu, click the Preferences... button.Click the "General and Startup" tab, and under Start-up Options, make sure "Start SUPERAntiSpyware when Windows starts" box is unchecked.Click the "Scanning Control" tab, and under Scanner Options, make sure the following are checked (leave all others unchecked):
* Under Scanner Options make sure that only the following are Unchecked ( make sure all others are checked ):Scan only known file typesScan for tracking cookiesDisplay scan option in Explorer context (right click) menuTerminate memory threats before quarantining.Click the "Close" button ... Read more

Read other 8 answers
RELEVANCY SCORE 49.6

I have two new entries in my HJT log that I cannot get rid of. I did a regedit, and they aren't even where they say they are. And I disabled and cleared my restore files, did a safemode and Hijack This, and still no luck. At least I was finally able to delete mxtarget.dll. For now, at any rate.
I have a couple of questions. First, I just downloaded SpywareBlaster, and I'm totally unable to find where one selects and "kills" anything. Could someone explain. It's about the simplest program I've seen, but I can't do what the post on this forum says I should be doing. I even downloaded the newest files.

Here are two of the HJT entries that I have had no luck eliminating. Any thoughts would be greatly appreciated-
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
And here are three entries that I don't remember seeing before. I'm just curious if they are entries I should keep or not-
O4 - HKLM\..\Run: [cbwau] C:\WINDOWS\cbwau.exe
O4 - HKLM\..\Run: [caxnyasuocog] C:\WINDOWS\System32\dibkng.exe
O4 - HKLM\..\Run: [srcpp32] C:\WINDOWS\srcpp32.exe

Other than that, I've pretty much cleaned up most of the mess. I don't know if I need to include more info, or not.
Thanks!
 

Read other answers
RELEVANCY SCORE 49.6

I followed your excellent instructions and was successful at cleaning my computer except for the two 'F2' log entries shown below in the HijackThis log. I read your tutorial and understand that these values are getting reloaded from IniFileMapping. As soon as I delete them with RegEdit or Reged32, the values mysteriously get reloaded. I cannot find anywhere else in my Registry or on my harddrives where they are getting reloaded from. I cannot get beyond this point. Here are the two entries, and the complete log is below.F2 - REG:system.ini: Shell=Explorer.exe, C:\WINNT\system32\uxcva.exeF2 - REG:system.ini: UserInit=C:\WINNT\SYSTEM32\Userinit.exe,gsjalgp.exeI am trying to remove the 'C:\WINNT\system32\uxcva.exe' and 'gsjalgp.exe'.Please help! TIA.Logfile of HijackThis v1.99.1Scan saved at 1:23:54 PM, on 5/12/2006Platform: Windows 2000 SP4 (WinNT 5.00.2195)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINNT\System32\smss.exeC:\WINNT\system32\winlogon.exeC:\WINNT\system32\services.exeC:\WINNT\system32\lsass.exeC:\WINNT\system32\svchost.exeC:\WINNT\system32\spoolsv.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\Program Files\Cisco Systems\VPN Client\cvpnd.exeC:\WINNT\System32\svchost.exeC:\WINNT\system32\hidserv.exeC:\Pro... Read more

A:How Can I Remove These 'f2' Entries?

Hello,Download Brute Force Uninstaller to your C:\Unzip it to a folder of its own (C:\BFU). So the BFU-folder should be on your root. In most cases this is C:\Download qoofix.bat (rightclick on this link and choose save as)Place qoofix.bat in your C:\BFU - folder. (Important!)Doubleclick qooFix.bat, Close all browsers and explorer folders.Choose option 1 (Qoolfix autofix) and follow the prompts.Please be patient, it will take about five minutes.After the PC has restarted please post another hijackthis log.

Read other 6 answers
RELEVANCY SCORE 49.6

I've got a couple of entries in add/remove that don't facilitate an automatic uninstallation...

I've allready deleted their entries from HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall but to no avail.

I've also tried differnet programs but they don't list the programs in their list of removable programs.

They include:
CC_ccStart
ccCommon
MSRedist
Norton Antivirus Parent MSI
Norton Cleansweep
Norton Password Manager
Norton Utilities
NSW_DRM_COLLECTION
Symantec Script Blocking Installer
Symnet
WebFldrs XP

Would a simple reinstall of Norton System Works work?
 

