# E2Give **URL:** \ **Category:** Factual Questions\ **Created:** [April 27, 2006, 5:14pm UTC](https://boards.straightdope.com/t/e2give/354476 "2006-04-27T17:14:46Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![UncleBeer](https://avatars.discourse-cdn.com/v4/letter/u/977dab/32.png) [@UncleBeer](https://boards.straightdope.com/u/UncleBeer)\ **Post date:** [April 27, 2006, 5:14pm UTC](https://boards.straightdope.com/t/e2give/354476/1 "2006-04-27T17:14:46Z")
Does _anybody_ know how to remove this **&%$%(_&^_&^** piece of **_(&^_&^)#%@#** from a Windows XP Pro machine? Things tried already: 1. Ad-Aware 2. MS Anti-Spyware 3. Manually delete all registry keys containing iebhos.dll 4. Unregister it using REGSVR32 in a command window This damned this apparently has the ability to mutate its process name to some random collection of characters on startup. And when it is removed thru either Ad-Aware or the MS Anti-Spyware utility, it somehow hides its source and re-installs itself within moments - despite telling MS Anti-Spyware to block the installation. I’ve spent about 4 hours today trying to kill this **&_^%_^%(_^$$%(%(_()** ---
**Author:** ![Whack-a-Mole](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/whack-a-mole/32/141_2.png) [@Whack-a-Mole](https://boards.straightdope.com/u/Whack-a-Mole)\ **Post date:** [April 27, 2006, 5:34pm UTC](https://boards.straightdope.com/t/e2give/354476/2 "2006-04-27T17:34:48Z")
Try the following: > [@](#): > > e2give manual removal: > Kill processes: > ei.exe, filgmo.exe, pi1.exeprutsct.exe, prutpct.exe, pruttct.exe, ptech.exe, skytown.exe > Help: how to kill malicious processes > > Delete registry values: > HKEY\_CURRENT\_USER\Softwae\PTech > HKEY\_LOCAL\_MACHINE\SOFTWARE\E2G > HKEY\_CLASSES\_ROOT\IeBHOs.Control > HKEY\_CLASSES\_ROOT\IeBHOs.Control.1 > HKEY\_CLASSES\_ROOT\AppID\IeBHOs.DLL > HKEY\_CLASSES\_ROOT\AppID{3B99F202-145A-4E5A-AC7B-88A36910BF5E} > HKEY\_CLASSES\_ROOT\CLSID{3643ABC2-21BF-46B9-B230-F247DB0C6FD6} > HKEY\_CLASSES\_ROOT\CLSID{4A5ADB4F-48EE-4840-8DAB-166A239F7E86} > HKEY\_CLASSES\_ROOT\CLSID{4A5B0528-1EE4-4871-8546-AB34DF31E861} > HKEY\_CLASSES\_ROOT\CLSID{4A5B0D43-13BE-4B7C-820E-660CED71CDBF} > HKEY\_CLASSES\_ROOT\CLSID{4A5B482D-E087-43C9-8FD6-0F36510CF2B9} > HKEY\_CLASSES\_ROOT\TypeLib{3B99F202-145A-4E5A-AC7B-88A36910BF5E} > HKEY\_LOCAL\_MACHINE\SOFTWARE\Classes\IeBHOs.Control > HKEY\_LOCAL\_MACHINE\SOFTWARE\Classes\IeBHOs.Control.1 > HKEY\_LOCAL\_MACHINE\SOFTWARE\Classes\AppID\IeBHOs.DLL > HKEY\_LOCAL\_MACHINE\SOFTWARE\Classes\AppID{3B99F202-145A-4E5A-AC7B-88A36910BF5E} > HKEY\_LOCAL\_MACHINE\SOFTWARE\Classes\CLSID{3643ABC2-21BF-46B9-B230-F247DB0C6FD6} > HKEY\_LOCAL\_MACHINE\SOFTWARE\Classes\TypeLib{3B99F202-145A-4E5A-AC7B-88A36910BF5E} > HKEY\_LOCAL\_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{3643ABC2-21BF-46B9-B230-F247DB0C6FD6} > HKEY\_LOCAL\_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\e2g plugin > Help: how to remove registry entries > > Unregister DLLs: > e2gbho.dll, iebhos.dll > Help: how to unregister malicious DLLs > > Delete files: > ei.exe, filgmo.exe, pi1.exeprutsct.exe, prutpct.exe, pruttct.exe, ptech.exe, skytown.exe, e2gbho.dll, iebhos.dll > Help: how to remove harmful files > > Delete directories: > C:\E2G > C:\Program Files\E2G > C:\Program Files\e2give > > Misc: > The spyware creates randomly named files and registry keys. > > Other programs to remove e2give: > • Spy Sweeper - Review - Tutorial - Download > > SOURCE: [http://www.2-spyware.com/remove-e2give.html](http://www.2-spyware.com/remove-e2give.html) That site also has an automated repair tool but I cannot vouch for it. ---
