Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Failed to delete: [Registry Key] hkey_current_user\software\datamngr_toolbar


  • This topic is locked This topic is locked
9 replies to this topic

#1 alpha trouble 2000

alpha trouble 2000

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:00 AM

Posted 27 January 2013 - 01:38 AM

Thanks for your help

Previous attempt and success
http://www.bleepingcomputer.com/forums/topic481914.html/page__pid__2957784#top

The files are attached

Thank you for your help

Attached Files



BC AdBot (Login to Remove)

 


#2 nasdaq

nasdaq

  • Malware Response Team
  • 20,863 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:00 AM

Posted 27 January 2013 - 10:18 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.
===

The latest version of AdwCleaner will delete this key.

  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Delete.
  • Everything that was found will be deleted.
  • Follow the prompts to reboot the computer. A text file will open after the restart.
  • Please post the content of that log file with your next answer.
  • You can find the log file at C:\AdwCleaner[Sn].txt (n is a number)..

Please post the log for my review.

#3 alpha trouble 2000

alpha trouble 2000
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:00 AM

Posted 29 January 2013 - 11:10 AM

Sure did thanks. I make sure all others are updated but not AdwCleaner. Are there different versions of JRT?

I have another computer and have ran the same apps and JRT says

Failed to delete: [Registry Key] "hkey_local_machine\software\microsoft\windows nt\currentversion\schedule\taskcache\tree\scheduled update for ask toolbar"

Thank you for your help

#4 nasdaq

nasdaq

  • Malware Response Team
  • 20,863 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:00 AM

Posted 29 January 2013 - 02:30 PM

I AdwCleaner fixing this error?


Are there different versions of JRT?
What is JRT?

#5 alpha trouble 2000

alpha trouble 2000
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:00 AM

Posted 29 January 2013 - 10:36 PM

JRT.exe is Junkware removal tool. AdwCleaner finds but does not fix. thanks

#6 nasdaq

nasdaq

  • Malware Response Team
  • 20,863 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:00 AM

Posted 30 January 2013 - 09:54 AM

Let me see what will be found in the registry.

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2


If your operating system is 64 bit download this tool:
SystemLook_x64.exe
  • Double-click SystemLook.exe to run it.
  • Copy and paste the content of the following bold text into the main textfield:


    :reg
    hkey_local_machine\software\microsoft\windows nt\currentversion\schedule\taskcache\tree /sub

  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt

When located I will communicate with the owner of the AdwCleaner tool and get him to include this in his next version.

===

The latest version of JRT that I could find is dated Jan 26 2013.

Junkware Removal Tool (JRT) by Thisisu Version: 4.5.2 (01.26.2013:2)

If you have an older version then I suggest you remove it using Add/Remove Programs if listed.
If not delete the file and get the latest.
http://thisisudax.org/downloads/JRT.exe
===

#7 alpha trouble 2000

alpha trouble 2000
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:00 AM

Posted 30 January 2013 - 11:48 AM

it's still there

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\schedule\taskcache\tree\Scheduled Update for Ask Toolbar]
"Id"="{69E30E8A-11AD-47FD-863A-F65F015F532D}"
"Index"= 0x0000000003 (3)

log attached

thank you

Attached Files



#8 nasdaq

nasdaq

  • Malware Response Team
  • 20,863 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:00 AM

Posted 30 January 2013 - 01:46 PM

The tool search for the registry string. This will remove it.

; Purpose: Remove traces in the registry.
;
; Instructions: Copy and paste this text IN BOLD into a text editor such as Notepad.
;
; Save this text as Fix.reg. Make sure the "Save as type:" is "All Files (*.*)" and save it to your desktop.

REGEDIT4

[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\schedule\taskcache\tree\Scheduled Update for Ask Toolbar]



; Double-click on Fix.reg. When it asks you to merge the information to the registry click Yes.

On a Vista or Windows 7 operating system, right click the Fix.reg and run as Administrator.

Delete the Fix.reg file when done.

How is it now?

p.s.
I have reported this to the owner of the AdwCleaner tool.

#9 alpha trouble 2000

alpha trouble 2000
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:00 AM

Posted 30 January 2013 - 05:02 PM

file is gone, thanks. I'm running Vista and when I right clicked the fix.reg file there was not an option to run as administrator (which I was surprised since its usually an option) and the top choice was Merge which worked fine.

Thank you very much for all your help and the note to AdwCleaner.

#10 nasdaq

nasdaq

  • Malware Response Team
  • 20,863 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:00 AM

Posted 31 January 2013 - 07:38 AM

Glad we could help.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users