Last updated 14/05/2005
Copyright © 1999 - 2004, Sandra Hardmeier, All Rights Reserved Worldwide

Spyware Home Page

 

Partially removed via add/remove programs (MS AUpdate and ISTbar).  Use AdAware and/or Spybot to help with the cleanup.

You can also clean up the registry:

HKEY_CURRENT_USERS\Software\Microsoft\Windows\CurrentVersion\Run (AutoUpdater entry for 'aupdate.exe' programme or "1stService")

HKEY_CLASSES_ROOT\CSLID\{69550BE2-9A78-11D2-BA91-00600827878D}

HKEY_CURRENT_USER\Software\1STbar

HKEY_CURRENT_USER\Software\IST\

HKEY_CLASSES_ROOT\Pugi.PugiObj

HKEY_CLASSES_ROOT\Pugi.PugiObj.1

HKEY_CLASSES_ROOT\1STactivex.Installer.1\

HKEY_CLASSES_ROOT\1STactivex.Installer\

Search engine hijackings - you may also need to delete the following registry keys as per the advice in Microsoft's knowledge base article:

http://support.microsoft.com/default.aspx?scid=KB;EN-US;q323869

 

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page

Delete the following files if they exist:  aupdate_uninstall.exe; aupdate.trk; aupdate.conf; aupdate.exe; istbar.dll; istsvc.exe, istactivex.dll, 1STactivex.dll, 1stactivex.inf.