Solved

need help editing the registery

Posted on 2009-05-11
7
239 Views
Last Modified: 2012-05-06
I have scanned sevral times to get rid of spyware but I have one trojan.bho that will not go away.  I looked at it in the registry and tried to delet it and it will not let me delet the folder inside of HKey\CLASS\ROOT\CLSID\ec43e3fd-5c60-46ab-97d7-e0b85dbdd6c4 The folder under it is InprocServer32 and I tried to delet this folder 1st but it will not let me delete either.
0
Comment
Question by:ComputerEnterprises
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 3

Expert Comment

by:sherenian
ID: 24359776
The  "HijackThis" program should allow you to remove the rogue BHO without having to manually edit the registry.  If it won't delete because it is in use then the "MalwareBytes" program should be able to mark it for deletion and get rid of it or atleast kill the process so you can use HijackThis to remove it.
0
 
LVL 50

Expert Comment

by:jcimarron
ID: 24359792
ComputerEnterprises--You can download MalwareBytes from here
http://www.malwarebytes.org/
and
HiJackThis from here
http://www.download.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html   
If you want help in interpreting the HiJackThis log post it here and we will try to assist.
0
 
LVL 92

Expert Comment

by:nobus
ID: 24361899
btw, did you run these ?  very good tools :
     Spybot :        http://www.download.com/3000-8022-10122137.html
     MBAM  :   http://www.malwarebytes.org/mbam.php
http://housecall.trendmicro.com/                                                               online scan for trojans
0
Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

 

Author Comment

by:ComputerEnterprises
ID: 24365041
I have ran them many times in safe mode, regular mode, and also had to attache the hd to another pc to remove enough spyware and viruses to get it to accept each program.  I also ran them from the other pc that already had them installed.  So it is just this one registry entry that I can't remove. Is this entry the one that keeps adding the spyaware?
0
 
LVL 50

Accepted Solution

by:
jcimarron earned 500 total points
ID: 24369900
0
 

Author Closing Comment

by:ComputerEnterprises
ID: 31580347
Not sure if this would have worked but I never thought of this so it is a great idea.  Thank you.
0
 
LVL 50

Expert Comment

by:jcimarron
ID: 24413643
ComputerEnterprises--You are most welcome.
0

Featured Post

Resolve Critical IT Incidents Fast

If your data, services or processes become compromised, your organization can suffer damage in just minutes and how fast you communicate during a major IT incident is everything. Learn how to immediately identify incidents & best practices to resolve them quickly and effectively.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

No single Antivirus application (despite claims by manufacturers) will catch or protect you from all Virus / Malware or Spyware threats. That doesn't stop you from further protecting yourself however - and this article is to show you how.
There are many software programs on offer that will claim to magically speed up your computer. The best advice I can give you is to avoid them like the plague, because they will often cause far more problems than they solve. Try some of these "do it…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question