|
|
|
|
| Author |
Message |
leroy freeland
Guest
|
 Posted: Fri May 25, 2007 11:19 pm Post subject: Browser Viruses Help |
 |
|
I have a program or software,I think, called KeenValue or eUniverse that
automatically opens on start up. It causes very slow start up and several
error reportings to be sent to Microsoft. Norton and Spybot will not remove
it nor will add or remove programs. According to Microsoft, it was created
by eUniverse.com and is a browser hijack virus. I have a 5100 Inspiration
with Windows XP. Please, how do I get rid of this thing? Thanks
--
Leroy Freeland leroyfreeland@earthlink.net |
|
| Back to top |
|
 |
Fix your Windows Problems - FAST.
FREE Safe Scan Registry Check. Locate & Fix Errors in Minutes!
|
|
Colin Wilson
Guest
|
|
| Back to top |
|
|
Colin Wilson
Guest
|
| Posted: Fri May 25, 2007 11:29 pm Post subject: Re: Browser Viruses Help |
|
|
| Quote: | I have a program or software,I think, called KeenValue or eUniverse that
automatically opens on start up.
|
Per http://vil.nai.com/vil/content/v_101035.htm
-----
This program is detected as Adware-eUniverse. It is not a virus nor a
trojan.
When the Adware program is installed, the following registry keys will
be found:
* HKEY_LOCAL_MACHINE\Software\eUniverse\BHO\HomePage
"DefaultIEHomePage" http://www.incredifind.com
* HKEY_LOCAL_MACHINE\Software\eUniverse\BHO\RedirectURLS "404"
http://www.incredifind.com/index.cfm?action=lookup&pc=fgauif&Keywords
=
* HKEY_LOCAL_MACHINE\Software\eUniverse\BHO\RedirectURLS
"DNSNotFound" http://www.incredifind.com/index.cfm?
action=lookup&pc=fgauif&Keywords =
* HKEY_LOCAL_MACHINE\Software\eUniverse\BHO\RedirectURLS
"URLTranslation" http://www.incredifind.com/index.cfm?
action=lookup&pc=fgauif&Keywords =
The following files and folders found:
* c:\Program Files\IncrediFind\BHO\BHO.dll
* c:\Program Files\IncrediFind\BHO\tipb.exe
-----
You should be able to check if the registry keys shown above are
running on your system, and try renaming the dll and executable as
shown above if you have them.
It might be worth running HijackThis and get a list of what runs when
you boot up - you may be able to deactivate it from there, and
following a reboot, delete the affected files (the odds are you won't
be able to the first time around as they'll be in use)
You can download HijackThis from http://www.hijackthis.de and you can
also paste the results ("save to logfile" option) into a form on the
same site for some indicative ideas on what you should be wary of.
Take the results with a pinch of salt though, as it doesn't know every
application on every machine that may be legit. |
|
| Back to top |
|
|
Colin Wilson
Guest
|
| Posted: Fri May 25, 2007 11:30 pm Post subject: Re: Browser Viruses Help |
|
|
| Quote: | I have a program or software,I think, called KeenValue or eUniverse
|
....and again, more useful removal tips...
http://www.spywaredb.com/remove-euniverse-incredifind/
I can paste them elsewhere if you can't access any of the sites, if it
helps :-} (or email the info) |
|
| Back to top |
|
|
|
|
| |
Watched Topics
Search
Register
Log in to check your private messages
Profile
Log in
Memberlist
Usergroups