Remove Twain Tech. Removal instructions

Some analysis of the system shows that this has the capability of sending out (in XML format) various information about where it is installed, like PC information (RAM, Diskspace,...) and a list of installed applications.

It also containst some references to 'VX2'.

This is also associated with files located in the Windows Files..."twunk_16" and "twunk_32". if you try to delete them, they will reappear.

Virus-spreaders are cetrainly twisted little perverts who need understanding. A Company like Twain-Tech, however, is much worse and needs something quite different. Some legal measures and some administrative sanctions should be considered for a start.

I agree with message No 3 with no name
Twain tech is a real threat to a pc user, I have spent many hours downloading Spy removal programs trying to find one that works , with no sucess, also stuffing up my PC by deleting Twain files which reappear
Time has come when some sort of class action should be taken by PC users to get rid of Twain-Tech and the likes of them, that make it very hard to remove their Spyware

GRRRRRRRRRRRRRRRR! I have literally spent 4 hours a day for two weeks trying to get rid of this Twain Tech crap. But, of course, it reappears when i restart my computer. Mean while im in pop up hell.

There ought to be a law. The waist of time and money trying to get Twain Tech off my computer is a real personal violation. I have followed Twain Tech's instructions for the past 6 hours and purchased and run 3 different spyware removal programs and have nothing positive to this point.
I would love to have legal action available to help solve this issue. Frustrated and at my end.

yeah i def agree they should be punished for this

I agree with the rest - the removal instructions aren't even working

Frustration is an understatement. These guys have a website Twain-tech.com. The have a mock e-mail and operate like what their doing is legal. Is'nt there some kind of web site cops out there so that we can get a hold of them and nail their asses ? They must be on the most wanted list based on what I've just read.

I'm about to resort to a reformat to get rid of this crap.

PestPatrol identifies it and deletes it; but with each reboot it comes back. Also, it makes an exception to blocking of itself in SpywareBlocker. I feel as if I have no control over my own computer and I feel violated.

I did some further research and came up with a few leads. Firstly, Twain Tech is registered under the WHOIS (whoever they are?) through a company called Thinking media LP re services. They are located at 275 Madison Ave , New york, NY 10016 4th floor
If we could somehow get a hold of them and politely ask how to get rid of this thing (before giving them a bloody nose) we may get somewhere. The problem I'm having because I live in Canada is that I'm out of the calling area. So I'll give anyone who lives in the U.S the phone # as long as they share the resolution to this problem with the rest of us. So here it goes the phone # is 1866 839-6164. Better yet if you can visit their office in New York even better. This is a long shot for me but I have nothing to lose.

The instructions on the "Twain-tech" website for manual removal are incorrect because the "regsvr32" command given actually REGISTERS the dll required. To DEREGISTER it, use the command line with the correct switch. Don't necesarily trust the instructions given by these parasite makers. If a command is given to be executed through the "RUN" box, then you can normally get help on it by typing the command followed by a question mark or a slash/question mark as so "/?"

The proper command string is
"regsvr32 /u c:windows waintec.dll "

Give this a try , and then remove the dll file.

After using the instructions in Answer 14 above, try to delete the file from your C:WindowsSystem32 directory. If you can't, (because it says its in-use), then boot up into Safe-Mode and delete it there. Don't delete twain.dll if you have a scanner or digital camera. They purposefully chose a name similar to this one so people would be hesitant to take it out.

For people who have PestPatrol and are successful at removing it, only to have it come back, and if you are willing to edit the registry (can be dangerous), the look in the HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun key and look for names that appear to be truly random letters. Or print-screen the list as it looks, then reboot, find that it has re-installed itself, and look in this registry key again. It drops a randomly-named file and a registry key to run that file at startup. If you can find the registry key and the file and delete them both, you'll be out of the loop and get rid of it.
Make sure to keep your PestPatrol updated so you have a fighting chance of keeping it out once you get it removed.