A:Add/Remove Entries

Read other 6 answers
RELEVANCY SCORE 49.6

Hi. I was wondering if someone could take a look at my HJT log. My PC is running really sluggish lately. I see a few entries that look fishy. Especially:

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*

Thanks in advance for any info.

Logfile of HijackThis v1.99.1
Scan saved at 10:58:46 AM, on 3/17/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\CTHELPER.EXE
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\$ISR\$APP\ISRMonitor.exe
C:\Program Files\Common Files\AOL\1141669116\ee\AOLSoftware.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\Program Files\APC\APC PowerChute Personal Editi... Read more

A:Can I remove O9 & O11 entries in my HJT log?

Read other 8 answers
RELEVANCY SCORE 49.2

I have used malaware bytes, superanti-spyware, spybot S&D, trendmicro housecall. Please help.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 05:14:20, on 9/13/2009Platform: Windows Vista SP2 (WinNT 6.00.1906)MSIE: Internet Explorer v8.00 (8.00.6001.18813)Boot mode: NormalRunning processes:C:\Users\User\Program Files (x86)\DNA\btdna.exeE:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exeE:\Program Files (x86)\SUPERAntiSpyware\SUPERANTISPYWARE.EXEC:\Program Files (x86)\Hewlett-Packard\OrderReminder\OrderReminder.exeE:\Program Files (x86)\I-Tunes\iTunesHelper.exeE:\Program Files (x86)\Mozilla Firefox 3.5 Beta 4\firefox.exeC:\Windows\Hijack This\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Ex... Read more

A:Infected Can't remove R0 entries

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 49.2

I have a bunch of odd entries and cant figure out what they are from and Im wondering if Im infected with something. Any help would be great. Im posting a log file from HijackThis. I am running Vista Ultimate 64BitLogfile of Trend Micro HijackThis v2.0.2Scan saved at 1:34:06 AM, on 10/16/2009Platform: Windows Vista SP2 (WinNT 6.00.1906)MSIE: Internet Explorer v8.00 (8.00.6001.18828)Boot mode: NormalRunning processes:C:\Windows\SysWOW64\rundll32.exeC:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exeC:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exeC:\Program Files\Alwil Software\Avast4\ashDisp.exeC:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exeC:\Program Files (x86)\iTunes\iTunesHelper.exeC:\Program Files (x86)\Java\jre6\bin\jusched.exeC:\Program Files (x86)\Secunia\PSI\psi.exeC:\Program Files\Logitech\SetPoint\x86\SetPoint32.exeC:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exeC:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exeC:\Program Files (x86)\Trillian\trillian.exeC:\Program Files (x86)\Internet Explorer\iexplore.exeC:\Program Files (x86)\Internet Explorer\iexplore.exeC:\Users\John E. Phillips\Desktop\HiJackTh... Read more

A:Odd entries in Add Remove Programs

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.??If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine.??Please perform the following scan:Download DDS by sUBs from one of the following links.??Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool.??No input is needed, the scan is running.Notepad will open with the results.Follo... Read more

Read other 2 answers
RELEVANCY SCORE 49.2

I had been using WMP 6.4. Decided to try Version 7. Uninstalled and checked out Version 9. Wish I hadn't done either. I don't care for the extra features they added and should have just stayed with 6.4.

After searching, I've learned that those newer versions added lots of registry entry's that do not get removed with Add/Remove Programs.

When I run Spybot S&D, I still see entry's about Media Player and SDK. I have Win98SE, use Norton Windoctor and JV16 Powertools.

Is there a tool or guide to remove leftover WMP registry entries before putting 6.4 back on? I had deleted 6.4 from Explorer and ran the above before installing the other versions. I also have the Alternative versions, but need WMP for streaming.
 

