[always_learning]

Can someone give me directions on how to remove for good the following annoying little registry value that keeps popping up every time I run XoftSpyE:

Vendor: IEPlugin Threat: Severe Risk
system\currentcontrolset\services\mchinjdrv\enum\0 :@root\legacy_mchinjdrv\0000

I tried to find the Registry value in Regedit using the Edit Find function. I may have done it incorrectly as there were no results for the search string.

I have already run the free Symantec IEPlugin removal program which picked up 16 Registry keys and values and deleted them.


Both Norton AntiVirus and Spyware Doctor do not pick up any traces of the infection so it would be safe to say that the hijacker keylogger adware is no longer a threat. However, for a learning experience I would like to know how to remove all traces of this pest from my Registry.

[Northwind_Dagas]

There may not be a registry key, but a reference to a registry key that one existed that is causing the XoftSpyE alert.

Use HijackThis! to reveal all the registry entry references, browser helper objects, plug-ins, and anything else related to IE.

However, remove only what you know should not be there, as this tool shows everything--including the stuff that's okay.

[always_learning]

Thanks for that good piece of advice. I have installed HijackThis and it has thrown up quite a few suspicious results.

You are right about not trying DIY deletions of things. I came across a good site where professionals can analyse the HijackThis results for free and give the correct interpretation. The link is below:

http://forums.thetechguys.com/archive/index.php/

I will keep you posted of the outcome.