Webmaster Forum / Browsers / Internet Explorer / August 2003

Bloody browser hijacking parasites.    They are morphing as fast as the
viruses.

Get Ad-Aware and SpyBot Search and Destroy.   Update their reference files
through the on line update functions.    Run AdAware first and get rid of
all that it finds.   You may have to reboot and re-run to get rid of the
items found.

If it is still there then get HijackThis.
http://www.tomcoyote.org/hjt/

Here's how you do it:

Fire up regedit, then navigate to:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar

On the right pane you'll see several entries with hex notation. These
correspond to CLSIDs located in:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID

(also mirrored in:
HKEY_CLASSES_ROOT\CLSID)

It's tedious, but what you wanna do is trace each one to it's respective
entry. We can eliminate one:
{8E718888-423F-11D2-876E-00A0C9082467}

That's the one for "Radio."

Generally, when you click on the entry in CLSID, it'll say what it is in the
left pane. See something evil? Check cout InprocServer32 for it and you'll
find the DLL.

Once you obtain the DLL, track it down (open up the folder). Then, do
Start...Run and type in: regsvr32 /u

Then, you'll wanna drag the DLL from the window into the Run box and click
OK. If it works, it'll say "DllUnregister...succeeded."

Voila!

(Giving fingers a break....)

Hope that helps,

Tim