A:Remove leftover WMP reg entries

Read other 8 answers
RELEVANCY SCORE 49.2

Every time I try to remove the "023" entries they come back. Also having problems assigning file permissions but do not know if that is related. See log below:
Logfile of HijackThis v1.99.1
Scan saved at 1:02:46 PM, on 11/28/2011
Platform: Unknown Windows (WinNT 6.01.3505 SP1) Note: This is win7 64bit
MSIE: Internet Explorer v9.00 (9.00.8112.16421)

Running processes:
C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe
C:\Users\admin\Desktop\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.... Read more

A:Cannot remove 023 entries with HiJackThis

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.===The HijackThis tool is not ready for the 64 bit operating system. In your case I need to see a DDS Log.I would remove HijackThis using the Add/Remove Programs list.DO NOT TRY TO REMOVE ANY DRIVERS UNTIL I HAVE HAD A CHANCE TO REVIEW THE FOLLOWING LOG.Please download and run this DDS Scanning Tool. Nothing will be deleted. It will just give me some additional information about your system.Download DDS and save it to your desktop from here or here.Disable any script blocker, and then double click dds.scr to run the tool. When done, DDS will open two (2) logs: DDS.txt Attach.txtSave both reports to your desktop.Please just paste the contents of the DDS.txt log in your next post.===Third party programs if not up to date can be the cause infiltration of an infection.Please run this security check for my review.Download Security Check by screen317 from here.Save it to your Desktop.Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.A Notepad document should open automatically called checkup.txt; please post the contents of that document.===Please post the logs and let me know what problem persists.

Read other 2 answers
RELEVANCY SCORE 49.2

i am using Regseeker to clean my registry database.
running the installed applications utility (invalid add/remove entries) i am getting a list of apps wich shoud be invalid.
in fact the list of applications is different of the add/remove programs (start ==> control panel ==> add/remove programs) list. examples of invalid applications are:
msi30-beta1
msi30-beta2
any kbxxxxx entries
iedata etc. etc..
i am looking to realize what those entries are, ...
searching the google was not really helpful..
does exists criteria to decide wich of them are save to delete?

Thank you in advance
pippocavalieri

_____________________________
Intel® Pentium® 4 CPU 2.40GHz
Windows XP (Professional) Service Pack 2

A:Invalid "add/remove" Entries

[quote name='pippocavalieri' date='Feb 8 2007, 02:15 PM' post='447033']msi30-beta1msi30-beta2any kbxxxxx entriesiedata etc. etc..[/qoute]msi30-xxx these are microsoft installer utility beta's, probably safe to delete.anything that starts with KB and ends in a number are hotfixes don't do anything with themiedata sounds pretty self explanatory to me internet exploder something or other

Read other 7 answers
RELEVANCY SCORE 49.2

Hi,Please find below my HJT log. It has 5 Asksbar entries. Basically everytime I start my computer there are 3 command prompts which start and activate some service on my computer. I have tried to run spybot, avast, avg etc on my computer and none of them seem to be able to delete the service. then I installed HJT and when I ran the scan it gave me 5 entries of AsksBar. But after I check them and say fix them they are removed. But next time I run the same scan they reappear. Please help me resolve the problem.Please find below the HJT log.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 2:10:10 AM, on 12/17/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\system32\ZCfgSvc.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\Spybot - Search & Destroy\TeaTimer.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Commo... Read more

A:How to remove ASKSBar entries

Hi,

I am still awaiting some help with regard to this topic. If anyone has any suggestions/solutions I will highly appreciate it.

Regards,
Anand

Read other 3 answers
RELEVANCY SCORE 49.2

After using the trial version of Adobe Photoshop CS2 for a few days and deciding I didn't like it, I tried to uninstall it, but I kept getting an error message about the uninstall wizard not working and being unable to uninstall it. I wound up manually deleting its folders from the C:\Program Files\Adobe folder and deleting its entries from the registry, including the "Uninstall" sub-menu. After rebooting, I discovered that the following entries were still present in the Add/Remove Programs list:

Adobe Bridge 1.0
*Adobe Help Center 1.0
*Adobe Photoshop CS2
*Adobe Stock Photos 1.0
Adobe Common File Installer

I went back into the registry and did an Edit - Find on each entry until no more were found. After rebooting again and checking the Add/Remove Programs list, the 3 entries marked with an asterisk were still present.

I have no idea how to get rid of them. Don't ask me to try using a registry cleaner because I've already used 2 of them.

I'm using Windows XP SP2.

