Re: toolbar virus???

From: John W. (jwilfong_at_noaolspam.com)
Date: 07/16/04 

Date: 15 Jul 2004 16:41:14 -0700

William Meyer wrote:

> On 07/02/04, Iman L Crawford said:
>
> > Get adaware, spybot, and CWSShredder. Run all of them to clean up
> > your machine and then ditch IE. Even the homeland security
> > department has recommended not using it anymore.
>
> I finally got HiJackThis, and it located the evil registry entry that
> kept reviving the toolbar. Nothing, though, has so far been able to
> discover what keeps hijacking the home page setting.

I was having some similar problems on my kids laptop. Turned out to be
synchronization. A website somehow installed itself to be saved offline
and resync'd itself at 8:00am every morning. Just when I thought I had
everything cleaned up, there it was again.

This is everything I did to clean up the infestation...

Go to McAfee and download their CleanBoot 1.0 Beta. This allows you to
create a CD and boot from it. It then scans your hard drive for
trojans. Worked great. Beta is free. I believe I found it in the
download section.

Run Ad-Aware and any other tools you like. I found NoAdWare to work
good for me on removing toolbars. There is a link to download it here:
http://www.free-web-browsers.com/remove-toolbar.shtml It requires a
registration fee to actually remove what it finds. It provides a list
of what it found and where it is, whether in the registry or in a
folder. What I did was use this list and manually deleted what it
found. If you have a large infestation you may just want to pay the $29
(??? can't remember for sure) and let it do it. I'm sure your time is
worth more than this small amount.

In IE go to Tools/Synchronize and look what may be there. Click on
anything suspicious and click properties. In the resulting dialog
uncheck the sync checkbox.

Now go to Tools/Internet Options select the Advanced tab and uncheck
anything that says 'Install on demand ...' and 'Enable offline items to
by synchronized...'.

Finally to make sure something isn't coming or going without me knowing
it I also installed ZoneAlarm. It has been catching a ton of popups,
ads, web bots, private headers.

My kids laptop now works great again. 

-- 
-john
"The worst bankrupt in the world is the person who has
lost his enthusiasm."
-- H.W. Arnold

Relevant Pages

  • Re: Vista update KB938371 fails to install. error code 80073715
    ... The "reg delete" statement returned the message "specified registry entry not found" or words to that effect. ... After rebooting, I tried again to install KB 938371, once through Windows update and once through running the downloaded installer package. ... Then the download appears to be failing, ...
    (microsoft.public.windowsupdate)
  • Re: As I use Internet Explorer I get this pop up-
    ... Download and install the Flash Player and Shockwave Players from the sites I ... Microsoft has these suggestions for Protecting your computer from the ... keep it clean,secure and running at its top performance mark. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: System Mechanic 6
    ... >>I have your list and go through it regularly, but it doesn't clean the ... >>> I'll mainly work around Windows XP, as that is what the bulk of this ... >>> performing a full install of the operating system and all applications. ... Then there is a direct download site. ...
    (microsoft.public.windowsxp.perform_maintain)
  • RE: How do I restore or recover my system to out of box state?
    ... you can learn how to navigate thru your XP machine and clean the bugs and the ... Then download, install and immediately update these three programs before ... How to download and install HiJackThis: ...
    (microsoft.public.windowsxp.help_and_support)
  • RE: Send error message
    ... Photos and documents, nothing better than clean? ... perform a clean install, but you need to delete all partitions and create new ... download an Anti-Virus and a firewall from either: ... I saw your Post in the Forum, try to uninstall the java Script I noticed you ...
    (microsoft.public.windowsxp.help_and_support)