I'm posting due to the fact there are some tech savvy members of this forum, also with the oft chance someone may have some insight into my dilema. Last week I went onto Cnet to download a utility, in addition to the utility I also had 2 other programs install themselves onto my computer unbeknownst to me. One I was able to completely delete, the other I've manually removed I'd guess about 98% of, it's seemingly not posing a dire threat, however I need to try and wipe the rest of it off my system because the more these things fester, the deeper in shit you'll stand. It is the 'iminent virus', also known as the iminent toolbar virus. It's a browser highjacker and quite a nusance, certainly haven't heard anything encouraging with respect to it's temper.
Anyhow, and here lies my question. I'm taken it out of my start-up programs, deleted it from the registry and several underlying sub-directories. I've blocked it from my browsers, deleted it as an add-on/browser extension and wiped all the cookies clean, it does however still exist in the title bar of internet explore but the page doesn't load becauuse of the block. I also got an unwanted pop up yesterday which shows it can still rear it's ugly head. But the fact that the link is present in the search bar makes it impossible to use the browser, this is the link: search[dot]iminent[dot] com / ? appId = E9809F5C-7C0A-485D-8559-0727196A76C5 It is no longer effecting Chrome or Firefox. Seamonkey, which is my main browser, never had any alterations or redirects, only cookies showed up originally which I've since blocked, it does not seem to have effected Seamonkey.
At any rate here is my question, I found a plausable last bit of clean up within' the registry but am a tad confused. I've included the screen shots 'CLSID', 'Elevated Policy', and 'TypeLib'. The instuctions are to remove 'random numbers' in those directories, well as you can see there are tons of random numbers, I certainly am unwilling to delete all of them at risk of really sinking the ship. I think it's safe to say the link is called from this string 'E9809F5C-7C0A-485D-8559-0727196A76C5', however I can't locate that within' the registry.
Just looking for some thoughts on the matter, I'm certain everyones gone through a trick bag like this at some point. Problem is finding on-line help is really hard, the majority of the fix's are scams to get you to buy removal tools that may or may not work. In the meantime, fuck Cnet, what a bullshit site.
