luhchiahteh Posted August 29, 2005 Share Posted August 29, 2005 hey guys i have a little problem with my IE (well... it's not exactly a problem, but oh well...) so, see the attached picture after installing a program, which i need, it changed a lot of things in my IE, for example, when I click on the right click on my mouse, then it appears a long list of things added by that program and for example, when i put my mouse on a picture, the four little pictures that appear on it have been changed what i want to do is to remove those things when i click on right click on the menu and to return to the original icons when i put my mouse on a picture i suppose it has something to do with registry don't really know how to do it so any help is appreciated thanks guys Link to comment Share on other sites More sharing options...
it_waaznt_me Posted August 29, 2005 Share Posted August 29, 2005 Instead of messing with Windows Registry, I will recommend using HijackThis .. Download and run it .. Click on Do a System Scan Only .. Now when the scan is finished, Check the entries which says 08 Extra Context menu item {The items you want to remove} ... And if you still wanna dirty your hands with Regedit, Here is the location ... : HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt Link to comment Share on other sites More sharing options...
luhchiahteh Posted August 29, 2005 Author Share Posted August 29, 2005 (edited) thanks after doing the system scan only, how do i remove them? check them and click fix checked? about the one when i put my mouse on a picture, to return it to the original icons, how do i do it? thanks edit: the image toolbar, that's what i mean Edited August 29, 2005 by luhchiahteh Link to comment Share on other sites More sharing options...
it_waaznt_me Posted August 30, 2005 Share Posted August 30, 2005 Hmm... Okay .. Post your HijackThis logfile here and we will check what needs to be removed .. And btw .. Are you sure you have checked Add Remove Programs applet .. Try uninstalling the proggy and see if it puts back things to normal ... Link to comment Share on other sites More sharing options...
luhchiahteh Posted August 30, 2005 Author Share Posted August 30, 2005 ok this is the log file click here i tried uninstalling it through Add/Remove Programs but things don't go back to normal, they remain as if the program was installed... anyways, i need the program but don't like those things .... thanks for your help Link to comment Share on other sites More sharing options...
it_waaznt_me Posted August 31, 2005 Share Posted August 31, 2005 Phew .. Lots of crap in your log .. C:\Program Files\Tencent\QQ\QQ.exeC:\Program Files\Tencent\QQ\TIMPlatform.exe First kill these programs from Task Manager .. ( Ctrl Shift Esc and highlight these process and click on End Process) Now run HijackThis again and close All other active programs and windows ... Put a check mark next to these entries and click on Fix Checked: R3 - Default URLSearchHook is missingO2 - BHO: QQBrowserHelperObject Class - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\QQ\QQIEHelper.dll O2 - BHO: (no name) - {8EC179C9-94E1-4136-BF0C-55BF7ABED054} - (no file) O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file) O3 - Toolbar: (no name) - {44BE0690-5429-47f0-85BB-3FFD8020233E} - (no file) O4 - HKLM\..\Run: [script] C:\Program Files\KKman\script\kkscript.exe O8 - Extra context menu item: Add to QQ Customized Panel - C:\Program Files\Tencent\QQ\AddPanel.htm O8 - Extra context menu item: Add to QQ Emoticons - C:\Program Files\Tencent\QQ\AddEmotion.htm O8 - Extra context menu item: Send picture by MMS - C:\Program Files\Tencent\QQ\SendMMS.htm O8 - Extra context menu item: Send the Picture by QQ MMS - C:\Program Files\Tencent\QQ\SendMMS.htm O8 - Extra context menu item: ?ϥμv???ǰe?a?U?? - C:\Program Files\Xi\NetTransport 2\NTAddLink.html O8 - Extra context menu item: ?