Where is that old thread about the Alexa spyware? I need it again.

Here's a reprint of the post you're looking for:

Simply open "regedit.exe" (Win registry editor) and follow the exact path that Technohead mentioned in the initial post in this thread. That is what I did and how I got rid of that registry "key".

This is the path that Erin (Technohead) indicated above...

one deletes this key with all sub entries!

Here's what you do...

Click START, then RUN.
Type in regedit to the right of "Open" and then click OK.

The registry editor will open and look like this....




Notice that to the left it is set up "similarly" to Windows Explorer. But what "appears" to be folders are actually registry "keys". Regardless, you would click on all the + signs to expand (open) each key, the same as you would click on the + sign to expand folders in Explorer. In the right column, registry entries within each key will appear similarly to files within each folder in Explorer.

--------------------------------------------------------------------------------


So, now let's make it easier for you to follow Technohead's path to the key above....

The path he indicated...

H-KeyLocalMachine/Software/Microsoft/Internet Explorer/Extensions/(c95fe080 8f5d 11d2 a20b 00aa003c157a)

What YOU will actually be seeing as you follow this path...

HKEY_LOCAL_MACHINE

expand the above key (using the + sign) and it will expand (open) as a folder does in Explorer. You will then look for a sub-key under that called....

SOFTWARE

expand the above key (using the + sign) and it will open another list of sub-keys. Look for the one called...

Microsoft

expand the above key (using the + sign) and it will open another list of sub-keys. Look for the one called...

Internet Explorer

expand the above key (using the + sign) and it will open another list of sub-keys. Look for the one called...

Extensions


NOW... the moment that sub-key has been expanded, you will see several keys. One of them will be named like this ecactly...

(c95fe080 8f5d 11d2 a20b 00aa003c157a)

You WILL see several sub-entries for that key listed in the right column of the Registry Editor. But don't worry about them. Because the moment you delete the (c95fe080 8f5d 11d2 a20b 00aa003c157a) key in the left column of the Registry Editor, that entry and all sub-entries will be gone.


SO.....

Now you need to RIGHT-CLICK on the yellow "folder" directly to the left of the (c95fe080 8f5d 11d2 a20b 00aa003c157a) key in the left column. A pop-up menu will appear. Select Delete in the menu options by left-clicking on that option in the pop-up menu.

BOOM!!! That spyware key and all entries within are now GONE!

Thanks Interceptor.