How to remove spyware-added link in Tools menu ?

[Guest]

Hi experts,

I found a additional link under the Tools menu on my IE which must have been
added by a spyware/adware during my visit to a web site. I can't find the
name in the registry. How do I remove it ?

My spec:
IE 6.0.2800.1106
SP1; Q837009; Q832894; Q831167; Q823353; Q867801; Q833989

 

[Ron Bogart]

In

Hi experts,

I found a additional link under the Tools menu on my IE which must
have been added by a spyware/adware during my visit to a web site. I
can't find the name in the registry. How do I remove it ?

My spec:
IE 6.0.2800.1106
SP1; Q837009; Q832894; Q831167; Q823353; Q867801; Q833989

What does it say on this "additional" link?

 

[Guest]

I didn't click on the link. The words are of unicode characters, sitting just
below ICQ and Yahoo! Messenger links.
A search on ICQ and Yahoo! Messenger in the registry shows them under
local_machine\software\microsoft\IE\extensions\some numbers. The ad link is
under a folder with a different number. I don't know if it is safe to just
remove the whole folder.

 

[Alan Edwards]

Try again.

Use Regedit.exe and remove the item. It should be under here:

HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions

....Alan

 

[Guest]

Thanks for the reply.
Is it safe to remove the whole folder ?

 

[Alan Edwards]

That depends what you mean by the "whole folder".
You can certainly remove the key that the spyware put in.
If in any doubt, either supply full details of the key concerned or
export it first for safety.
You can export the key by ensuring the highlight is on the key in the
left-hand pane and using the menu option, Registry-Export.
The export is probably only a dozen lines, so you can copy and paste
the contents here if you need a second opinion.

....Alan

--
Alan Edwards, MS MVP W95/98 Systems
http://dts-l.org/index.html


In microsoft.public.windows.inetexplorer.ie6.browser, LTKhoo

 

[Guest]

Thanks. I'll backup the whole registry.

That depends what you mean by the "whole folder".
You can certainly remove the key that the spyware put in.
If in any doubt, either supply full details of the key concerned or
export it first for safety.
You can export the key by ensuring the highlight is on the key in the
left-hand pane and using the menu option, Registry-Export.
The export is probably only a dozen lines, so you can copy and paste
the contents here if you need a second opinion.

....Alan

--
Alan Edwards, MS MVP W95/98 Systems
http://dts-l.org/index.html


In microsoft.public.windows.inetexplorer.ie6.browser, LTKhoo

 

[Alan Edwards]

You can do that but it is an overkill and it depends on how you back
it up.
Export the key just before you delete it. That should be enough
backup.

....Alan