Right click options

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

blessed1202

Thread Starter
Joined
May 18, 2002
Messages
230
I was wondering if there was a way to change the right click options. I had this program hijack my computer and the option for it is still on my right click menu. I've uninstalled it and cleared everything that had to do with it, yet the RC option is still there. Can someone advise me?:confused:
 
Joined
Jul 5, 2002
Messages
1,309
This link might be usefull to you, the site discribes how to edit the richt click options menu.
Let us know if it was sufficient.....or not.

Martin
 

JohnWill

Retired Moderator
Joined
Oct 19, 2002
Messages
106,418
PC-Mag has a little utility called Context Editor which allows you to add and delete things from the right click menu. There are provisions to do this in several 3rd party configuration programs as well, but the PC-Mag one is free.
 
Joined
Nov 2, 2002
Messages
22,468
When you right click on a folder or file with the Explorer, a list of options is available.
As more applications get installed, this list may get too large for you.

To remove items from the list:

Note the text of the item you want to remove

Start Regedit

Go to the following sections in the Registry and delete the subkey with the string you noted in Step 1.

HKEY_CLASSES_ROOT\Folder\shell
HKEY_CLASSES_ROOT\file
HKEY_CLASSES_ROOT\Directory\shell
 

blessed1202

Thread Starter
Joined
May 18, 2002
Messages
230
Ok, I've done all of this (except download Context Editor) and it is still there. I can't seem to delete the program at all. I've got jv16 Power tools and every time I remove it from installed programs, it comes back and it doesn't show up in uninstall menu at all. It's also not in the XP "add/remove". I found the folder and deleted most of what was in there, but there are some things that come up as being used and cannot be deleted. In case you need to know--it's called Acceleration Software. It has a webscan (virus) and a pop-up stopper. I've ran Spybot and Window Washer and STILL the thing WILL NOT go away!!:mad: What do I do now?
 
Joined
Nov 2, 2002
Messages
22,468
I've had problems with that program as well. Delete a bit too many registry keys and needed to reinstall everything from scratch.

Can you try searching the registry for the text string that is showing. Perhaps you can find it that way.
 

blessed1202

Thread Starter
Joined
May 18, 2002
Messages
230
I found one, deleted it, but the sucker is still there. And I still cannot delete the folder. This is frustrating:(
 
Joined
Aug 17, 2001
Messages
7,486
Two things. Something is adding that entry back.

Download Startuplist and please run it. Copy and paste the contents of the results into a post here.

http://www.spywareinfo.com/files/startuplist.zip

Also, did you try to delete the folder in Safe Mode?

Are you running the latest Spybot? Start Spybot. Click the online button on the left. Click the Search for updates icon in the right panel. If any are found, download them.
 

blessed1202

Thread Starter
Joined
May 18, 2002
Messages
230
Here it is. And no I did not try to delete it in safe mode. I updated my Spybot yesterday, so it should be fine.

StartupList report, 1/3/2003, 12:39:10 PM
Detected: Windows XP SP1 (WinNT 5.01.2600)
* Using default options
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CMPDPSRV.EXE
C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
C:\PROGRA~1\DESKTO~1\datray.exe
C:\Program Files\BeatNik2\BeatNik.exe
C:\Program Files\Mindbeat\MPower\MPower.exe
C:\WINDOWS\FSScrCtl.exe
C:\Program Files\stickies\stickies.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\regedit.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\IncrediMail\bin\IncMail.exe
C:\Download\StartupList.exe

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\Documents and Settings\shawn.BEST-IXTQ3JYHHA\Start Menu\Programs\Startup]
BeatNik Internet Clock.lnk = C:\Program Files\BeatNik2\BeatNik.exe
MPower 1.2.lnk = C:\Program Files\Mindbeat\MPower\MPower.exe
Praize Messenger.lnk = C:\Program Files\Praize\itLoad.exe
Shortcut to FSScrCtl.lnk = C:\WINDOWS\FSScrCtl.exe
Stickies.lnk = C:\Program Files\stickies\stickies.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

CMPDPSRV = C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CMPDPSRV.EXE
Winsys = C:\WINDOWS\winsys.exe
HotKeysCmds = C:\WINDOWS\System32\hkcmd.exe
AVG_CC = C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
LogonStudio = "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

Desktop Architect = "C:\PROGRA~1\DESKTO~1\datray.exe" -S

--------------------------------------------------

File association entry for .EXE:
HKEY_CLASSES_ROOT\exefile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .COM:
HKEY_CLASSES_ROOT\comfile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .BAT:
HKEY_CLASSES_ROOT\batfile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .PIF:
HKEY_CLASSES_ROOT\piffile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .SCR:
HKEY_CLASSES_ROOT\scrfile\shell\open\command

(Default) = "%1" /S

--------------------------------------------------

File association entry for .HTA:
HKEY_CLASSES_ROOT\htafile\shell\open\command

(Default) = C:\WINDOWS\System32\mshta.exe "%1" %*

--------------------------------------------------

Enumerating Active Setup stub paths:
HKLM\Software\Microsoft\Active Setup\Installed Components

[>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
StubPath = C:\WINDOWS\inf\unregmp2.exe /ShowWMP

[>{26923b43-4d38-484f-9b9e-de460746276c}]
StubPath = %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE

[>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
StubPath = %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

[{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
StubPath = %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

[{306D6C21-C1B6-4629-986C-E59E1875B8AF}]
StubPath = "C:\WINDOWS\System32\rundll32.exe" "C:\Program Files\Messenger\msgsc.dll",ShowIconsUser

[{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install

[{7790769C-0471-11d2-AF11-00C04FA35D02}]
StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install

[{89820200-ECBD-11cf-8B85-00AA005B4340}]
StubPath = regsvr32.exe /s /n /i:U shell32.dll

[{89820200-ECBD-11cf-8B85-00AA005B4383}]
StubPath = %SystemRoot%\system32\ie4uinit.exe

--------------------------------------------------

Checking for EXPLORER.EXE instances:

C:\WINDOWS\Explorer.exe: PRESENT!

