Find and remove adware on Internet Explorer

19-May-1414 Leave a comment

Started getting adware underlined hyperlinks on IE today. This directs you to svr123.com and then on to a web advert

With thanks to http://geekvisit.com/remove-double-underlined-adware-rrfilter

Found in services and msconfig and disabled in both

  1. In RegEdit.exe delete following folder
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RrFilterService64
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\yewimmxqbs64
  2. In Explorer
    %program files (x86)% delete folder Rr Savings
  3. In Explorer
    %program files% delete folder RrFilter
  4. Also in IE > Tools > Manage Add-ons
    Disable Adpeak – RrSavings
    Also More Information – Took a screen shot and noted the ClassID
  5. Searched for the ClassID in RegEdit and deleted it from a few 2-3 places

 

Filed under Viruses and Malware