spyware removal instructions

IWon removal

Spyware IWon Information
Name: IWon
Category: Toolbar
Date: 2005-06-19
Dangerous: Yes
IWon belongs to Toolbar spyware category.
It's presense means that your computer is infected with malicious software and is insecure.
IWon description by publisher:
companyinfo.iwon.com/aboutiwon.html?PG=home&SEC=foot
>> Delete IWon automatically - Download Spyware Doctor

IWon Removal Instructions
Kill the following processes
iwon2ns.exe, i1setup1.exe
Unregister the following DLLs and reboot
i1srchas.dll, iwonbar.dll.
i1ezsetp.dll in Program Files\iwon\installr\1.bin\
npiwon0.dll in Program Files\iwon\iwonbar\1.bin\
Delete these registry entries
HKEY_CLASSES_ROOT\clsid\{10125c2e-6821-4070-b24e-2e992501ad55}
HKEY_CLASSES_ROOT\clsid\{277e1fe1-cf65-11d3-b377-0800460222f0}
HKEY_CLASSES_ROOT\clsid\{4ee301f2-2a6a-4be0-9fbd-97cdaa40e3e4}
HKEY_CLASSES_ROOT\clsid\{58384780-211c-11d4-aeb7-0050dac24e8f}
HKEY_CLASSES_ROOT\clsid\{6d54a7c1-c379-11d3-b377-0800460222f0}
HKEY_CLASSES_ROOT\clsid\{7631768f-511e-41d8-badb-604b0034776b}
HKEY_CLASSES_ROOT\clsid\{c298fb42-e3e2-11d3-adcd-0050dac24e8f}
HKEY_CLASSES_ROOT\clsid\{ca0b9b6d-c2af-11d3-b376-0800460222f0}
HKEY_CLASSES_ROOT\clsid\{ca0b9b71-c2af-11d3-b376-0800460222f0}
HKEY_CLASSES_ROOT\interface\{10125c2d-6821-4070-b24e-2e992501ad55}
HKEY_CLASSES_ROOT\interface\{10125c2f-6821-4070-b24e-2e992501ad55}
HKEY_CLASSES_ROOT\interface\{277e1fe0-cf65-11d3-b377-0800460222f0}
HKEY_CLASSES_ROOT\interface\{4ee301f1-2a6a-4be0-9fbd-97cdaa40e3e4}
HKEY_CLASSES_ROOT\interface\{4ee301f3-2a6a-4be0-9fbd-97cdaa40e3e4}
HKEY_CLASSES_ROOT\interface\{6d54a7c0-c379-11d3-b377-0800460222f0}
HKEY_CLASSES_ROOT\interface\{7deaef88-f913-4750-801e-f3c1059299f1}
HKEY_CLASSES_ROOT\interface\{7deaef8a-f913-4750-801e-f3c1059299f1}
HKEY_CLASSES_ROOT\iwoninstaller.start
HKEY_CLASSES_ROOT\iwontoolbar.iwonnetscapeshutdown
HKEY_CLASSES_ROOT\iwontoolbar.iwonnetscapestartup
HKEY_CLASSES_ROOT\iwontoolbar.settingsplugin
HKEY_CLASSES_ROOT\typelib\{4ee301f0-2a6a-4be0-9fbd-97cdaa40e3e4}
HKEY_CLASSES_ROOT\typelib\{78429873-f771-11d3-ae1d-0050dac24e8f}
HKEY_CURRENT_USER\software\iwon
HKEY_CURRENT_USER\software\iwon\installer\cachedir
HKEY_CURRENT_USER\software\iwon\installer\dir
HKEY_CURRENT_USER\software\netscape\netscape navigator\automation shutdown\iwontoolbar.iwonnetscapeshutdown.1
HKEY_CURRENT_USER\software\netscape\netscape navigator\automation startup\counter
HKEY_CURRENT_USER\software\netscape\netscape navigator\automation startup\iwontoolbar.iwonnetscapestartup.1
HKEY_LOCAL_MACHINE\software\iwon
HKEY_LOCAL_MACHINE\software\iwon\iwonbar\curinstall
HKEY_LOCAL_MACHINE\software\iwon\iwonbar\dir
HKEY_LOCAL_MACHINE\software\iwon\iwonbar\uninstallurl
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{4ee301f2-2a6a-4be0-9fbd-97cdaa40e3e4}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\iwoncopilot\displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\iwoncopilot\publisher
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\iwoncopilot\uninstallstring
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\iwoninstaller\displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\iwoninstaller\uninstallstring
Remove the following files
001dbcf9, i1srchas.dll, iwon.txt, iwon2ns.exe, iwonbar.dll.
i1setup1.exe in Program Files\iwon\installr\
i1ezsetp.dll in Program Files\iwon\installr\1.bin\
files.ini in Program Files\iwon\installr\cache\
iwonplugin0proxy.class, npiwon0.dll in Program Files\iwon\iwonbar\1.bin\
files.ini in Program Files\iwon\iwonbar\cache\
prevcfg.htm in Program Files\iwon\iwonbar\settings\
Remove the following directories
Program Files\iwon
Program Files\iwon\installr\cache

Bookmark IWon page

Visitor Comments on IWon
2006-10-29 06:54:53, Guest:
Get rid of this thing any way you can. i don't know how i got this thing, it should not be allowed!
 Previous Spyware: Remove IWD Simple ICMP Bomber Next Spyware: Remove IWon.com