Last updated 14/05/2005
Copyright © 1999 - 2004, Sandra Hardmeier, All Rights Reserved Worldwide

Spyware Home Page

 

Sets the MSN and Netscape search engines to ignkeywords.com and rspsearch.com, also uses searchresult.net, apps.webservicehost.com (qcksearch.com)

Installed files (you probably won't have all of them):  bho.dll, rsp.dll, winstart.exe, bho001.dll, rsp001.dll, winstart001.exe, install_all.dll, update_hosts.dll, update_com.dll, update_bho.dll, update_rsp.dll, update_remove.dll, rules.dat.  Rename.

Registry:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Run

Delete references to:  winstart, winstart002, winstart001.exe

Delete HKEY_CURRENT_USER\Software\VB and VBA Program Settings\Ie Rsp

Open the hidden HOSTS file using Notepad. Remove entries referring to auto.search.msn.com, search.netscape.com, ieautosearch