Tech Support Guy banner
Status
Not open for further replies.

Right click options

3K views 20 replies 5 participants last post by  blessed1202 
#1 ·
I was wondering if there was a way to change the right click options. I had this program hijack my computer and the option for it is still on my right click menu. I've uninstalled it and cleared everything that had to do with it, yet the RC option is still there. Can someone advise me?:confused:
 
#3 ·
PC-Mag has a little utility called Context Editor which allows you to add and delete things from the right click menu. There are provisions to do this in several 3rd party configuration programs as well, but the PC-Mag one is free.
 
#4 ·
When you right click on a folder or file with the Explorer, a list of options is available.
As more applications get installed, this list may get too large for you.

To remove items from the list:

Note the text of the item you want to remove

Start Regedit

Go to the following sections in the Registry and delete the subkey with the string you noted in Step 1.

HKEY_CLASSES_ROOT\Folder\shell
HKEY_CLASSES_ROOT\file
HKEY_CLASSES_ROOT\Directory\shell
 
#5 ·
Ok, I've done all of this (except download Context Editor) and it is still there. I can't seem to delete the program at all. I've got jv16 Power tools and every time I remove it from installed programs, it comes back and it doesn't show up in uninstall menu at all. It's also not in the XP "add/remove". I found the folder and deleted most of what was in there, but there are some things that come up as being used and cannot be deleted. In case you need to know--it's called Acceleration Software. It has a webscan (virus) and a pop-up stopper. I've ran Spybot and Window Washer and STILL the thing WILL NOT go away!!:mad: What do I do now?
 
#8 ·
Two things. Something is adding that entry back.

Download Startuplist and please run it. Copy and paste the contents of the results into a post here.

http://www.spywareinfo.com/files/startuplist.zip

Also, did you try to delete the folder in Safe Mode?

Are you running the latest Spybot? Start Spybot. Click the online button on the left. Click the Search for updates icon in the right panel. If any are found, download them.
 
#9 ·
Here it is. And no I did not try to delete it in safe mode. I updated my Spybot yesterday, so it should be fine.

StartupList report, 1/3/2003, 12:39:10 PM
Detected: Windows XP SP1 (WinNT 5.01.2600)
* Using default options
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CMPDPSRV.EXE
C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
C:\PROGRA~1\DESKTO~1\datray.exe
C:\Program Files\BeatNik2\BeatNik.exe
C:\Program Files\Mindbeat\MPower\MPower.exe
C:\WINDOWS\FSScrCtl.exe
C:\Program Files\stickies\stickies.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\regedit.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\IncrediMail\bin\IncMail.exe
C:\Download\StartupList.exe

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\Documents and Settings\shawn.BEST-IXTQ3JYHHA\Start Menu\Programs\Startup]
BeatNik Internet Clock.lnk = C:\Program Files\BeatNik2\BeatNik.exe
MPower 1.2.lnk = C:\Program Files\Mindbeat\MPower\MPower.exe
Praize Messenger.lnk = C:\Program Files\Praize\itLoad.exe
Shortcut to FSScrCtl.lnk = C:\WINDOWS\FSScrCtl.exe
Stickies.lnk = C:\Program Files\stickies\stickies.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

CMPDPSRV = C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CMPDPSRV.EXE
Winsys = C:\WINDOWS\winsys.exe
HotKeysCmds = C:\WINDOWS\System32\hkcmd.exe
AVG_CC = C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
LogonStudio = "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

Desktop Architect = "C:\PROGRA~1\DESKTO~1\datray.exe" -S

--------------------------------------------------

File association entry for .EXE:
HKEY_CLASSES_ROOT\exefile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .COM:
HKEY_CLASSES_ROOT\comfile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .BAT:
HKEY_CLASSES_ROOT\batfile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .PIF:
HKEY_CLASSES_ROOT\piffile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .SCR:
HKEY_CLASSES_ROOT\scrfile\shell\open\command