**Author:** ![UncleBeer](https://avatars.discourse-cdn.com/v4/letter/u/977dab/32.png) [@UncleBeer](https://boards.straightdope.com/u/UncleBeer)\ **Post date:** [April 27, 2006, 5:38pm UTC](https://boards.straightdope.com/t/e2give/354476/3 "2006-04-27T17:38:27Z")
And I just got this piece of e-mail from the E2Give “support” guys. > [@](#): > > Hi, Sorry to hear you are having trouble with it. The E2Give Software application was designed to be easily removed using Windows add/ remove function. If you are having trouble removing it with add/ remove, it usually means that it was deleted or removed by a manual deletion. Since Anti-Spyware and Anti Virus Software do not use the add/ remove function, use of these types of programs to remove E2Give, will only partially delete E2Give. It is also possible that the program was installed under another user login. If this is the case log in under the alternate user login and use add / remove as described below to remove the program. > > To remove the e2give program: > > Method A: > Please close all browser windows and go to the “Add or Remove Programs” > in > the Windows control panel and remove the ‘e2g plug-in’ or the “e2give plug-in”. (note: the program can only be removed via Add or Remove > programs) > Reboot the machine. Check add/ remove to verify E2give is no longer present. > Run you Antivirus/ spyware/ etc. to clean up any remaining e2give remnants in the registry. > That should do it. > > Method B: > If it is not able to be removed from the add/remove programs section of Windows it has become damaged. This can occur sometimes when using either a Anti-Virus or Spyware/ Adware removal software tool to remove the E2Give Software and their method of removal damaged the E2Give Software rather than remove it. This can also occur if a manual deletion of the program only deleted parts of it. I know it might sound silly, but if this happens, the best way to remove it is to re-install it and then remove it again. > > In order for the program to be installed, you MUST DISABLE ALL ANTI SPYWARE AND ANTVIRUS SOFTWARE. If you do not do this the program will not install over the broken version as the anti virus / anti spy ware software will block the installation. If you are not sure how to do this, Contact your software vendor for instructions on how to disable their software. > > download and run the file from the following link > > [http://askearth.com/downloads/AskEarth17.exe](http://askearth.com/downloads/AskEarth17.exe) > > This should perform a new and complete installation of the E2Give Program, overwriting the damaged version. Once Installed, refer back to Method A shown above Remember to re-enable your anti virus / ant spyware software after removal and reboot. > > Method C: > One other possibility is the program was downloaded from another user’s account. If that is the case, try logging on to each user account on the computer and remove it from there following the instructions in Method A shown above… > > I hope this helps you. Please let me know how it goes. > > Customer Service Anybody got any guesses on well this might work? I gotta tell ya, I’m _way_ reluctant to attempt an install of something else that these fuckers recommend. Particularly when I’ve already tried allowing one install that MS Anti-Spyware strongly recommended I block. I’m downloading Hi-Jack and Spybot right now - which by the way I’m getting at a whopping 4.5KB/sec. Fucking hell. Hafta see how those go, I guess. ---
**Author:** ![UncleBeer](https://avatars.discourse-cdn.com/v4/letter/u/977dab/32.png) [@UncleBeer](https://boards.straightdope.com/u/UncleBeer)\ **Post date:** [April 27, 2006, 5:41pm UTC](https://boards.straightdope.com/t/e2give/354476/4 "2006-04-27T17:41:08Z")
> [@Whack-a-Mole](#): > > Try the following: Yep. Got that same list from [www.spyany.com/program/article\_spy\_rm\_E2Give.html](http://www.spyany.com/program/article_spy_rm_E2Give.html) No joy, but thank you. ---
**Author:** ![UncleBeer](https://avatars.discourse-cdn.com/v4/letter/u/977dab/32.png) [@UncleBeer](https://boards.straightdope.com/u/UncleBeer)\ **Post date:** [April 27, 2006, 5:42pm UTC](https://boards.straightdope.com/t/e2give/354476/5 "2006-04-27T17:42:44Z")
Whoops. That’s not the right URL. This is where I found that list: [www.spywareremove.com/removeE2Give.html](http://www.spywareremove.com/removeE2Give.html) ---