----------------------------------------------------------------
 

A:Can't Get Rid Of Some Add/Remove Program Entries

You said that you checked the registry HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows\ CurrentVersion\ Uninstall, but did you check the values in the curly brackets instead of just by keys?
 

Read other 2 answers
RELEVANCY SCORE 49.2

Hi all

My problem is the Windows Explorer Search bar, which is to find in the upper right corner of every Explorer Window (BTW, my OS is Windows 7 home premium SP1).

This image url example.png - directupload.net explaines my question with one quick view

The WindowsExplorer search bar provides a Choice for only the latest 3 search terms, typed in, for a lookup, recently. These 3 terms show up as a list, in the moment you start to type-in a term. Problem is, you NEVER see more than only the latest 3 search terms. Every newly entered search term would overwrite one of the latest 3 terms.

It would help strongly if I could rely on, say, the latest 10 (recently used) search terms.

Is there a way to expand the Explorer list (of recently used terms), to a higher count?

Big Thank you in Advance.
Bramble

A:Expanding "recent Entries" within Windows Explorer Search bar

First we need to be sure that you can get 10 searches.... do you know for sure you can

Read other 5 answers
RELEVANCY SCORE 48.4

Hi to everyone. This is a friends computer, it is a new e machine P4 1 gig ram 120mb hd, running XP home. He had someone else set this machine up and just to let you know, they went ahead and installed this trial Norton security suite, with Norton Firewall that came pre installed on the computer. Nothing else security wise was put on the machine, so I went ahead, and installed Spybot(updated). When I ran Spybot, it preticked two registry entries to be removed, they were: Windows Security Center. Anti virus Diable Notify , and Windows Security Center. Firewall Disable Notify. Well, since these items were preticked by Spybot, I went ahead and quarantined them. I have seen nothing wrong with the comp, it seems to be running ok, but just wanted to make sure I had not done something wrong. Thanks in advance for any thoughts/ideas.

Regards
IMP49
 

A:Spybot to remove 2 registry entries in XP

These are just warnings that the Security Center alerts that would normally warn you if your anti-virus and firewall have been turned off or disabled for any reason, have been unchecked so that they do not warn you.

If you chose not to be alerted and turned those things off in the Security Center intentionally, then you can put these on ignore.
Otherwise, something or someone has changed those settings and that should be investigated further.

You will find them under the Security Center in the Control Panel.
On the left-hand side, you will see five options.
Click on the last one Change the way security center alerts me and you will find three choices there.
If there are no check marks in the boxes then that means that the alerts have been turned off.
 

Read other 3 answers
RELEVANCY SCORE 48.4

win 8
I've tried to remove what I think the offending entries are in hijackthis but as soon as I click repair the hijackthis window goes blank, then when another scan is done the entries are back.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:44:27 AM, on 11/12/2012
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.16384)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Pantone\hueyPRO\hueyPROTray.exe
C:\Program Files (x86)\Stardock\ObjectDock\ObjectDock.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Mark\Desktop\Maintenance\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.avg.com/?cid={BD4D271C-BD79-4C40-850E-842416CA5C57}&mid=b95a67cd6cde47d1ac77d15586709506-8ac301be07dbc1859ac06b594497b096677e3079&lang=en&ds=tt014&pr=sa&d=&v=&sap=hp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW6... Read more

A:Hijackthis can't remove registry entries

Hello and welcome to TSF.

HijackThis is no longer the preferred initial analysis tool in this forum.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/secu...oval-help.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 48.4

Uninstalled Norton from my compter, can I remove the Norton/Symantec from HJT? Also, have unticked Norton items in startup I would like to get rid of..

Logfile of HijackThis v1.99.1
Scan saved at 12:32:40 PM, on 8/26/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\MY DOCUMENTS\HIJACKTHIS\FEB 20, 2005 HIJACKTHIS.EXE

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - (no file)
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [EM_EXEC] c:\mouse\system\em_exec.exe
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [mdac_runonce] C:\WINDOWS\SYSTEM\runo... Read more

A:Solved: Can I remove these Norton entries from HJT?

