How do we know which BHO is the culprit

[Guest]

Message "The Java Runtime Envirnoment cannot be loaded.' When I unCHECK "
enabled third-party extensions" I was able to go to the banks websites etc.
So it seems somthing is been infected there. How can I find out which BHO
been affected? Thanks

 

[Newbie Coder]

LivePrices,

Search for the CLSID in the registry & cross reference it through Google

If you have Spybot installed you can go MODE menu | ADVANCED | TOOLS tab | BHOs & it will
be listed. Click it & it will tell you if it's legitimate or not. Then you have the chance
to delete it. Personally, I just leave the Spybot BHO listed & delete all the others

 

[Guest]

I dont know whether it was due to I UNCheck the 3rd party browser extension,
and when I open the Spybot 1.4>mode>advance>tools> the BHO was uncheck.
Click on it and these are the items:-

(tick)AcrolEHlprObjClass,
(untick) Skpe add-on,
(ticked) (5370...........) No name given,
(ticked) SSHelper Class,
(untick) {90300......} Windows Live Sign in Helper,
(unticked) {BDBD1........} Windows Live Toolbar Helper

Quote " I just leave the Spybot BHO listed & delete all the others " so by
your statement, which one should I delete. Many thanks.

 

[Newbie Coder]

LivePrices,

In Spybot clicking one item at a time expands it & you will see malware, legitimate...

You don't need Acrobat or Skype for sure & when installing Skype just install the
application & not the other crap that comes with it

The 5370 one is the Spybot one

Me personally would also remove the Windows Live junk, but they are ok

I would delete all bar the 5370 one & Spybot backs up before deleting so you can always
restore them