**Author:** ![Whack-a-Mole](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/whack-a-mole/32/141_2.png) [@Whack-a-Mole](https://boards.straightdope.com/u/Whack-a-Mole)\ **Post date:** [April 27, 2006, 5:46pm UTC](https://boards.straightdope.com/t/e2give/354476/6 "2006-04-27T17:46:57Z")
I should note that I highly recommend paying for a spyware remover. I know there are a bunch for free such as Ad-Aware and Spybot but unsurprisingly spyware makers realize the popularity of these and program around them (even had one that specifically disabled AdAware). I know it sucks to think of dropping $30 or more to stop these pests but in my experience it is money well spent given the reality and ubiquitousness of spyware. Personally I use two paid for spyware blockers (Spyware Doctor and Spysweeper). I also have MS-Antispyware. I have noticed my two paid for programs catching different things but between them they have pretty much caught most everything. MS-Antispyware has so far only nabbed one thing the others seemed to have missed. Unlike antivirus software which you should only have one instance of running two anti-spyware programs can live in harmony and I recommend two of some anti-spyware running. Whatever you get be sure to research any paid for anti-spyware. Some anti-spyware is really spyware itself so buyer beware. ---
**Author:** ![UncleBeer](https://avatars.discourse-cdn.com/v4/letter/u/977dab/32.png) [@UncleBeer](https://boards.straightdope.com/u/UncleBeer)\ **Post date:** [April 27, 2006, 5:52pm UTC](https://boards.straightdope.com/t/e2give/354476/7 "2006-04-27T17:52:06Z")
I agree. I think that’s the route I’m heading - buying Spyware Doctor. Thanks for the recommendationI’m just not too keen on buying it to install on my machine here at work - particularly since I’m pretty sure I got this infection when someone else was logged on to it. I’ve used the Internet regularly for about 10 years now, and this is the first time I’ve ever been invaded like this. ---
**Author:** ![UncleBeer](https://avatars.discourse-cdn.com/v4/letter/u/977dab/32.png) [@UncleBeer](https://boards.straightdope.com/u/UncleBeer)\ **Post date:** [April 27, 2006, 7:39pm UTC](https://boards.straightdope.com/t/e2give/354476/8 "2006-04-27T19:39:52Z")
> [@UncleBeer](#): > > I think that’s the route I’m heading - buying Spyware Doctor. So much for that - and my thirty bucks. It detects and removes the thing okay - the current installation anyway. Fucking thing just reinstalls itself. Even tho’ Spyware Doctor says it’s catching the reinstall and “unregistering” that evil “iebhos.dll” file. Wherever this thing is trying to reinstall itself from is damned well hidden. ---
**Author:** ![Whack-a-Mole](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/whack-a-mole/32/141_2.png) [@Whack-a-Mole](https://boards.straightdope.com/u/Whack-a-Mole)\ **Post date:** [April 27, 2006, 8:10pm UTC](https://boards.straightdope.com/t/e2give/354476/9 "2006-04-27T20:10:53Z")
> [@UncleBeer](#): > > So much for that - and my thirty bucks. It detects and removes the thing okay - the current installation anyway. Fucking thing just reinstalls itself. Even tho’ Spyware Doctor says it’s catching the reinstall and “unregistering” that evil “iebhos.dll” file. Wherever this thing is trying to reinstall itself from is damned well hidden. I am not in front of my PC with my Spyware Doctor installed but I think it is Spyware Doctor that can do a scan at boot to remove the baddies that keep coming back. Essentially it runs a scan, romves the spyware, then reboots the machine and before almost anything else happens it runs another scan. In theory this should nab the bad guy before it can do its thing and remove it for good. Of course I may be remembering it wrong and it is Spysweeper that does this but I think I remembered correctly. Worth looking into. ---
**Author:** ![UncleBeer](https://avatars.discourse-cdn.com/v4/letter/u/977dab/32.png) [@UncleBeer](https://boards.straightdope.com/u/UncleBeer)\ **Post date:** [April 27, 2006, 8:43pm UTC](https://boards.straightdope.com/t/e2give/354476/10 "2006-04-27T20:43:08Z")
> [@Whack-a-Mole](#): > > I am not in front of my PC with my Spyware Doctor installed but I think it is Spyware Doctor that can do a scan at boot to remove the baddies that keep coming back. I’ll take a look in the Spyware Doc help. Thanks much, Whack-a-mole. You’ve been very helpful. ---