I emailed all of the address provided on twain-tech.com and all the emails came back as undeliverable.I looked up on whois and register.com and twain-tech.com and as stated thinking media LP is the company that has the domain register and admistrates it. Also as said before their phone # is 866-839-616 which is a toll-free number. I've called several times and there is never an answer, I get an answering machine. I have no emailed domain@thinkingmedia.net and am waiting for a reply. I will let you know if I find anything further.

I have tried every spyware tool known to mankind. I have read every forum with every possible solution I could manage to locate. Not one place has a method of removal that actually sems to work. There are 3 various methods, none of which can find, delete, or un-register this parasite. Almost worth a drive to New York with my 10 day old computer and show them how I am going to choose to describve RAM!!! These people really should be in a long costly embarresing court battle. Or we could do as suggested above....a bloody nose :D

Ok I recently got in touch with mypctuneup.com, which twain-tech has partnered with to help with the removal of their spyware/AdWare. This is for removal of twaintec.dll only. Many different companies use the name twain-tech but installl different files. Again this is for twaintec.dll, so do a start, find to make sure you have this file.Here is how to do it.
Go to start then run and type regedit.
Next go to HKEY_LOCALMACHINE and click on the + next to software and you should have a twaintec folder. Delete that folder.
Next go to HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCurrentVersionRUN and you should have a file names kcfoawhsoy, which the data for it should be c;windowssystemshriy.exe,delete that from regedit.
Next Press ctrl + Alt + delete to get to your task manager. You should have something called shriy.exe running, delete that or end the task. Right after that go to c:WindowsSysyem and delete shriy.exe.
Next close all other windows and click, start, run then type in regsvr32 -c:/windows/twaintec.dll
You should get the respons DLLUnregisterserver in c:windows waintec.dll succeeded.
Finally restart your computer and as soon as it is rebooted go to C:/Windows and delete twaintec.dll. I repeat as soon as it is restarted this MUST be the first thing that you do.

the command to unregister id regsvr32 -u C:/windows/twaintech.dll. Sorry about that.

Ive had a purge on all my spyware the past few days, but twainttech refuses to die. Its Twaintech.mxtarget i seem to have, and the registry files keep reappearing as well as mxTarget.dll.
Sons of bitches, id happily torture them and there kind.

O.K Guys I know how frustrated I was so here's your solution. I'm the "lets put our heads together guy" . After extensive time and research I have finally gotten rid of the beast. Mypctune.com contrary to what the person above said about them "partnering up" with twaintech is actually run by the same people who created twain-tech. If you look at the whois registration both are registered under a company called Thinking Media out of New York. Thinking Media is both the creator and the distroyer of Twain-Tech. These guys are scrambling to get rid of it. My theory as to why they are doing this is twofold. My 1st theory is that the U.S is introducing new legislation shortly to make this adware illegal. My 2nd theory is that this Twain -tech was somthing that went terribly wrong and got out of control to the point that people were screaming Bl____ Mur______. These guys have got to be on the most wanted list.

Enough suspense, All I ask is that if you do get rid of it by the info I'm providing, to thank me for the time and effort I've put into this or a donation for all the money I lost trying to get rid of it would be nice. If someone is interested in a donation email me at Jerrya@email.com. I'll give more details on where to send the donation. To get rid of Twain-tech call:

1646 442-1235 Matt or 1646 4421249 Scott Crause

Matt walked me through manual removal. I was"nt suppose to have Matt's number but I nailed him on my call display. You can also get Scott on the chatt line at myPCtuneup.com.

One last and very important point. I know we're all frustrated and pissed off to say the least. But I 'm in no way endorsing any type of violence or abuse again'st these guys. I am a non-violent person by nature. These poor guys were probably hired by a third party to handle all the crap comming their way. Be nice to them and treat them with repect and you'll get a lot futher ahead.

I'm done

PS thanks to all the guys above for their efforts.

