I have a program or software,I think, called KeenValue or eUniverse that
automatically opens on start up. It causes very slow start up and several
error reportings to be sent to Microsoft. Norton and Spybot will not remove
it nor will add or remove programs. According to Microsoft, it was created
by eUniverse.com and is a browser hijack virus. I have a 5100 Inspiration
with Windows XP. Please, how do I get rid of this thing? Thanks
You should be able to check if the registry keys shown above are
running on your system, and try renaming the dll and executable as
shown above if you have them.
It might be worth running HijackThis and get a list of what runs when
you boot up - you may be able to deactivate it from there, and
following a reboot, delete the affected files (the odds are you won't
be able to the first time around as they'll be in use)
You can download HijackThis from http://www.hijackthis.de and you can
also paste the results ("save to logfile" option) into a form on the
same site for some indicative ideas on what you should be wary of.
Take the results with a pinch of salt though, as it doesn't know every
application on every machine that may be legit.
Colin; Thanks for info. Haven't got rid of it yet,but by going to
Hijackthis and espec. Spyware/Remove-eUniverse I now know what the
Hijacker/Adware is. I'll keep messing with it Thanks
"Colin Wilson" <REMOVEEVERYTHINGBUTnewsgroup@phoenixbbsZEROSPAM.c o.uk> wrote
in message news:MPG.20c13f3da8ac6db498a0db@news.individual.ne t...
>> I have a program or software,I think, called KeenValue or eUniverse that
>> automatically opens on start up.
>
> Per http://vil.nai.com/vil/content/v_101035.htm
>
> -----
> This program is detected as Adware-eUniverse. It is not a virus nor a
> trojan.
>
> When the Adware program is installed, the following registry keys will
> be found:
>
> * HKEY_LOCAL_MACHINE\Software\eUniverse\BHO\HomePage
> "DefaultIEHomePage" http://www.incredifind.com
> * HKEY_LOCAL_MACHINE\Software\eUniverse\BHO\Redirect URLS "404"
> http://www.incredifind.com/index.cfm...gauif&Keywords
> =
> * HKEY_LOCAL_MACHINE\Software\eUniverse\BHO\Redirect URLS
> "DNSNotFound" http://www.incredifind.com/index.cfm?
> action=lookup&pc=fgauif&Keywords =
> * HKEY_LOCAL_MACHINE\Software\eUniverse\BHO\Redirect URLS
> "URLTranslation" http://www.incredifind.com/index.cfm?
> action=lookup&pc=fgauif&Keywords =
>
> The following files and folders found:
>
> * c:\Program Files\IncrediFind\BHO\BHO.dll
> * c:\Program Files\IncrediFind\BHO\tipb.exe
> -----
>
> You should be able to check if the registry keys shown above are
> running on your system, and try renaming the dll and executable as
> shown above if you have them.
>
> It might be worth running HijackThis and get a list of what runs when
> you boot up - you may be able to deactivate it from there, and
> following a reboot, delete the affected files (the odds are you won't
> be able to the first time around as they'll be in use)
>
> You can download HijackThis from http://www.hijackthis.de and you can
> also paste the results ("save to logfile" option) into a form on the
> same site for some indicative ideas on what you should be wary of.
> Take the results with a pinch of salt though, as it doesn't know every
> application on every machine that may be legit.
Browser Viruses Help 
Linear Mode
