HKEY_CURRENT_USER

[stico]

Previous posts indicate that within REGEDIT the following
be set:

[HKEY_CURRENT_USER\Software\Microsoft\Internet
Explorer\URLSearchHooks]

"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"=""

My regedit does not have the URLSearchHooks folder in
Internet Explorer. Would a previous spyware have removed
it? Can I just add it back?

 

[Alan Edwards]

No idea why you don't have the key, but you can add it if competent.

....Alan

--
Alan Edwards, MS MVP W95/98 Systems
http://dts-l.org/index.html

In microsoft.public.windows.inetexplorer.ie6.browser, "stico"

Previous posts indicate that within REGEDIT the following
be set:

[HKEY_CURRENT_USER\Software\Microsoft\Internet
Explorer\URLSearchHooks]

"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"=""

My regedit does not have the URLSearchHooks folder in
Internet Explorer. Would a previous spyware have removed
it? Can I just add it back?

 

[Frank Saunders, MS-MVP]

No idea why you don't have the key, but you can add it if competent.

...Alan

Previous posts indicate that within REGEDIT the following
be set:

[HKEY_CURRENT_USER\Software\Microsoft\Internet
Explorer\URLSearchHooks]

"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"=""

My regedit does not have the URLSearchHooks folder in
Internet Explorer. Would a previous spyware have removed
it? Can I just add it back?

I don't have that key and Search works fine.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

 

[Alan Edwards]

In microsoft.public.windows.inetexplorer.ie6.browser, "Frank Saunders,

No idea why you don't have the key, but you can add it if competent.

...Alan

Previous posts indicate that within REGEDIT the following
be set:

[HKEY_CURRENT_USER\Software\Microsoft\Internet
Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"=""

My regedit does not have the URLSearchHooks folder in
Internet Explorer. Would a previous spyware have removed
it? Can I just add it back?

I don't have that key and Search works fine.

Mine has it, with a null string as in the post.
Perhaps one is better off without it?

....Alan

 

[Frank Saunders, MS-MVP]

In microsoft.public.windows.inetexplorer.ie6.browser, "Frank Saunders,

No idea why you don't have the key, but you can add it if competent.

...Alan


Previous posts indicate that within REGEDIT the following
be set:

[HKEY_CURRENT_USER\Software\Microsoft\Internet
Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"=""

My regedit does not have the URLSearchHooks folder in
Internet Explorer. Would a previous spyware have removed
it? Can I just add it back?

I don't have that key and Search works fine.

Mine has it, with a null string as in the post.
Perhaps one is better off without it?

...Alan

I really don't know.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

 

[H Leboeuf]

Found this in an other post by Mike Burgess.

Quote
Some program (usually spyware\parasite) may have overridden the URL prefix
setting?
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Includes: Repair the corrupted or altered (spyware) HTTP prefixes
See section: Various Registry Fixes = "RepairDefaultPrefix.reg"
[or - manually]
Open Regedit to the following locations and verify the below default
entries:
Start | Run (type) "regedit" (no quotes)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPre
fix]
@="http://"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes]
"ftp"="ftp://"
"gopher"="gopher://"
"home"="http://"
"mosaic"="http://"
"www"="http://"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"=""

Note: edit as needed, *always* Export before editing.
_______________________________________
Source: Mike Burgess http://www.mvps.org/winhelp2002/

Unquote.

In microsoft.public.windows.inetexplorer.ie6.browser, "Frank Saunders,

No idea why you don't have the key, but you can add it if competent.

...Alan


Previous posts indicate that within REGEDIT the following
be set:

[HKEY_CURRENT_USER\Software\Microsoft\Internet
Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"=""

My regedit does not have the URLSearchHooks folder in
Internet Explorer. Would a previous spyware have removed
it? Can I just add it back?

I don't have that key and Search works fine.

Mine has it, with a null string as in the post.
Perhaps one is better off without it?

...Alan

I really don't know.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

 

[Robert Aldwinckle]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
Frank,

Do you have that CLSID at least?

That CLSID is associated with shdocvw.dll.

What happens if you re-register that .dll?

E.g. use either:

regsvr32 shdocvw.dll

or

regsvr32 /i shdocvw.dll


FWIW I have both. From previous posts I had thought that it had
something to do with customizing the Search bar. I just tried that,
monitoring its use with RegMon but there didn't seem to be any
accesses. Perhaps the implementation has changed, since it used
to be a source of hooks for some undesirable search hijackers?

<
http://groups.google.com/groups?q=U...ff=1&selm=urM03ICWBHA.1388@tkmsftngp05&rnum=2 >

(Google Groups search for
URLSearchHooks author:aldwinckle
)


Robert
---

In microsoft.public.windows.inetexplorer.ie6.browser, "Frank Saunders,

No idea why you don't have the key, but you can add it if competent.

...Alan


Previous posts indicate that within REGEDIT the following
be set:

[HKEY_CURRENT_USER\Software\Microsoft\Internet
Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"=""

My regedit does not have the URLSearchHooks folder in
Internet Explorer. Would a previous spyware have removed
it? Can I just add it back?

I don't have that key and Search works fine.

Mine has it, with a null string as in the post.
Perhaps one is better off without it?

...Alan

I really don't know.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

 

[Frank Saunders, MS-MVP]

[HKEY_CURRENT_USER\Software\Microsoft\Internet
Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"=""

Frank,

Do you have that CLSID at least?

That CLSID is associated with shdocvw.dll.

What happens if you re-register that .dll?

E.g. use either:

regsvr32 shdocvw.dll

or

regsvr32 /i shdocvw.dll


FWIW I have both. From previous posts I had thought that it had
something to do with customizing the Search bar. I just tried that,
monitoring its use with RegMon but there didn't seem to be any
accesses. Perhaps the implementation has changed, since it used
to be a source of hooks for some undesirable search hijackers?

<
http://groups.google.com/groups?q=U...ff=1&selm=urM03ICWBHA.1388@tkmsftngp05&rnum=2
(Google Groups search for
URLSearchHooks author:aldwinckle
)

Robert

I must have been blind when I looked before. URLSearchHooks is there now
and correct.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/