WinHound manual removal:
Kill processes:
html.exe, intell32.exe, links.exe, ll.exe, shdochp.exe, sywsvcs.exe, winhound.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\FHPage
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\intell32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\links
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WinHound
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\{F33812FB-F35C-4674-90F6-FD757C419C51}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\links
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\WinHound
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page=[local address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{784aa380-13f2-422e-8540-f2280f1dd4f1}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9EAC0102-5E61-2312-BC2D-4D54434D5443}
HKEY_CLASSES_ROOT\Tubby.ToolBandObj.1
HKEY_CURRENT_USER\Software\MTC MTC
HKEY_LOCAL_MACHINE\SOFTWARE\WinHound.com
Delete files:html.exe, intell32.exe, links.exe, ll.exe, shdochp.exe, sywsvcs.exe, winhound.exe, bhoimpl.dll, birdihuy.dll, cwrapper.dll, mtc.dll, oleext.dll, shdochp.dll, st3.dll, zlbw.dll, wl.dll, mtc.ini
Delete directories:C:\Program Files\WinHound
Misc:WinHound doesn't create all listed objects, but installs only some of them. Its typical installation depends on several factors and often varies.
[local address] is a path to the shdochp.dll file. It is usually C:\Windows\System32.
[site address] is an adress of an insecure web site. Sometimes it is a page on the makemesearch.com domain.
Exact file location:
winhound.exe, cwrapper.dll, wl.dll - C:\Program Files\WinHound
html.exe - C:\Windows\Downloaded Program Files or C:\Winnt\Downloaded Program Files
intell32.exe, ll.exe, shdochp.exe, sywsvcs.exe, bhoimpl.dll, birdihuy.dll, mtc.dll, oleext.dll, shdochp.dll, st3.dll, zlbw.dll, mtc.ini - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
Comments from visitors:
1. by Guest. 2006-02-18 00:02:51
cant you give a hint how to delete this entry?
all entries deleted except for the reg entry "HKEY_LOCAL_MACHINE\SOFTWARE\WinHound.com"
cant you give a hint how to delete this entry?