**Author:** ![Whack-a-Mole](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/whack-a-mole/32/141_2.png) [@Whack-a-Mole](https://boards.straightdope.com/u/Whack-a-Mole)\ **Post date:** [April 27, 2006, 9:13pm UTC](https://boards.straightdope.com/t/e2give/354476/11 "2006-04-27T21:13:46Z")
You might also try starting Windows in [Safe Mode](http://support.microsoft.com/default.aspx?scid=kb;en-us;315222) and then running a Spyware Doctor scan. Safe Mode should prevent the nasty spyware from loading and trying to dodge around your system. The Spyware Doctor scan at startup should achieve much the same thing but this is another route you might try. ---
**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\ **Post date:** [April 27, 2006, 9:42pm UTC](https://boards.straightdope.com/t/e2give/354476/12 "2006-04-27T21:42:36Z")
Persistent recurrence of the same malware means there is some hidden process reinstating it; it will sometimes be the case that in fact _two processes are running, each looking out for, and reinstating the other_ - since you can’t easily kill the two processes simultaneously, this can be infuriatingly difficult to deal with. I would recommend: -download HijackThis from [url=“[http://www.spywareinfo.com/~merijn/downloads.html](http://www.spywareinfo.com/~merijn/downloads.html)”]here -Boot to Safe Mode -Run HijackThis and save a log file -Boot normally and Visit [http://www.hijackthis.de/](http://www.hijackthis.de/) - paste the log file into the web form and click Analyze -It’s pretty good at identifying malware - make a note of the bad stuff -Boot to Safe Mode again -Run HijackThis and use it to remove the offending entries you identified and wrote down earlier. This should kill them all in one fell swoop. ---
**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\ **Post date:** [April 27, 2006, 9:43pm UTC](https://boards.straightdope.com/t/e2give/354476/13 "2006-04-27T21:43:38Z")
:smack: [Fixed Hijackthis link](http://www.spywareinfo.com/~merijn/downloads.html) ---
**Author:** ![UncleBeer](https://avatars.discourse-cdn.com/v4/letter/u/977dab/32.png) [@UncleBeer](https://boards.straightdope.com/u/UncleBeer)\ **Post date:** [April 27, 2006, 10:27pm UTC](https://boards.straightdope.com/t/e2give/354476/14 "2006-04-27T22:27:43Z")
Okay. That helps. I’ve identified the other file that’s reinstalling e2give’s iebhos.dll. It’s iniwin32.dll. But I can’t seem to get rid of that fucker now. It’s always reported as “being in use” when I try to delete it. Do I need to “unregister” it? I’ve tried removing all of the registry keys it seems to be associated with. ---
**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\ **Post date:** [April 27, 2006, 10:31pm UTC](https://boards.straightdope.com/t/e2give/354476/15 "2006-04-27T22:31:43Z")
Booting into Safe mode to do your fixes will probably result in that dll not being loaded, rendering it available for removal. Try the HijackThis thing though - it’s actually a quite easy way to do all these manual changes to registry, startup folder and ini files, all at once, through a GUI. ---
**Author:** ![UncleBeer](https://avatars.discourse-cdn.com/v4/letter/u/977dab/32.png) [@UncleBeer](https://boards.straightdope.com/u/UncleBeer)\ **Post date:** [April 27, 2006, 10:56pm UTC](https://boards.straightdope.com/t/e2give/354476/16 "2006-04-27T22:56:46Z")
I’ve run both MS Anti-Spyware and HijackThis in safe mode. They both get rid of the actuall installation (C:\Program Files\E2G\iebhos32.ddd) in fine fashion, but neither of them will allow me to get rid of the source (C:\Windows\System32\iniwin32.dll). I had high hopes for the Hijack This, but it gives me an “unknown error” trying to remove iniwin32.dll. In the meantime, y’all might find this amusing. It’s the e-mails I’ve exchanged with the E2Give “support” team today. > [@](#): > > I know everything you’re telling me already. When you speak with your developers, you might wanna ask them specifically why this damn thing tries to re-install itself. If one issues a command to remove a piece of software, it should be quite apparent that an