1
   

Is "Twain tech" somehow related to yahoo messenger?

 
 
Reply Tue 17 Aug, 2004 03:42 pm
I downloaded lavasoft and it detected a whole buncha stuff... earlier today, I used NoAdware and it detected that among others... Anyhoo, I decided to "quarantine" the 1st on the lavasoft list, and then got scared and tried to back out of it... and now my yahoo messenger bar announcing new email has lines all through it. Sad

HELP!

I started out only wanting to make my computer run faster (it's been getting slower) and then my printer stopped working (may or may not be related...) And now, and now... Question
  • Topic Stats
  • Top Replies
  • Link to this Topic
Type: Discussion • Score: 1 • Views: 1,134 • Replies: 1
No top replies

 
Cyanure
 
  1  
Reply Tue 17 Aug, 2004 04:10 pm
Twain-Tech adware is the Trojan.Win32.Keyhost.e

I suppose that you use XP and your drive letter is (C):


1- Use ADD/REMOVE in Control Panel to remove it.

In the absence of an entry in ADD/REMOVE PROGRAMS then do the following:

To permanently disable the software click Start/Run and then type
regsvr32 c:\windows\twaintec.dll

To completely remove the software: reboot in Safe Mode and then use Search and find and delete the file mxtarget.dll.

2- Unregister these dll files:
Click Start/Run and type:
regsvr32 c:\windows\system32\mxtarget.dll (then press OK)
regsvr32 c:\windows\system32\twaintec.dll (then press OK)
regsvr32 c:\windows\system\twaintec.dll (then press OK)
regsvr32 c:\windows\system\mxtarget.dll (then press OK)

Now reboot your PC

3- Remove these registry entries if they exist using regedit in Start\Run:

HKEY_CLASSES_ROOT\clsid\{000020dd-c72e-4113-af77-dd56626c6c42}

HKEY_CLASSES_ROOT\clsid\{0000607d-d204-42c7-8e46-216055bf9918}

HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{000020dd-c72e-4113-af77-dd56626c6c42}

HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{0000607d-d204-42c7-8e46-216055bf9918}

HKEY_LOCAL_MACHINE\clsid\{000020dd-c72e-4113-af77-dd56626c6c42}

HKEY_LOCAL_MACHINE\clsid\{0000607d-d204-42c7-8e46-216055bf9918}

HKEY_LOCAL_MACHINE\software\classes\clsid\{000020dd-c72e-4113-af77-dd56626c6c42}

HKEY_LOCAL_MACHINE\software\classes\clsid\{0000607d-d204-42c7-8e46-216055bf9918}

HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{000020dd-c72e-4113-af77-dd56626c6c42}

HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{0000607d-d204-42c7-8e46-216055bf9918}


Now reboot your PC
(Please backup your Registry before deleting any entry in case you commit an error: click Sart/Run and type regedit. click File/Export and then type a file name and click Save).

4- Search and remove these files if present:
c:\windows\system32\mxtarget.dll
c:\windows\system32\twaintec.dll
c:\windows\system\mxtarget.dll
c:\windows\system\twaintec.dll
c:\windows\twaintec.dll

VoilĂ !!!
0 Replies
 
 

Related Topics

Clone of Micosoft Office - Question by Advocate
Do You Turn Off Your Computer at Night? - Discussion by Phoenix32890
The "Death" of the Computer Mouse - Discussion by Phoenix32890
Windows 10... - Discussion by Region Philbis
Surface Pro 3: What do you think? - Question by neologist
Windows 8 tips thread - Discussion by Wilso
GOOGLE CHROME - Question by Setanta
.Net and Firefox... - Discussion by gungasnake
Hacking a computer and remote access - Discussion by trying2learn
 
  1. Forums
  2. » Is "Twain tech" somehow related to yahoo messenger?
Copyright © 2024 MadLab, LLC :: Terms of Service :: Privacy Policy :: Page generated in 0.03 seconds on 04/18/2024 at 09:28:54