Read other 13 answers
RELEVANCY SCORE 48.4

Hello all, I recently went into my regestry and following some instructions on the internet, tried to remove some useless entries from Add or Remove Programs. Well, I've had a couple of problems, because for some of the entries I did not delete the folder, just the display name. After I realized that the entries were still there, I went back into my registry to find the folders and delete them, but no cigar. None of the folders are named after the program and none of the folders have a display name or something that might indicate that the program strings are there. Any help? Thanks
 

A:Removing Add/Remove Programs Entries?

Read other 11 answers
RELEVANCY SCORE 48.4

SP2, XP Pro. Safely installed and stable now after a few minor gliches. Went to Add/Remove and none of the long list of Hotfixes is there anymore, just SP2. Reg Seeker seems to be listing all of them for removal. Glad to do so, but wanted to check here before doing so. Is it safe to eliminate the registry entries for the "old" Hotfixes?
 

A:After SP2; Hotfix reg entries. Remove safely?

Bump.
 

Read other 2 answers
RELEVANCY SCORE 48.4

how to remove orphanage registry entries in registry.
i could not remove commodo antivirus and avira registry values which i used once.
 

A:remove orphanage registry entries

Read other 14 answers
RELEVANCY SCORE 48.4

Hi,

I've 2 computers that seem to be affected with the same virus(s). I've tried to remove what I think the offending entries are in hijackthis but as soon as I click repair the hijackthis window goes blank, then when another scan is done the entries are back.

I've also tried deleting the entry through the registry, then when I refresh the screen it's back again!!

Tried in safe mode, same problem. Can anyone help?

Logfile of HijackThis v1.99.1
Scan saved at 5:02:53 PM, on 11/01/2007
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\Winnt\System32\smss.exe
C:\Winnt\system32\winlogon.exe
C:\Winnt\system32\services.exe
C:\Winnt\system32\lsass.exe
C:\Winnt\system32\svchost.exe
C:\Winnt\system32\svchost.exe
C:\Winnt\system32\spoolsv.exe
C:\Program Files\CanoBureau Workgroup\Program\BtrKernel.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\CanoBureau Workgroup\Program\W32MKDE.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Winnt\system32\svchost.exe
C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
C:\Winnt\system32\regsvc.exe
C:\Winnt\system32\MSTask.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Winnt\system32\stisvc.exe
C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
C:\Winnt\System32\WBEM\WinMgmt.exe
C:\Winnt\system32\svchost.exe
C:\Program Files\CanoBureau Workgroup\Program\Tsscdl.exe
C:\Winnt\Explorer.EXE
C:\Program Files\... Read more

A:Hijackthis can't remove registry entries

Can't seem to edit post.

Updated detail. Whenever the PC is restarted Trend antivirus reports about 8 viruses found. I don't have access to the PC so will update virus details as soon as I do.

My other thread (for another PC with same problem) - http://www.techsupportforum.com/secu...fected-pc.html

Read other 2 answers
RELEVANCY SCORE 48.4

Hello to all! New to bleepingcomputer and have similar issue as jason1029 . I have the following entries present as well and am unable to delete with Hijack This;O1 - Hosts: ::1 localhost O13 - Gopher Prefix: When Hijack This Do System Scan Only is selected, the following message is received; For some reason your system denied write access to the Hosts file. If any hijacked domains are in this file, Hijack This may NOT be able to fix this. C:\Windows\System32\drivers\etc\hostsOperating system is Vista Ultimate SP 2 (64-bit)Currently have the following malware programs installed;Norton 360 Version 2.0Trend Micro Internet Security & Trend Micro Hijack This v2.02MalwarebytesI've included Hijack log as well;Logfile of Trend Micro HijackThis v2.0.2Scan saved at 2:19:50 PM, on 12/6/2009Platform: Windows Vista SP2 (WinNT 6.00.1906)MSIE: Internet Explorer v7.00 (7.00.6002.18005)Boot mode: NormalRunning processes:C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exeC:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exeC:\Program Files (x86)\DigitalPersona\Bin\DpAgent.exeC:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exeC:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exeC:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exeC:\Program Files (x86)\Hewlett-P... Read more

A:UNABLE TO REMOVE SUSPICIOUS ENTRIES

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool. No input is needed, the scan is running.Notepad will open with the results.Follo... Read more

Read other 12 answers