ϥμv???ǰe?a?U???????s?? - C:\Program Files\Xi\NetTransport 2\NTAddList.html O8 - Extra context menu item: ???ӵ?QQ???? - C:\Program Files\Tencent\QQ\AddEmotion.htm O8 - Extra context menu item: ???ӵ?QQ?Զ??????? - C:\Program Files\Tencent\QQ\AddPanel.htm O8 - Extra context menu item: ?K?[??QQ?۩w?q???O - C:\Program Files\Tencent\QQ\AddPanel.htm O8 - Extra context menu item: ?K?[??QQ?۩w?q???? - C:\Program Files\Tencent\QQ\AddPanel.htm O8 - Extra context menu item: ?K?[??QQ? - C:\Program Files\Tencent\QQ\AddEmotion.htm O8 - Extra context menu item: ??QQ?m?H?ǰe?ӹϤ? - C:\Program Files\Tencent\QQ\SendMMS.htm O8 - Extra context menu item: ??QQ?m?H?o?e?ӹϤ? - C:\Program Files\Tencent\QQ\SendMMS.htm O8 - Extra context menu item: ??QQ???ŷ???ͼƬ - C:\Program Files\Tencent\QQ\SendMMS.htm O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE O9 - Extra 'Tools' menuitem: AE?XTQQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll O9 - Extra 'Tools' menuitem: QQiA2E1??sIoEeOA - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll O9 - Extra button: Microsoft AntiSpyware helper - {07826B38-DAC2-47C8-A783-2860C3F23D68} - (no file) (HKCU) O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {07826B38-DAC2-47C8-A783-2860C3F23D68} - (no file) (HKCU) O9 - Extra button: Microsoft AntiSpyware helper - {323821EE-DFE5-41F7-A8FA-C8CFF5FB3FD4} - (no file) (HKCU) O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {323821EE-DFE5-41F7-A8FA-C8CFF5FB3FD4} - (no file) (HKCU) O9 - Extra button: Microsoft AntiSpyware helper - {4D54F0A4-194A-4B48-AF7C-9F3D4E0AB40F} - (no file) (HKCU) O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {4D54F0A4-194A-4B48-AF7C-9F3D4E0AB40F} - (no file) (HKCU) O9 - Extra button: Microsoft AntiSpyware helper - {4D904C17-BACA-4F89-928D-C0E42CA8E349} - (no file) (HKCU) O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {4D904C17-BACA-4F89-928D-C0E42CA8E349} - (no file) (HKCU) O15 - Trusted Zone: *.skoobidoo.com O15 - Trusted Zone: *.slotchbar.com O15 - Trusted Zone: *.windupdates.com O15 - Trusted Zone: *.skoobidoo.com (HKLM) O15 - Trusted Zone: *.slotchbar.com (HKLM) O15 - Trusted Zone: *.windupdates.com (HKLM) O15 - Trusted IP range: 67.19.185.246 O16 - DPF: {00000000-0000-0000-0000-000020040000} - http://207.234.185.217/ABoxInst_int5.exe O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/MediaAcc...e/bridge-c7.cab O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwe...up1.0.0.8-2.exe O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540006} - O16 - DPF: {3D8F74EE-8692-4F8F-B8D2-7522E732519E} (WebActivater Control) - http://game.qq.com/QQGame2.cab O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) - http://www.miniclip.com/ricochet/ReflexiveWebGameLoader.cab O16 - DPF: {511F9316-771B-4953-A268-1C36DA667FE9} (SponsorAdulto Class) - http://ip.sponsoradulto.com/cab/2/es/SysWebTelecomInt.cab O16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} (Sinstaller Class) - http://dm.screensavers.com/dm/installers/si/1/sinstaller.cab O16 - DPF: {AD0B8220-7DA4-4C0A-8532-B25A9F631D3D} (VacPro.internazionale_ver10) - http://advnt01.com/dialer/internazionale_ver10.CAB O16 - DPF: {B4831DED-3A57-4CC6-9E4B-0E7C5B08DBF4} - http://www.alwaysupdatednews.com/install/aun_0027.exe O16 - DPF: {C0B285F6-DB2B-4908-9C58-F6D95397D747} - http://www.pacimedia.com/install/pcs_0004.exe O16 - DPF: {D6FCA8ED-4715-43DE-9BD2-2789778A5B09} (NPKCX Control) - http://guard.gunbound.net/nProtect/keyCrypt/npkcx.cab O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing) O23 - Service: ZESOFT - Unknown owner - C:\WINDOWS\zeta.exe (file missing) Restart your system and scan your system with updated virus definitions .. You g:) hell lotta spywares on your system .. Install Spyware Search n Destroy .... After restart, post a fresh log here .. :) Link to comment Share on other sites More sharing options...
Recommended Posts