automatic and invisible re-install isn’t gonna be desired. Circumventing this by building an automatic and invisible re-install to a piece of software is not the practice of any reputable organization. > > When speaking with your developers, ask 'em what the function of iniwin32.dll is. That’s the file that launches the automatic and invisible re-install. It has no purpose except to re-install iebhos32.dll once it’s been removed. Since it’s not recorded during the install procedure, a normal Windows uninstall of e2give has no effect on it. It’s left in the Windows\System32 folder to reinstall e2give. This is a most reprehensible and despicable practice. > > Finally, go ahead and ask 'em about the random process & key names. That should be an interesting answer. > > -----Original Message----- > From: E2Give Support [[mailto:support@e2give.com](mailto:support@e2give.com)] > Sent: Thursday, April 27, 2006 6:05 PM > To: ‘Robert Seaney’ > Subject: RE: Removing E2Give > > Sorry about the questions. I have to ask them as I do not know you personally. I will have to consult the software developers. I have helped many users remove this app and in my experience, once it is removed, that’s it. The only time that I found it coming back was when a users son had his own log in and the software was installed under that account. > > The software rebuilds itself when it is partially removed. > As far as random process names and registry keys being generated, I did not answer you because I do not know what you are talking about. > You have to disable the anti spy ware because as you pointed out, anti spyware flags our software, thus it will not allow you to re-install it. > > As far as paying for you anti spyware software: 1 - I did not recommend it, nor will I ever recommend it. 2 - Anti Spyware software is usually the cause of uninstall problems, because it hacks up the program. 3 - It did not work. You may want to return it. > > I will have a solution for you tomorrow morning > > -----Original Message----- > From: Robert Seaney [[mailto:rseaney@teamsigma.com](mailto:rseaney@teamsigma.com)] > Sent: Thursday, April 27, 2006 2:42 PM > To: ‘E2Give Support’ > Subject: RE: Removing E2Give > > Yes, of course. C’mon. I’m not some stupid user here; I’ve followed the procedure you gave me - exactly as you suggested. Just tell me where you guys hide the file(s) from which this malicious thing keeps re-installing itself. I > > And I’d really like answers to the other questions I’ve asked. Why is this thing designed to keep re-installing itself? Why does it run under random process names and random registry keys? These are NOT the hallmarks of legitimate software. Nor is the fact that I have to disable any anti-spyware or virus software that may be running. Finally, give me an address where I can send the invoice for the software I purchased attempting to remove your malware. > > I’ve been polite and courteous up to this point. Some that certainly CANNOT > be said for your application. But my patience is at an end. want this > damned thing gone. NOW. > > -----Original Message----- > From: E2Give Support [[mailto:support@e2give.com](mailto:support@e2give.com)] > Sent: Thursday, April 27, 2006 5:31 PM > To: ‘Robert Seaney’ > Subject: RE: Removing E2Give > > Did you reboot after uninstalling > > -----Original Message----- > From: Robert Seaney [[mailto:rseaney@teamsigma.com](mailto:rseaney@teamsigma.com)] > Sent: Thursday, April 27, 2006 1:59 PM > To: ‘E2Give Support’ > Subject: RE: Removing E2Give > > Yes, it was there after following your recommended procedure. It went away after choosing to uninstall, of course. > > -----Original Message----- > From: E2Give Support [[mailto:support@e2give.com](mailto:support@e2give.com)] > Sent: Thursday, April 27, 2006 4:55 PM > To: ‘Robert Seaney’ > Subject: RE: Removing E2Give > > Is the e2give plugin showing up in the add /remove section of the windows control panel. > > -----Original Message----- > From: Robert Seaney [[mailto:rseaney@teamsigma.com](mailto:rseaney@teamsigma.com)] > Sent: Thursday, April 27, 2006 1:25 PM > To: ‘E2Give Support’ > Subject: RE: