Hi Scott,
Open Microsoft AntiSpyware and send a suspected spyware
report from the Tools Menu.
Generally, in a case where the item is identified, but not
properly removed, the next steps are:
Empty your IE cache and your other temporary file folders,
eg: c:\temp, c:\windows\temp or C:\Documents and
Settings\<name>\Local Settings\Temp (the path to your temp
folder will change depending on your name) - sometimes
programmes can be hidden in there - watch out for
mysterious *.exe files or *.dll files in those folders.
http://www.mvps.org/winhelp2002/delcache.htm
Open Internet Explorer
Select Tools > Internet Options
In the Temporary Internet Files section, click the Delete
Files button
Check Delete all offline content, and then click OK
Go to IE Tools, Internet Options, Temporary Internet Files
{Settings Button}, View Objects, Downloaded Program Files.
Check for unrecognised objects there.
If you are running SP2, open IE--->Tools--->Manage Add-
ons, and uncheck any BHO's that you don't recognize.
A BHO disabler such as BHO Cop, BHO Demon or BHOCaptor
(non XP SP2 users only)
http://www.pcmag.com/article2/0,4149,270,00.asp
http://www.definitivesolutions.com/bhodemon.htm
http://www.webattack.com/get/bho.shtml
Run this 2 programs in safe mode also
Spybot Search and Destroy. Spybot Search&Destroy
http://www.spybot.info/en/index.html
Lavasoft Ad-Aware.
http://www.lavasoft.com/software/adaware/
1) update both Microsoft Antispyware and your antivirus
application.
2) restart in safe mode by pressing the F8 function key
before the first Windows screen appears at startup.
3) do full deep scans with Microsoft Antispyware. Repeat
scanning until a complete scan comes through clean. Ditto
with the antivirus.
This isn't guaranteed, but it works for a great many items
that at first appear not to be cleaned in normal mode.
INetSpeak Description
INetSpeak is an Internet Explorer browser helper object
that may add a hard-to-remove bar of advertising links
below your standard IE toolbar. INetSpeak may come bundled
with the free file-sharing program Music Magnet, which is
advertised as an upgrade from KaZaa and Morpheus.
www.Music-Magnet.com
INetSpeak Removal Instructions
Before you can delete files, you must first stop all the
INetSpeak processes that are running in memory.
Do this by ending all processes from the Task Manager.
Press CTRL+ALT+DELETE to open the Windows Task Manager. If
you see multiple
"tabs," click on the "Processes" tab. For each process
that you would like
to kill, find the process name in the list, click it to
select it, and click
the "End Process" button.
Delete registry values Instructions:
Open the Windows Registry Editor by clicking on the
Windows "Start" button,
clicking "Run," and typing "regedit" into the box in the
Window that appears. Click "OK".
Once the Registry Editor is open, navigate through the
registry tree to the
location of the key that you wish to delete. When you find
the key or
value to be deleted, click on it to highlight it and press
the "DELETE" key.
Delete Registry Values:
{236826B1-8FDB-4D3C-8F70-E154F874703D}
{2E12B523-3D4C-4FAC-9B04-0376A8F5E879}
{BC0D2038-2DE5-4A6F-92BC-B18A3E0DE32A}
{C389F2CF-26ED-11D5-A212-004005F6FEB6}
{D6862A20-1DD6-11D3-BB7C-444553540000}
Unregister DLL Instructions:
To un-register a DLL file, first locate the file on your
hard drive.
Open a command prompt window by clicking on the
Windows "Start" button,
clicking "Run," and typing "cmd" into the box in the
Window that appears. Click "OK."
Next type "regsvr32 /u " and press the "ENTER" key.
For example, to un-register a file called "myDll.dll"
which is located in
the "C:\windows\system32" folder, your would type
"regsvr32 /u C:\windows\system32\myDll.dll" and press
the "ENTER" key.
Delete File Entries:
windowsie.dll
iexplorr22.dll
iexplorr23.dll
Good luck Scott
Engel
20050807 3:56