(Default) = "%1" /S

--------------------------------------------------

File association entry for .HTA:
HKEY_CLASSES_ROOT\htafile\shell\open\command

(Default) = C:\WINDOWS\System32\mshta.exe "%1" %*

--------------------------------------------------

Enumerating Active Setup stub paths:
HKLM\Software\Microsoft\Active Setup\Installed Components

[>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
StubPath = C:\WINDOWS\inf\unregmp2.exe /ShowWMP

[>{26923b43-4d38-484f-9b9e-de460746276c}]
StubPath = %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE

[>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
StubPath = %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

[{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
StubPath = %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

[{306D6C21-C1B6-4629-986C-E59E1875B8AF}]
StubPath = "C:\WINDOWS\System32\rundll32.exe" "C:\Program Files\Messenger\msgsc.dll",ShowIconsUser

[{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install

[{7790769C-0471-11d2-AF11-00C04FA35D02}]
StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install

[{89820200-ECBD-11cf-8B85-00AA005B4340}]
StubPath = regsvr32.exe /s /n /i:U shell32.dll

[{89820200-ECBD-11cf-8B85-00AA005B4383}]
StubPath = %SystemRoot%\system32\ie4uinit.exe

--------------------------------------------------

Checking for EXPLORER.EXE instances:

C:\WINDOWS\Explorer.exe: PRESENT!

C:\Explorer.exe: not present
C:\WINDOWS\Explorer\Explorer.exe: not present
C:\WINDOWS\System\Explorer.exe: not present
C:\WINDOWS\System32\Explorer.exe: not present
C:\WINDOWS\Command\Explorer.exe: not present

--------------------------------------------------

Checking for superhidden extensions:

.lnk: HIDDEN! (arrow overlay: yes)
.pif: HIDDEN! (arrow overlay: yes)
.exe: not hidden
.com: not hidden
.bat: not hidden
.hta: not hidden
.scr: not hidden
.shs: HIDDEN!
.shb: HIDDEN!
.vbs: not hidden
.vbe: not hidden
.wsh: not hidden
.scf: HIDDEN! (arrow overlay: NO!)
.url: HIDDEN! (arrow overlay: yes)
.js: not hidden
.jse: not hidden

--------------------------------------------------

Enumerating Browser Helper Objects:

*Registry value not found* - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}

--------------------------------------------------

Enumerating Download Program Files:

[{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}]
CODEBASE = http://www.apple.com/qtactivex/qtplugin.cab

[sys Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\PCPitStop.dll
CODEBASE = http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB

[Shockwave ActiveX Control]
InProcServer32 = C:\WINDOWS\system32\Macromed\Director\SwDir.dll
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

[Yahoo! Audio Conferencing]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\yacscom.dll
CODEBASE = http://cs6.chat.sc5.yahoo.com/v43/yacscom.cab

[{41F17733-B041-4099-A042-B518BB6A408C}]
CODEBASE = http://a1540.g.akamai.net/7/1540/52...pple.com/borris/us/win/QuickTimeInstaller.exe

[RdxIE Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\RdxIE.dll
CODEBASE = http://207.188.7.150/04e49318bba10e9f5d15/netzip/RdxIE6.cab

[HouseCall Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\xscan53.ocx
CODEBASE = http://a840.g.akamai.net/7/840/537/2002112801/housecall.antivirus.com/housecall/xscan53.cab

[CCMPGui Class]
InProcServer32 = C:\WINDOWS\System32\ccmp392.dll
CODEBASE = http://64.124.45.181/chaincast/proxy/CCMP.cab

[Update Class]
InProcServer32 = C:\WINDOWS\System32\iuctl.dll
CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37591.5455555556

[CBrowser Class]
InProcServer32 = C:\WINDOWS\System32\MINIBR~1.DLL
CODEBASE = http://www.streamingfaith.com/common/mbrowser/MINIBrowser.CAB

[Praize]
CODEBASE = http://www.praize.com/toolbar/praizebar.cab

[RdxIE Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\ie_grokster.dll
CODEBASE = http://www.grokster.com/rdx/RdxIE.cab