Removing E2Give > > Quite bluntly, you are entirely incorrect. > > As reluctant as I was to follow your procedure for disabling my fixing the E2Give installation, and then uninstalling it, I went ahead and did it. > My > reluctance proved well-founded. Your procedure does nothing that I can see > > - at least nothing beneficial. It may very well do more harm; I just don’t know yet. This thing is _still_ trying to reinstall itself every few minutes. > > And I’d still like to know, if your E2Give application is as benign as you seem to want me to believe, why is it designed such that it runs under a randomly named process and create randomly named registry keys? > Employing a > practice such as that, it seems to me, is a deliberate and conscious ploy to make removal of the software as difficult as possible. This is certainly not a practice a totally above-board software developer would use. > > -----Original Message----- > From: E2Give Support [[mailto:support@e2give.com](mailto:support@e2give.com)] > Sent: Thursday, April 27, 2006 3:51 PM > To: ‘Robert Seaney’ > Subject: RE: Removing E2Give > > Just like many other programs on the market including such programs as Norton Anti Virus, if the program is hacked at and removed in pieces, it loses some of its original functionality. If you follow the instructions carefully, including and especially the part concerning the disabling of anti virus / anti spyware software, you will be successful in easily removing this app. The anti virus programs that just hack away at the parts of the software are usually the reason for difficulty in removing this app. > > -----Original Message----- > From: Robert Seaney [[mailto:rseaney@teamsigma.com](mailto:rseaney@teamsigma.com)] > Sent: Thursday, April 27, 2006 11:15 AM > To: ‘E2Give Support’ > Subject: RE: Removing E2Give > > \<\\> Doesn’t help at all. And if this thing is designed so that it is “easily removed,” why does it keep re-installing itself? And why does it create randomly named registry keys? And a randomly named process? > > -----Original Message----- > From: E2Give Support [[mailto:support@e2give.com](mailto:support@e2give.com)] > Sent: Thursday, April 27, 2006 12:42 PM > To: ‘r seaney’ > Subject: RE: Removing E2Give > > Hi, Sorry to hear you are having trouble with it. The E2Give Software application was designed to be easily removed using Windows add/ remove function. If you are having trouble removing it with add/ remove, it usually means that it was deleted or removed by a manual deletion. Since Anti-Spyware and Anti Virus Software do not use the add/ remove function, use of these types of programs to remove E2Give, will only partially delete E2Give. It is also possible that the program was installed under another user login. If this is the case log in under the alternate user login and use add / remove as described below to remove the program. > > To remove the e2give program: > > Method A: > Please close all browser windows and go to the “Add or Remove Programs” > in > the Windows control panel and remove the ‘e2g plug-in’ or the “e2give plug-in”. (note: the program can only be removed via Add or Remove > programs) > Reboot the machine. Check add/ remove to verify E2give is no longer present. > Run you Antivirus/ spyware/ etc. to clean up any remaining e2give remnants in the registry. > That should do it. > > Method B: > If it is not able to be removed from the add/remove programs section of Windows it has become damaged. This can occur sometimes when using either a Anti-Virus or Spyware/ Adware removal software tool to remove the E2Give Software and their method of removal damaged the E2Give Software rather than remove it. This can also occur if a manual deletion of the program only deleted parts of it. I know it might sound silly, but if this happens, the best way to remove it is to re-install it and then remove it again. > > In order for the program to be installed, you MUST DISABLE ALL ANTI SPYWARE AND ANTVIRUS SOFTWARE. If you do not do this the program will not install over the broken version as the anti virus / anti spy ware software will block the installation. If