I knew that mypctuneup and twain tech were run by the same company thinking media. From what scott at mypctuneup told me is that their 2 different companied with 2 different owners, in 2 different areas. I already gave the instruction above and those are all copied exactly from a live help session with Scott from mypctuneup.com. It is totally gone from my computer. The directions are above do not give this person donations for instructions already presented before.

I tryed your method and it did'nt do squat. The only way is to get a live person on line because there's about 10 variations of file names for twain-tech. Your version kcfoawhsoy didn't even exist on my computer.

The only way is live. If you don't feel I deserve donations is probably for 1 of two reasons:

- you don't understand the amount of hours and days of effort I put into getting rid of it

- or you probably work for the bastards.

PS I asked for donations, I'm not begging you idiot !

and still we have twain-tech.
i have it runnin under mx-target.

little thing seems not 2 like it when u rename it.
search for the map in windows system 32.
i renamed it.no twain-tech program detected anymore.8[

Look under C:/documents and settings/owner/local settings/
there will be a few folders with random numbers. Look in them and you'll see mxtarget.dll. The file is found in all of those kinds of folders.

Yeah, uninstall Windows and put Linux or MAC OSX on it

I found a pretty good tool that removes most of the Twain Tech files - but they will come back on each reboot. The good news is that it stops the pop-ups, finally.
The tool is GIANT AntiSpyware.

download yahoo's anti-spyware toolbar...I swear it took if off of mine! And it's free. No more popups!

wow, at least i know im not the only one going thru all this shit. i dont think any automatic program is going to delete it.. i have yet to talk with someone Live.. i think ill do that tomorrow. does anyone know if this really 'infects' anything?

I had this and it proved to be quite stubborn to get rid of, but I did . Now it is possible but not easy and it is kind of risky because it involves editing the registry. I can't stress strongly enough to back it up and set a restore point if possible. I used these instructions many times to no avail.
1 Start your computer in safe mode.
2 Start the registry editor. This is done by clicking Start then Run. (The Run dialog will appear.) Type regedit and click OK. (The registry editor will open.)
Delete 'HKEY_LOCAL_MACHINE SOFTWARE Classes CLSID {0000607D-D204-42C7-8E46-216055BF9918}', if it exists.
4 Delete 'HKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows CurrentVersion Explorer Browser Helper Objects {0000607D-D204-42C7-8E46-216055BF9918}', if it exists.
Exit the registry editor.
5Start Windows Explorer and delete:
%WinDir%mxtarget.dll
Note: %WinDir% is a variable (?). By default, this is C:Windows (Windows 95/98/Me/XP) or C:WINNT (Windows NT/2000).
6 Start Microsoft Internet Explorer.
In Internet Explorer, click Tools -> Internet Options.
Click the Programs tab -> Reset Web Settings.

but when I added find "mxtarg" to the first step, and searched the registry, one by I deleted all occurrences in the registry then used find again to delete ALL occurrences of "0000607D-D204-42C7-8E46-216055BF9918" and then closed regedit and did a search of all files. and make sure to include search all hidden files and folders to find "mxtarg" you will get dll's and inf's . I must have found 30 of them deleted them all.. then reset my web settings did a restart and ran Bazooka.. and Finally it was gone..I have restarted many times and it's been a couple of days and so far its ok.. hope this helps.. I also found this file in 'HKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows CurrentVersion
un.."hktvcbur.exe" . I deleted it also..just wasn't sure what it was so to be safe I dumped it.. hope this helps someone I spent hours and hours trying to get rid of this...

I did the same procedure as u did, till the point of running Bazooka.Similarly it didnt find any of twaintec.mxtarget anymore after running the scan.
I was happy and thought that I m done.For confirming I ran NoAdware and got more happy when it didnt detect any of it here too.
So I rebooted the PC and there it came again!!!! :-( :-(.
Can u or anyone plz help me out to get rid of this crap.I had already spent my precious 4-5 hours on this.Plz help!!!!

