|
I thought I would close the loop on this issue. I have finally solved it with some help from a user on the Microsoft Anti-spyware (MAS) newsgroups. (fingers crossed) I couldn't find any path or other useful information in logs in MAS. A user suggested looking through the registry at several different keys for the guids the toolbar uses. Most of the keys were clean but I did finally find the guid under:
HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Internet Explorer \ Toolbar \
WebBrowser
Once I deleted the value from this key, I no longer got the warning from MAS
The guids I looked for were:
{014DA6C1-189F-421a-88CD-07CFE51CFF10}
{014DA6C9-189F-421a-88CD-07CFE51CFF10}
Possible locations where:
- HKEY_LOCAL_MACHINE \ SOFTWARE \ Classes \ CLSID \
-HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \
CurrentVersion \ Explorer \ Browser Helper Objects \
-HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Toolbar
-HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Internet Explorer \ Toolbar \ WebBrowser
This would have covered My Search and My Way toolbars which are found in \Program Files\MySearch\ and \Program Files\MyWay\
Thanks again for your help.
Marta
PS: I also learned that you need to disable system restore in each user. It is probably rare that you'll come across someone like me who has two users on their PC but I made a bad assumption that turning it off in one user would have turned it off globally.
|