you are not sure how to do this, Contact your software vendor for instructions on how to disable their software. > > download and run the file from the following link > > [http://askearth.com/downloads/AskEarth17.exe](http://askearth.com/downloads/AskEarth17.exe) > > This should perform a new and complete installation of the E2Give Program, overwriting the damaged version. Once Installed, refer back to Method A shown above Remember to re-enable your anti virus / ant spyware software after removal and reboot. > > Method C: > One other possibility is the program was downloaded from another user’s account. If that is the case, try logging on to each user account on the computer and remove it from there following the instructions in Method A shown above… > > I hope this helps you. Please let me know how it goes. > > Customer Service > > -----Original Message----- > From: r seaney [[mailto:rseaney@teamsigma.com](mailto:rseaney@teamsigma.com)] > Sent: Thursday, April 27, 2006 7:39 AM > To: [support@e2give.com](mailto:support@e2give.com) > Subject: Removing E2Give > > Please provide me with COMPLETE instructions for removing your software from my computer. Every time I’ve tried to remove it, it returns within minutes. ---
**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\ **Post date:** [April 27, 2006, 11:24pm UTC](https://boards.straightdope.com/t/e2give/354476/17 "2006-04-27T23:24:17Z")
If you can’t remove that DLL after a reboot, sounds like something might still be using it; would you like to run HijackThis again and post your log here? Alternatively, it might just be that you can’t remove it because it is registered; you could try typing: \*\*Regsvr32 /u ininwin32.dll \*\* in a command window ---
**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\ **Post date:** [April 27, 2006, 11:25pm UTC](https://boards.straightdope.com/t/e2give/354476/18 "2006-04-27T23:25:20Z")
It might work even better if you type the filename correctly: \*\*regsvr32 /u iniwin32.dll \*\* ---
**Author:** ![Whack-a-Mole](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/whack-a-mole/32/141_2.png) [@Whack-a-Mole](https://boards.straightdope.com/u/Whack-a-Mole)\ **Post date:** [April 28, 2006, 2:35am UTC](https://boards.straightdope.com/t/e2give/354476/19 "2006-04-28T02:35:14Z")
For programs that stubbornly refuse to being stopped try [Killbox](http://www.softpedia.com/get/Security/Secure-cleaning/Pocket-Killbox.shtml) (aka Pocket Killbox). Very nice utility that forces crap you do not want running to stop no matter what it thinks about it. ---
**Author:** ![RealityChuck](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/realitychuck/32/195_2.png) [@RealityChuck](https://boards.straightdope.com/u/RealityChuck)\ **Post date:** [April 28, 2006, 2:53am UTC](https://boards.straightdope.com/t/e2give/354476/20 "2006-04-28T02:53:09Z")
Here’s the Straight Dope: E2give is a variant of vundo (also called winfixer or vurtumundo). It cannot be removed manually. Don’t believe their tech support: if they’re putting vundo onto your machine, they aren’t interested in helping you (or they are up to a million on the clueless meter). Luckly, there is a repair tool. Even better: it now works in many cases without an expert to interpret your hijackthis log. The tool was developed at [http://www.atribune.org](http://www.atribune.org). I’ve put up a link and instructions at [http://www.siena.edu/antivirus/Spyware/vundo.asp](http://www.siena.edu/antivirus/Spyware/vundo.asp). Give that a try. It seems to work pretty well. However, if it doesn’t, you’ll need to post a hijackthis log somewhere where an expert can analyze it (like the forums at [http://www.spywareinfo.com](http://www.spywareinfo.com). And be careful about buying antispyware software. Most is spyware itself. This site lists which programs are legit: [http://www.spywarewarrior.com/rogue\_anti-spyware.htm](http://www.spywarewarrior.com/rogue_anti-spyware.htm) Note that there are only five antispyware programs listed at “trustworthy” (though there are some clones of these. [Next page](https://boards.straightdope.com/t/e2give/354476.md?page=2)