Help with "prosearching" toolbar

  • Thread starter Thread starter Mary
  • Start date Start date
M

Mary

I have this 2" thick toolbar at the bottom of my screen.
I think it's "prosearching" I see prosearching in front
of my homepage address. Any ideas on how to remove it?
I've tried BHODemon, but it doesn't seem to detect it.
It's also not listed on my toolbar menu.

Thanks!
 
Mary,
A quick google search indicates that the usual tools (CWShredder, Ad-aware,
Spybot) don't remove this.

Go to The Parasite Fight - Quick Fix Protocol:
http://www.aumha.org/a/quickfix.htm Work through the cleaning process then
post a HijackThis log to the forum at
http://forum.aumha.org/viewforum.php?f=30 Let the knowledgeable folks there
help you remove this.

See the security tips and other information at:
Dealing with Unwanted Spyware and Parasites:
http://mvps.org/winhelp2002/unwanted.htm

Don
 
You have some type of Malware/garbage. Do you have
Adaware? If not Download it here:
www.lavasoftusa.com

Check your add/remove programs to see if you have any
suspisious "new" programs. DO NOT uninstall unless you
are sure they are they are garbage programs.

Once you have installed Adaware, check for updates, Set
the program as follows:
General - activate these: "Automatically save log-file"
and "Automatically quarantine objects prior to removal"

Scanning - activate these: "Scan within archives", "Scan
active processes", "Scan registry", "Deep scan
registry", "Scan my IE Favorites for banned sites"
and "Scan my Hosts file"

Tweaks - Scanning Engine - activate this: "Unload
recognized processes during scanning."

Tweaks - Cleaning Engine - activate these: "Automatically
try to unregister objects prior to deletion" and "Let
Windows remove files in use after reboot."

Click "Proceed" to save your settings, then
click "Start", make sure "Activate in-depth scan" is
ticked green then scan your system.

When the scan is finished, the screen will tell you if
anything has been found, click "Next". The bad files will
be listed, right click the pane and click "Select all
objects" - this will put a check mark in the box at the
side, click "Next" again and click "OK" at the prompt "#
objects will be removed. After the scan, Reboot your
computer.

SPYWARE INFO-PROTECT YOUR COMPUTER
http://www.spywareinfo.com/~merijn/
http://www.unwantedlinks.com/intro.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://www.pestpatrol.com/
http://www.aumha.org/
http://secunia.com/
 
Mary said:
I have this 2" thick toolbar at the bottom of my screen.
I think it's "prosearching" I see prosearching in front
of my homepage address. Any ideas on how to remove it?
I've tried BHODemon, but it doesn't seem to detect it.
It's also not listed on my toolbar menu.

Thanks!
Click to expand...

Mary,
"prosearching" is part of the C2Media/Lop family of Spyware Pests.
Info > http://www.doxdesk.com/parasite/lop.html

Remove as already posted, with Ad-aware or SpyBot mind SpyBot is
for advanced users.
Ad-aware http://www.lavasfotusa.com
SpyBot http://www.safer-networking.org

HTH
~Silj

--
siljaline

MS MVP - Windows (IE/OE)
________________________
Anti-Parasite Definition Updates
http://forum.aumha.org/viewforum.php?f=31

(Reply to group, as return address
is invalid - that we may all benefit)
 
Thank you all for your help. FYI, Adware and CWShredder
never could remove it. I'm about to go to that
www.aumha.org site and see what happens. Thanks again!
I'll let you know.
 
Found this in a news message on google.com

Quote.
From: Ray McIntire
Subject: Getting rid of a spyware program called "Once Dead"

View this article only
Newsgroups: comp.security.misc, comp.security.firewalls
Date: 2004-05-09 16:55:04 PST

Hello, my first post to this group:

I've been trying unsuccessfully to rid my machine of the program "Once
Dead.exe". I run Windows XP and IE.

I've gone through SpyKiller, bought the program, and I've not been
successful in getting rid of this pest. I also run Norton Internet
Security 2004.

I see the entry in my registry: HKLM\..\Run: [PeakFork]
C:\PROGRA~1\Rdrview\Once Dead.exe

I remove the entry, and it comes back every time. Whenever I try to
delete the program, it makes IE go to www.prosearching.com for my home
page. So there must be some other place that is driving this. I can
not delete the file itself. I've tried to go back to DOS and use the
attrib command, but it also won't let me change the file.

I'm guessing that the booger is in a .dll someplace.

Can anyone offer me a suggestion? Thanks Much, Ray McIntire, West
Bend, WI
--

Suggest you go to http://www.spywareinfo.com/downloads.php#det
Download "Hijack This!" [freeware] or download direct (below):
http://www.merijn.org/files/hijackthis.zip

If you get a 404 error or Access denied, try:
http://216.180.252.218/~spywareinfo.com/downloads/tools/hijackthis.zip

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates "hijackthis.log")

Next, HijackThis | Config [button] | Misc Tools [button]
Click: Generate StartupList log [button] (generates "startuplist.txt")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, then copy and paste both files in your message.

HijackThis Quick Start Help
http://www.tomcoyote.org/hjt/

The Tutorial if you want to know more about the results or the .log file.
http://www.merijn.org/htlogtutorial.html



Henri Leboeuf
Web page: http://www.colba.net/~hlebo49/index.htm
===
 
Back
Top