C:\Explorer.exe: not present
C:\WINDOWS\Explorer\Explorer.exe: not present
C:\WINDOWS\System\Explorer.exe: not present
C:\WINDOWS\System32\Explorer.exe: not present
C:\WINDOWS\Command\Explorer.exe: not present

--------------------------------------------------

Checking for superhidden extensions:

.lnk: HIDDEN! (arrow overlay: yes)
.pif: HIDDEN! (arrow overlay: yes)
.exe: not hidden
.com: not hidden
.bat: not hidden
.hta: not hidden
.scr: not hidden
.shs: HIDDEN!
.shb: HIDDEN!
.vbs: not hidden
.vbe: not hidden
.wsh: not hidden
.scf: HIDDEN! (arrow overlay: NO!)
.url: HIDDEN! (arrow overlay: yes)
.js: not hidden
.jse: not hidden

--------------------------------------------------

Enumerating Browser Helper Objects:

*Registry value not found* - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}

--------------------------------------------------

Enumerating Download Program Files:

[{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}]
CODEBASE = http://www.apple.com/qtactivex/qtplugin.cab

[sys Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\PCPitStop.dll
CODEBASE = http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB

[Shockwave ActiveX Control]
InProcServer32 = C:\WINDOWS\system32\Macromed\Director\SwDir.dll
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

[Yahoo! Audio Conferencing]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\yacscom.dll
CODEBASE = http://cs6.chat.sc5.yahoo.com/v43/yacscom.cab

[{41F17733-B041-4099-A042-B518BB6A408C}]
CODEBASE = http://a1540.g.akamai.net/7/1540/52...pple.com/borris/us/win/QuickTimeInstaller.exe

[RdxIE Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\RdxIE.dll
CODEBASE = http://207.188.7.150/04e49318bba10e9f5d15/netzip/RdxIE6.cab

[HouseCall Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\xscan53.ocx
CODEBASE = http://a840.g.akamai.net/7/840/537/2002112801/housecall.antivirus.com/housecall/xscan53.cab

[CCMPGui Class]
InProcServer32 = C:\WINDOWS\System32\ccmp392.dll
CODEBASE = http://64.124.45.181/chaincast/proxy/CCMP.cab

[Update Class]
InProcServer32 = C:\WINDOWS\System32\iuctl.dll
CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37591.5455555556

[CBrowser Class]
InProcServer32 = C:\WINDOWS\System32\MINIBR~1.DLL
CODEBASE = http://www.streamingfaith.com/common/mbrowser/MINIBrowser.CAB

[Praize]
CODEBASE = http://www.praize.com/toolbar/praizebar.cab

[RdxIE Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\ie_grokster.dll
CODEBASE = http://www.grokster.com/rdx/RdxIE.cab

[Microsoft Office Tools on the Web Control]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\OUTC.DLL
CODEBASE = http://officeupdate.microsoft.com/TemplateGallery/downloads/outc.cab

[McFreeScan Class]
CODEBASE = http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/1,4,0,4238/mcfscan.cab

[MSN Chat Control 4.5]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\MSNChat45.ocx
CODEBASE = http://sc.communities.msn.com/controls/chat/msnchat45.cab

[Zoom Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\ZActiveX.dll
CODEBASE = http://www.zoomify.com/download/zoomify204.cab

--------------------------------------------------
End of report, 8,841 bytes
Report generated in 0.141 seconds

StartupList version: 1.31.0
Started from: C:\Download\StartupList.EXE

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only
 

blessed1202

Thread Starter
Joined
May 18, 2002
Messages
230
I'm not sure what a proxy is. What does it do?
Also, I know what the winsys.exe is and yes it is a keylogger. I put it there. There are things on the computer that I have to keep an eye on, if you know what I mean.
 
Joined
Aug 17, 2001
Messages
7,486
What a proxy does it it takes over your internet connection. Instead of going through the normal ISP routing, you are using their server to connect to various sites. If you didn't install it. I would suggest you open IE and have a look. Remove it and then remove it from Downloaded Program Files.

I would get rid of Grokster too. And remove the files pertaining to it from Dowmloaded Program Files.

I would also run HijackThis and see what it finds.

I have to leave for a while. Hope you get somewhere with this.


What is the exact name of the acceleration software? And also, is this context menu item on the Internet Explorer context menu?

If so, HijackThis will remove that. But if the program is reinstalling itself, the menu item will be back.
 

blessed1202

Thread Starter
Joined
May 18, 2002
Messages
230
The company is called eAcceleration Software and the program is Stop-sign threat scanner.
The Praize toolbar I (thought) I uninstalled. I do have Praize Messenger (it's like Trillian). I've never downloaded a Streaming Faith toolbar. I have no idea where that came from. I have no idea where the Chaincast came from. Is that supposed to be like Winamp or Media Player?
Where do I acquire the HiJackThis that you spoke of?
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Members online

Top