CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Unwelcome auto-complete in 'Run'-window

 
Post new topic   Reply to topic       All -> FavForums -> Unknown Files [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
Ezra

Cadet
Cadet


Joined: Apr 22, 2004
Posts: 2
Location: Netherlands

PostPosted: Thu Apr 22, 2004 2:39 pm    Post subject: Unwelcome auto-complete in 'Run'-window
Reply with quote

After an invasion of nasty parasites I had a tough time removing all traces of adware, spyware, etc from my PC (OS: Win98SE), but still one stubborn little dropping remains: when I open Start>Run and type just one letter (any letter), some mysterious auto-complete function completes it for me by producing url's I never visited or links I never made, some of which seem OK, but some definitely not. For example: 'a' auto-completes to 'ads.tucows', 'i' to 'icq.ifud.ru', 'd' to 'd.lomulka.ru', 'h' to 'home.tiscali.nl' and 'g' simply to 'g:\', etc. I've already Hijacked-This my register, I've run AdAware, Spybot, Spyhunter, Spyblaster and what not, I've unmarked auto-complete in IE, I've checked my register key HKUsers>...>RunMRU, I've tweaked my system with TweakUI's paranoia... but to no avail. Only getting paranoia myself.

Please your help before I jump.

Back to top
View users profile Send private message
FunBard

Sergeant
Sergeant


Joined: Apr 03, 2004
Posts: 76


PostPosted: Sat Apr 24, 2004 11:10 pm    Post subject:
Reply with quote

This is a Run MRU (most recently used) issue.

You can clear it by right clicking the Start Menu button, then selecting Properties. A "Clear" button should be there allowing you to delete this history. It would also be in your best interests to delete the Internet Explorer History. Start > Control Panel >Internet Options > Clear History button.

If this does not solve your issue, please let us know and someone will have an answer.

Good luck,
FunBard

Back to top
View users profile Send private message Visit posters website
FunBard

Sergeant
Sergeant


Joined: Apr 03, 2004
Posts: 76


PostPosted: Sat Apr 24, 2004 11:16 pm    Post subject:
Reply with quote

Added note, since I cannot edit my previous post:

Delete your cookies and Internet Temporary Files also. This should purge any data that might be held there.

Start > Control Panel > Internet Options > "Delete Cookies" button and also "Delete Files " button (check the offline files box when prompted)

Back to top
View users profile Send private message Visit posters website
Ezra

Cadet
Cadet


Joined: Apr 22, 2004
Posts: 2
Location: Netherlands

PostPosted: Mon Apr 26, 2004 2:02 pm    Post subject:
Reply with quote

Thank you for reacting, Fun Bard, but I already unchecked or deleted everything that might be the source of the problem (cookies, IE history, temp files) - but it's still there. Mind you, it's not only url's the auto-completed windows show, but also drives (typing 'g' for example conjures up gSmile.

Unfortunately I can't follow your first advice and delete MRU history in Start Menu>Properties>Clear: there's no Clear button to click on after Start Menu>Properties in my Windows98SE, only a tab called General.

Any idea where the Start>Run history is stored? Commands like 'regedit' and 'sfc' and 'msconfig'? (I don't mean the directory C:\Windows\Applog).

I'd appreciate your advice.

Back to top
View users profile Send private message
FunBard

Sergeant
Sergeant


Joined: Apr 03, 2004
Posts: 76


PostPosted: Mon Apr 26, 2004 11:13 pm    Post subject:
Reply with quote

I just noticed you mentioned:

Quote:
I've unmarked auto-complete in IE, I've checked my register key HKUsers>...>RunMRU


HKEY_CURRENT_USER is the key you actually want to be in. I am not sure if you mistyped or simply looked in the wrong place in the registry.

In either case, double checking can't hurt. Check this registry key, please:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Explorer\RunMRU

Check this website for reference: http://www.isye.gatech.edu/people/faculty/Marc_Goetschalckx/cali/Windows%20Configuration/Windows%20Configuration%20Html/RemovingItemsfromtheRunMRUProgramList.htm

As for the Clear button, I was going from memory as I have not had Windows 9x installed for over a year. Embarassed You may check the other tab in that area for the Clear button. If not, we both learned something. Wink

Back to top
View users profile Send private message Visit posters website
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Unknown Files All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You cannot download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer