Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I got this SearchMall toolbar on my computer for the second time in a month, but this time I can't remove it. Ran updated spybot, ad-aware, cleared cookies, files, history, ran hiijack this, and searched registry and deleted all searchmall files. I don't know what else to do.
In addition to the search bar, I am getting porn pop ups and a bunch of desktop icons for virus/spyware/adware removal.
any suggestions as to what else i can do?

Get Webroot Spysweeper from my http://harry-inc.com Downloads section, it will get rid of searchmall :)
www.Harry-Inc.com

hi kathy,
first disable your system restore to flush out any and all malware in your restore folder, then get your latest anti-virus defs, spybot defs, adaware defs. also download this program from diamond. download the program APM from this website:
go to the diamond website at this location:http://www.diamondcs.com.au/index.php?page=products
next reboot to safe mode, and scan with your cleaning programs, delete all files they come up with, then clean out your cache, temp files, history and cookie files, and your recycle bin.
next if you have hijackthis run the program scan your computer, and post the log here.
in the meantime, after you have scanned with hijackthis, still in safe mode, go to your registry and do a search for these keys:
HKEY_CLASSES_ROOT\Software\share_srm
HKEY_CLASSES_ROOT\winsrm.dbi.1
HKEY_CLASSES_ROOT\winsrm.dbi
HKEY_CLASSES_ROOT\winsrm.iiittt.1
HKEY_CLASSES_ROOT\winsrm.iiittt
HKEY_CLASSES_ROOT\winsrm.momo.1
HKEY_CLASSES_ROOT\winsrm.momo
HKEY_CLASSES_ROOT\winsrm.ohb.1
HKEY_CLASSES_ROOT\winsrm.ohb
HKEY_CLASSES_ROOT\winsrm.amo
HKEY_CLASSES_ROOT\winsrm.amo.1
HKEY_CLASSES_ROOT\CLSID\{4B8F38C7-62FC-4762-B9A0-27E63F768167}
HKEY_CLASSES_ROOT\CLSID\{41D13E9A-BB94-402A-8502-AFA78526B63D}
HKEY_CLASSES_ROOT\CLSID\{74F25A2C-22B3-4023-8F1A-CA616C30A8B5}
HKEY_CLASSES_ROOT\CLSID\{0AEE4D0C-4B38-4196-AE32-70ACE5656647}
HKEY_CLASSES_ROOT\CLSID\{356F7928-CB5D-4E2F-906C-04CB8DB29BE2}
HKEY_CLASSES_ROOT\TypeLib\{66E377BD-6FF9-43E0-9A5D-DAC6FD7A05AC}
HKEY_CLASSES_ROOT\Interface\{41F108A6-539D-4D0F-B93B-8A446A18645D}
HKEY_CLASSES_ROOT\Interface\{34BAFAAF-99C5-472D-8613-EB209903FDC5}
HKEY_CLASSES_ROOT\Interface\{8B6D1A16-E636-4127-9EF6-4F1DD93AC2A9}
HKEY_CLASSES_ROOT\Interface\{6CE5322C-F6B3-4AC5-973C-6E0E2098EBF0}
HKEY_CLASSES_ROOT\Interface\{E53B0BE9-B055-4230-9F9D-68FB0C76F130}
HKEY_CLASSES_ROOT\Interface\{9DD1AD56-8D03-4BA8-BEE2-7C9A46182ED2}
when found delete them.
now, using your APM program, do a search for this dll:
winsrm32.dll and unload it.
that should take care of searchmall
all the best,
murve

hi kathy,
addendum, when you have unloaded the dll then reboot to normal mode, re enable your system restore, do a search for the dll again and if found in your C:\Windows\System32 directory delete it again
sorry for the addendum, all the best,
murve

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |