First, uninstall the Web Search program and WinTools program from Add/Remove
Programs
1) Click on Start, Settings, Control Panel
2) Double click on Add/Remove Programs
3) Find "Web Search Toolbar" and "Win-Tools Easy Installer (By Web Search)"
in the list of installed programs and click on Change/Remove to uninstall
it.
During the uninstall process, you will be presented with several prompts to
guide you through uninstalling the product. Read these carefully to make
sure you are actually choosing to uninstall rather than keep the software.
** Note: I find it particularly funny that after the install, the company
actually pops up a screen telling you its not spyware and guiding you to buy
spyware removal software with what appears to be affiliate links that the
company would profit from. See a screenshot of this advertisement.
5) After rebooting the computer, run HijackThis and remove any of the
leftover lines shown above especially the following lines that do not seem
to be uninstalled completely.
R3 - URLSearchHook: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} -
C:\PROGRA~1\Toolbar\toolbar.dll
O16 - DPF: {87067F04-DE4C-4688-BC3C-4FCF39D609E7} -
http://download.websearch.com/Dnl/T_50024/QDow_AS2.cab
6) Next, open My Computer, Drive C, and double-click on the Program Files
folder
7) Right-click and delete the folder below if it still exists
a.. Toolbar
Also check for the presence of the C:\Program Files\Common Files\Wintools
directory. If this folder still remains you may have to follow the WinTools
uninstall procedure.
8) IBIS WebSearch (websearch.com) should now be completely uninstalled from
your computer.
--
Andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm
"mike" <(E-Mail Removed)> wrote in message
news:38f801c51fa1$402ace30$(E-Mail Removed)...
> xoftspay ware has reported the following spayware on my
> computer which was not found by microsoft antispyware
> vendor: ibis/hunt toolbar
> category: data miner
> object type: registry key
> danger level: high threat
> location: sofeware\northcode inc
> disc: browser hijacker. tracks browser use
>
> vendor: cws.homepage
> category: browser hijacker
> object type: host file item
> danger level: threat
> location: adultfriendfinder.com
> location: c1.zedo.com
> disc: coolwebsearch homepage and
> host stealers
>
>
Similar Threads