After having my computer highjacked, and other spy ware removal programs not helping (ad-ware 6.0 & McAfee anti-spyware) I downloaded a free 15 day copy of GIANT anti-spyware. They guarenteed removal of Twain Tech.
I ran a scan and found and removed Twain tech along with 20 other programs that the other never saw.
So far it seems to do the trick. I will update on the progress.
Good luck and the Twain Tech jerks should burn......

No. GIANT doesn't do either. I have it detecting it at every system startup. It looks like removal lasts only from startup to startup

don't know how i even got this crap on my system but with your instructions I was able to remove it - so far. Spent days and hours trying to get rid of it. Thank you for your help

What about that X-Cleaner listed at the top of this page? I have systemantic and everytime I run my system scan it is on there. When you follow there removal options from the registry area the files to delete are never here. KaZaa has been great for porn and music but they make you pay with all the adware on the site when you download files. Why prosecute people who download songs and porn when they get punished enough by getting this s@@t ???

We list how to remove right on our site - And I quote:

If you want to uninstall, you can do so easily through the add/remove function in your control panel. You can access your control panel by going to:

1. Start (typically, the button in the bottom left of your screen)
2. Choose SETTINGS
3. Choose CONTROL PANEL
4. Choose ADD/REMOVE PROGRAMS
5. Select Twain-Tech
6. Click on ADD/REMOVE

Of course we encourage you to leave it on so that you can benefit from the occasional offers that it shows you. If you need more information, or experience any technical problems, please contact us at techsupport@Twain-Tech.com. We look forward to hearing from you.

As it states we look forward to hearing from you. Email and tell us how happy you are to have our product displayed on your computer each and everytime you turn it on.

I finally got rid of Twain tech on an XP machine after days of fighting it.
1. I deleted everything in documents & settings*username*local settings emp folder.
2. I deleted the key: HKLMsoftwaremicrosoftwindows NTcurrentversionwinlogon
otifyWPAEvents. It was pointing to the "2ldsrch.dll" file in system32 folder that kept coming back.
3. I ran the Giant software that finds and deletes the "2dlsrch.dll" file that shows up as 'TwainTech'.
4. Reboot

If you update to Windows XP service pack 2, and run the "critical updates" for XP, you can also prevent this one from coming back. I just wanted to find a way to get rid of this one before resorting to the SP2. Hope this helps someone! - Jim
http://www.wwwdothttpdotdotcom.com

To add to what guest #32 (THANKS!) submitted and In contrast to what guest #33 submitted, I downloaded and used GIANT. That was several days ago. I have started and stopped my PC several times since with absolutely no sign of Twaintech. It has worked very well for me!! GIANT also has many features superior to many other spyware packages. I HIGHLY reccomend it!!

Like most of you, I spent countless hours over the past two weeks trying to eliminate Twain-Tech from my system. I share the frustration and anger. After reading the numerous comments regarding Twain-Tech, I became more enraged (especially the BS directly from Twain-Tech). As a result, I decided to take extreme action. The most effective solution to the problem: Back up your data; Format the HDD; Re-install the operating system and applications. I wish I did this two weeks ago - it took far less time! There is also the added bonus of re-evaluating all the apps you plan to re-install (don't install apps that you never really use anyway). By streamlining, system performance is always improved. My PC is screaming now!

BTW, where does that joker (Ding Ding Ding! We Have A Winner) get off requesting donations to compensate for "time and effort"?!? Like we haven't suffered along with ya, buddy! Sharing helpful information is the respectable thing to do. Asking for a handout puts you in the same class with the Twain-Tech idiots.

SIMPLY PUT. YOU NEED TO RENAME THE FILE MULTIMPP.DLL TO SOMETHING ELSE. YOU WILL HAVE ORPHANED REGISTRY ENTRIES WHICH WILL LAY DORMANT, BUT WHO CARES. PROBLEM SOLVED. BYE BYE ASSWIPE TWAIN-TECH.

please tell me how to get mypctune.com off my computer

I am reading these instructions, but I can't even get to registry and I can't go into safe mode because it says I have a virus and need to run check disk. HELP!!