I guess I must have picked this up on the TGP posts I did in the last two days, I guess this is another reason to stay away from the TGP business.
Somehow, cracked earth placed a DLL on my system and installed entries into my registry. I don't know if they are using FSO and activeX DLL's or some other methodology. My web browser would never go anywhere except to their search page. I was able to find the SearchHook Directory on my system and run the Uninstall.Bat file. Perhaps it is not cracked earth themselves, because I have never seen a hacker place an uninstall file. Anyway, These were the DLL's and Registry Entries I had to Delete.
This is just as an FYI, and not necessarily a derogative statement towards cracked earth no matter how many times I called them assholes while trying to figure out what they had done to my system.
HKEY_CLASSES_ROOT\CLSID\{C5067F59-9D0D-11D2-AA90-000000000000}
HKEY_CLASSES_ROOT\CLSID\{F08555B0-9CC3-11D2-AA8E-000000000000}
HKEY_CLASSES_ROOT\TypeLib\{F08555A1-9CC3-11D2-AA8E-000000000000}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\search page
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\search bar
HKEY_CURRENT_USER\Software\SearchHook
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\searchprovider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\searchassistant
C:\CrackedEarth\searchhook.dll
Regards,
------------------
Midnight
Webmaster
Midnight Ventures
a little bit of nasty can be so nice
[email protected]
Somehow, cracked earth placed a DLL on my system and installed entries into my registry. I don't know if they are using FSO and activeX DLL's or some other methodology. My web browser would never go anywhere except to their search page. I was able to find the SearchHook Directory on my system and run the Uninstall.Bat file. Perhaps it is not cracked earth themselves, because I have never seen a hacker place an uninstall file. Anyway, These were the DLL's and Registry Entries I had to Delete.
This is just as an FYI, and not necessarily a derogative statement towards cracked earth no matter how many times I called them assholes while trying to figure out what they had done to my system.
HKEY_CLASSES_ROOT\CLSID\{C5067F59-9D0D-11D2-AA90-000000000000}
HKEY_CLASSES_ROOT\CLSID\{F08555B0-9CC3-11D2-AA8E-000000000000}
HKEY_CLASSES_ROOT\TypeLib\{F08555A1-9CC3-11D2-AA8E-000000000000}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\search page
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\search bar
HKEY_CURRENT_USER\Software\SearchHook
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\searchprovider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\searchassistant
C:\CrackedEarth\searchhook.dll
Regards,
------------------
Midnight
Webmaster
Midnight Ventures
a little bit of nasty can be so nice
[email protected]
Comment