[Microsoft Office Tools on the Web Control]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\OUTC.DLL
CODEBASE = http://officeupdate.microsoft.com/TemplateGallery/downloads/outc.cab

[McFreeScan Class]
CODEBASE = http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/1,4,0,4238/mcfscan.cab

[MSN Chat Control 4.5]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\MSNChat45.ocx
CODEBASE = http://sc.communities.msn.com/controls/chat/msnchat45.cab

[Zoom Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\ZActiveX.dll
CODEBASE = http://www.zoomify.com/download/zoomify204.cab

--------------------------------------------------
End of report, 8,841 bytes
Report generated in 0.141 seconds

StartupList version: 1.31.0
Started from: C:\Download\StartupList.EXE

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only
 
#13 ·
What a proxy does it it takes over your internet connection. Instead of going through the normal ISP routing, you are using their server to connect to various sites. If you didn't install it. I would suggest you open IE and have a look. Remove it and then remove it from Downloaded Program Files.

I would get rid of Grokster too. And remove the files pertaining to it from Dowmloaded Program Files.

I would also run HijackThis and see what it finds.

I have to leave for a while. Hope you get somewhere with this.


What is the exact name of the acceleration software? And also, is this context menu item on the Internet Explorer context menu?

If so, HijackThis will remove that. But if the program is reinstalling itself, the menu item will be back.
 
#15 ·
The company is called eAcceleration Software and the program is Stop-sign threat scanner.
The Praize toolbar I (thought) I uninstalled. I do have Praize Messenger (it's like Trillian). I've never downloaded a Streaming Faith toolbar. I have no idea where that came from. I have no idea where the Chaincast came from. Is that supposed to be like Winamp or Media Player?
Where do I acquire the HiJackThis that you spoke of?
 
#16 ·
eAccelerator may be installed by another one of these programs you have.

HijackThis is written by Merijn. The same person who authored StartupList

Here's a link. It will make a list. You choose which to remove. It merely lists things. It makes no judgement as to whether or not these are good or bad. You need to read carefully and make the decision of whether or not to let the program "repair"

You seem to have a lot of things which you didn't install.

http://www.spywareinfo.com/files/hijackthis.zip
 
#17 ·
You know this whole mess of posts is one good reason NOT to install all those cutsie little toolbar programs etc.

At least have good backups you can restore from. Just look at all these extra programs that were installed:

stickies.exe
BeatNik.exe
itLoad.exe
MPower.exe
FSScrCtl.exe
ie_grokster.dll
logonstudio.exe
praizebar.cab

And this was after a lot was already removed.

You just can't have that stuff and expect to have a well functioning system. Something is going to bite you eventually. If Microsoft, with all its testing, still doesn't catch all the bugs, do you think they all will?
 
#18 ·
I triple checked to be absolutely certain and Spybot lists eacceleration as a target. So if you are removing it, something is reinstalling it. Let's get your downloaded program files cleaned up. After you run HijackThis and remove the thngs you no longer need. Go to:
C:\WINDOWS\Downloaded Program Files

and be sure all the objects you no longer want in there are removed.
 
#19 ·
If you have a question about what to remove. Do this. After you scan with HijackThis, the scan button will now be named "Save log" Click it.
Post the contents of the log here and someone will help.

Sorry. I am doing three things at once and should have told you this in the previous post.


The bottom line is this. Get your hard drive cleaned up. Remove all the junk you do not want, and some you may think you want. Reboot. Run Spybot again. Reboot.


Then tighten up your Browser Security settings.
 
#21 ·
I'm back:D ! WELL--I did all of that stuff and still found that stupid thing in my right click menu. Also, could not delete "dsshell.dll" from the acceleration folder in my programs (not even in safe mode). So I tried something different. I cut and moved it. Then I rebooted AND IT WAS GONE FROM THE R CLICK MENU!! I then went in, deleted the folder and deleted the dll from where I had moved it. I think I finally got rid of it. I guess that's what I get when trying to get a free anti-virus program. Thank you so much for all your help :D
 
Status
Not open for further replies.
You have insufficient privileges to reply here.
Top