Results 1 to 10 of 10

Thread: MyWay.MyWebSearch

  1. #1
    Junior Member
    Join Date
    Dec 2011
    Posts
    5

    Default MyWay.MyWebSearch

    Hi everyone,

    I got infected with MyWebSearch and cannot eliminate it using Spybot Search & Destroy.

    I run Spybot Search & Destroy and it finds a MyWay.MyWebSearch entry in HKEY_LOCAL_MACHINE. It seems it deletes the entry, but, when I reboot, I run Spybot Search & Destroy again and that MyWay.MyWebSearch entry is still there!!

    I've tried to delete this MyWay.MyWebSearch entry using Spybot Search & Destroy, at least four times, but it is still there everytime I run Spybot Search & Destroy.

    I also tried to delete the entry manually. It desappeas, but it's back again when I reboot!

    I have used other tools, such as SuperAntiSpyware or Malwarebytes, but they don't find anything. It's just that entry that Spybot Search & Destroy finds.

    Please, I would really appreciate if you could help me out.

    Thanks a lot.

  2. #2
    Senior Member
    Join Date
    Oct 2005
    Location
    Germany
    Posts
    5,263

    Default

    Hello,

    Which operating system do you have?

    Best regards
    Sandra
    Team Spybot

  3. #3
    Junior Member
    Join Date
    Dec 2011
    Posts
    5

    Default

    Hi Amanda,

    Sorry, I forgot to mention, Windows Vista. Any special recommendations to get rid of this??

    Thanks a lot,

    David

  4. #4
    Senior Member
    Join Date
    Oct 2005
    Location
    Germany
    Posts
    5,263

    Default

    Hello,

    Did you open Spybot with a right click and choose "run as administrator/take ownership"?

    Best regards
    Sandra
    Team Spybot

  5. #5
    Junior Member
    Join Date
    Dec 2011
    Posts
    5

    Default

    Hi again Sandra,

    I called you Amanda in my previous email. Sorry about that.

    Yes, I opened it all the time as an administrator. I did not do it the first time. Then, I realized I had to run Spybot S&D as an administrator. So, I did that at least three more times, as well as rebooting after scanning.

    It makes no difference the way you run it, I keep getting MyWay.MyWebSearch entry in HKEY_LOCAL_MACHINE.

    Thank you so much.

  6. #6
    Senior Member
    Join Date
    Oct 2005
    Location
    Germany
    Posts
    5,263

    Default

    Hello,

    No problem.
    Can you post what was found?

    Best regards
    Sandra
    Team Spybot

  7. #7
    Junior Member
    Join Date
    Dec 2011
    Posts
    5

    Default

    Hello Sandra,

    Sure, this is exactly what it says:

    Myway.MyWebSearch

    (SBI $11334F10)IE toolbar
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA}



    "Myway.MyWebSearch" is in red color. When I expand it, I get the information down below ((SBI $11334F10)IE toolbar + HKEY_LOCAL_MACHINE... etc).

    Thank you so much.

  8. #8
    Senior Member
    Join Date
    Oct 2005
    Location
    Germany
    Posts
    5,263

    Default

    Hello,

    Please delete the following registry key:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA}

    Open the registry editor by:
    (a)
    press windowskey + r then enter "regedit" (without quotation marks)
    or
    (b)
    click on "start" , then "run" and enter "regedit" (without quotation marks)

    (a+b)
    and then browse to the path:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA}

    Best regards
    Sandra
    Team Spybot

  9. #9
    Junior Member
    Join Date
    Dec 2011
    Posts
    5

    Default

    Hi Sandra,

    Well, I've already done that. I said that in my first post ("I also tried to delete the entry manually. It desappeas, but it's back again when I reboot!"). Sorry, I should have clarified that I had tried to do it manually through regedit.

    Anyway, as I said in my first post, it reappears even if I deleted manually. The registry entry desappears, but Spybot finds again such entry. It says what I wrote in my previous message.

    Thanks.

  10. #10
    Senior Member
    Join Date
    Oct 2005
    Location
    Germany
    Posts
    5,263

    Default

    Hello,

    Have you also tried to remove it in safe mode?

    Best regards
    Sandra
    Team Spybot

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •