Fighting Spyware, Malware and Adware one File at a Time.
Navigation Links

Database of Spyware Home

About the Project

View the Database

Forums

Database of Spyware Site Map

Terms of Use

Twain-Tech

Overview

Alias

 Adware/MultiMPP [Panda], Adware/Twain-Tech [Panda], Spyware/BetterInet [Panda], Trojan.Win32.Keyhost.e (Kaspersky AV), Adware-Searchcentrix [McAfee], Twain-Tech adware, Win32/Spy.BiSpy.C trojan [Eset],

Category

 Adware: Software that displays popup/popunder ads when the primary user interface is not visible or which do not appear to be assocaited with the product.

Browser Helper Object:  (BHO). A component that Internet Explorer will load whenever it starts, shares IE's memory context, can perform any action on the available windows and modules. A BHO can detect events, create windows to display additional information on a viewed page, monitor messages and actions. Microsoft calls it "a spy we send to infiltrate the browser's land." BHOs are not stopped by personal firewalls, because they are seen by the firewall as your browser itself. Some exploits of this technology search all pages you view in IE and replace banner advertisements with other ads. Some monitor and report on your actions. Some change your home page.

 

Origins

 

Author

 Www.twain-tech.com

Email

 techsupport@twain-tech.com

URL

 http://www.twain-tech.com

Programming Language

 Visual C

Date of Origin

 December, 2003
 

Detection and Removal

Manual Removal

 If you want to uninstall, you can do so easily through the add/remove function in your control panel. You can access your control panel by going to:
  • 1. Start (typically, the button in the bottom left of your screen)
  • 2. Choose SETTINGS
  • 3. Choose CONTROL PANEL
  • 4. Choose ADD/REMOVE PROGRAMS
  • 5. Select twain-tech
  • 6. Click on ADD/REMOVE

    In the absence of an entry in ADD/REMOVE PROGRAMS please use on of the following methods:

    For Windows98 and WindowsXP users:

  • a) To permanently disable the software click "Start" and then "Run" and type the following command which unregisters the software: regsvr32 c:\windows\twaintec.dll "
  • b) To completely remove the software: reboot and then Find and Delete the file mxtarget.dll. For Windows2000, WindowsME and WindowsNT users:
  • a) To permanently disable the software click "Start" and then "Run" and type the following command which unregisters the software: "regsvr32 c:\winnt\twaintec.dll "
  • b) To completely remove the software: reboot and then Find and Delete the file twaintec.dll.

    •  Stop Running Processes:

    Kill these running processes with Task Manager:



    Remove Autorun Reference:

    Go To the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run


    If you find the value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\oyyilj8kl, delete it and reboot the machine immediately.

    If you find the value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\xgn, delete it and reboot the machine immediately.



    Unregister DLLs:

    Unregister these DLLs with Regsvr32, then reboot:



    Clean Registry:

    Remove these registry items (if present) with RegEdit:



    Remove Files:

    Remove these files (if present) with Windows Explorer:



     
    Tunnel  TunnelingwithSingleStepMode  TurboDownload  TurmoilMagazine  TurningyourMailBomberintoaICQPagerBomber  Twain-Tech  TwistedHumor  Twister2000  Type_Win32  U-Boot  
     
    Site Map 2006 © Copyright DatabaseofSpyware.com. All rights reserved. Terms of Use
    Another Proud Thor Schrock Development