Jump to content

Locked CLSID key removal


Recommended Posts

Under Windows Vista Home Premium 64-bit:

I got a CLSID key that I cannot remove. I suspect this to have been part of a trojanhorse keylogger thing that was removed early on. Now Malwarebytes doesnt pick up anything and other progs dont as well so I thought this might be from my firewall or antivirus-spyware programs but from what I read CLSID is for Active X controls and I should be able to delete them all but thats the problem.

Inside the CLSID folder there's only a folder called "Programmable" with an empty key. Its an empty value key that the reg cleaner picks up but cannot delete because its locked. This key oddly shows up twice as the same key under the registry cleaner. That is how I initially discovered it. So again there are two keys that are picked up by the reg cleaner with the same CLSID number.

I have tried RegAssassin and it did not work even in safe mode. I have messed with the permissions and could not get it to delete it because of OWNER OPERATOR. Now OWNER OPERATOR has changed to RESTRICTED. Through this forum I have learned of MS DaRT but I guess that would require me to purchase it in which I cannot do. And even if I did I do not know how to use ERD to remove the key. Like I said the progs I have dont pick up anything. Does anyone have any ideas or suggestions besides killing my OS and wiping the drive?

Link to post
Share on other sites

Hello SSK2010, and welcome to the forums here at Malwarebytes.org :lol:

As this may be due to an infection that you may have had, you should seek assistance from the EXPERTS to ensure you have a clean system.

Please read the following so that you can begin the cleaning process:

We don't work on Malware removal in the general forums.

Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

Please note that it may take 48 hours or more for you to receive a response in the malware removal forum, as it is often busy at times. Please do not reply to your own post asking for help unless its been more than 48 hours since you originally posted, as this can make it appear as though you are being helped and take longer for you to get help.

If you are unable to do all or any of the steps in the link to the directions above, just post your problem into the forum I gave you a link to anyway and someone will be able to assist you.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

If you are a corporate customer please send an email to corporate-support@malwarebytes.org. (NOTE: An order number is required for corporate support.)

Also, when replying, please use the "ADD REPLY" button or erase what the person you are replying to said, as this makes the forum easier to read.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post.

Thank you :lol:

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.