First, uninstall the Web Search program and WinTools program from Add/Remove
Programs
1) Click on Start, Settings, Control Panel
2) Double click on Add/Remove Programs
3) Find "Web Search Toolbar" and "Win-Tools Easy Installer (By Web Search)"
in the list of installed programs and click on Change/Remove to uninstall
it.
During the uninstall process, you will be presented with several prompts to
guide you through uninstalling the product. Read these carefully to make
sure you are actually choosing to uninstall rather than keep the software.
** Note: I find it particularly funny that after the install, the company
actually pops up a screen telling you its not spyware and guiding you to buy
spyware removal software with what appears to be affiliate links that the
company would profit from. See a screenshot of this advertisement.
5) After rebooting the computer, run HijackThis and remove any of the
leftover lines shown above especially the following lines that do not seem
to be uninstalled completely.
R3 - URLSearchHook: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} -
C:\PROGRA~1\Toolbar\toolbar.dll
O16 - DPF: {87067F04-DE4C-4688-BC3C-4FCF39D609E7} -
http://download.websearch.com/Dnl/T_50024/QDow_AS2.cab
6) Next, open My Computer, Drive C, and double-click on the Program Files
folder
7) Right-click and delete the folder below if it still exists
a.. Toolbar
Also check for the presence of the C:\Program Files\Common Files\Wintools
directory. If this folder still remains you may have to follow the WinTools
uninstall procedure.
8) IBIS WebSearch (websearch.com) should now be completely uninstalled from
your computer.
<(E-Mail Removed)> wrote in message
news:03fc01c50348$9c42f690$(E-Mail Removed)...
> Bill, I am having a hard time removing a spyware called
> IBIS toolbar. There is 3 registry entires that cannot be
> removed.
>
> Thanks a lot.
>>-----Original Message-----
>>It isn't well suited to multi-user situations. But if
> you want to run it as
>>an administrator to get a specific situation cleaned up,
> I think it'd be
>>fine to try it out.
>>
>>I did have the "runaway errors.log file" hit on a Windows
> 2000 server, so
>>I'd keep an eye on that file which is in the install
> directory. (It can
>>grow fairly rapidly and will fill the partition if given
> the chance,
>>apparently.)
>>
>>If you say more about the nature of the beast, you might
> get pointers to
>>cleanup routines.
>>--
>>FAQ for MS AntiSpy
> http://www.geocities.com/marfer_mvp/FAQ_MSantispy.txt
>>
>>"Wally" <(E-Mail Removed)> wrote in
> message
>>news:20b701c5033d$1f847530$(E-Mail Removed)...
>>> Have anyone try to install this on a Citrix server
> running
>>> on Windows 2000 server? One of my server (I know we
> should
>>> not browse with it) got hit by spyware that I am having
> a
>>> hard time to remove. I tried using Ad-aware and Spybot,
>>> but it did not fix my problem.
>>>
>>> Any known issues with Citrix server or Windows 2000
>>> Terminal Server?
>>>
>>> Thanks.
>>
>>
>>.
>>