I.E. Available Tool Bar Buttons, Options in tools drop-down menu.

[Steve]

A rogue download put an option in my I.E. Tools menu. The
program was a trojan and is now gone. The menu option
still exists in the Tools drop down menu. It also appears
in the "availble tool bar buttons"list. How do I get rid
of the last vestiges of this program?

 

[carol]

Download HijackThis, free, here:
http://www.spywareinfo.com/~merijn/files/hijackthis.zip

Unzip it to any convenient folder, start it then press
Scan. Click on
SaveLog when it's finished which will create
hijackthis.log. Now click the
Config button, then Misc Tools and click on Generate
StartupList.log which
will create Startuplist.txt

Go to Spyware and Hijackware Removal Support, here:
http://www.spywareinfo.com/forums/index.php?
s=8a236cdf61469fbad3bddbe810be0374&act=SF&f=11

Sign in, then copy and paste both files into a message
asking for
assistance, Someone will answer with detailed
instructions for the removal
of your parasite(s).



In addition to the above, if you don't already have them
here are some
things which will help you defense your systems:

The best way to start is to get Ad-Aware 6.0, Build 181
or later, here:
http://www.lavasoftusa.com/support/download/. Update and
run this regularly
to get rid of most "spyware/hijackware" on your
machine. If it has to fix
things, be sure to re-boot and rerun AdAware again and
repeat this cycle
until you get a clean scan. The reason is that it may
have to remove
things which are currently "in use" before it can then
clean up others.

Another excellent program for this purpose is SpyBot
Search and Destroy
available here: http://security.kolla.de/ SpyBot
Support Forum here:
http://www.net-integration.net/cgi-
bin/forums/ikonboard.cgi. I recommend
using both normally. After fixing things with SpyBot
S&D, be sure to
re-boot and rerun SpyBot again and repeat this cycle
until you get a clean
"no red" scan. The reason is that SpyBot sometimes has
to remove things
which are currently "in use" before it can then clean up
others.

Lastly, you might want to consider installing the
SpywareBlaster and
SpywareGuard here to help prevent this kind of thing from
happening in the
future:

http://www.wilderssecurity.com/spywareblaster.html
(Prevents malware Active
X installs) (BTW, SpyWare Blaster is not memory
resident ... no CPU or
memory load - but keep it updated) The latest version as
of this writing
will prevent installation or prevent the malware from
running if it is
already installed (currently 822 baddies), and it
provides information and
fixit-links for a variety of parasites.
http://www.wilderssecurity.net/spywareguard.html
(Monitors for attempts to
install malware) Both Very Highly Recommended.
==============================================

 

[Ramesh]

Hi Steve,

First option is to run Ad-Aware scan (www.lavasoftusa.com). If the toolbar
entries are not removed still,

ToolbarCop:
http://www.angelfire.com/dragon/sramesh2k/utils/ToolbarCop.exe

Manual Procedure:
Start Registry Editor (Regedit.exe)
Go to the following location and check each GUID sub-key. One of which is
the malware toolbar entry:
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions

Also, check here:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions
{check the values in the right-pane to identify the malware toolbar.)

Spot the entry and delete the appropriate key (backup the registry first)

--
Regards,
Ramesh
AOL: SRamesh2k

«·´`·.(*·.¸(`·.¸ ¸.·´)¸.·*).·´`·»
«.............. Ramesh ...............»
«·´`·.(¸.·´(¸.·* *·.¸)`·.¸).·´`·»

~ Please reply to newsgroup ~


A rogue download put an option in my I.E. Tools menu. The
program was a trojan and is now gone. The menu option
still exists in the Tools drop down menu. It also appears
in the "availble tool bar buttons"list. How do I get rid
of the last vestiges of this program?