Internet Explorer and unwanted Toolbar (Windows 2000)

[Guest]

Everytime I run IE6 I get what appears to be a toolbar appear at the bottom
of my screen with various internet search options; dating,creatid,travel,
computers etc. The website running this is
http://searchweb2.com/passthrough/newpass2.html


I have added this address to my garbage can in Internet Security, I have run
adware scan but it returns every time I run IE6, it is driving me crazy.
There are no buttons on what appears to be a toolbar. It remains on the
screen even when I close IE6, the only way to remove it is to log off and log
on to the computer again.

I have disabled the "Enable third party browser extensions" settings in
Internet advanced settings.

Can anybody help a very frustrated user?


Thanks

Bill Partridge

 

[Jon Kennedy]

If you go here - http://www.searchweb2.com/ - and click on Help at the
bottom, you'll see this mess is powered by Lop.com. See this site for
possible specific removal: http://inetexplorer.mvps.org/data/lop.htm

If no joy.....

Use Ad-Aware, MSAS and/or Spybot Search & Destroy to remove it.

Microsoft Anti-Spyware (beta)
http://www.microsoft.com/athome/security/spyware/software/default.mspx
Ad-Aware: http://www.lavasoftusa.com/
Spybot: http://www.safer-networking.org/en/index.html
Good sites on how to install and use Spybot -
http://www.safer-networking.org/en/tutorial/index.html
http://tomcoyote.com/SPYBOT/index1.php

Also download a winsock repair tool, to have just in case cleaning up
anything found breaks it -

Winsock repair tools:
LSPFix- all versions of Windows http://www.cexx.org/lspfix.zip
Winsock2 Fix- Win98, ME
http://www.bu.edu/pcsc/internetaccess/winsock2fix.html
LavaSoft- all versions of Windows-
http://digital-solutions.co.uk/lavasoft/whndnfix.zip

More information here:
http://www.spywareinfo.com/
http://inetexplorer.mvps.org/tshoot.html
http://www.doxdesk.com/parasite/ - runs a little script when loading page to
check for common parasites

If no joy, in IE go to Tools...Internet Options...Advanced tab, Browsing
section, uncheck "Enable third-party browser extensions", click Apply, click
Okay, reboot. If that solves your problem, then more troubleshooting is
needed to find out exactly which program, or Browser Helper Object (BHO) is
causing this problem. You don't want to leave it at that, as some BHOs are
useful or necessary - like Adobe Acrobat for reading .pdf files or an
essential component of Norton AV. Get BHODemon -
http://www.definitivesolutions.com/bhodemon.htm - read all about BHOs.
Disable all items, and then gradually replace one or two at a time to narrow
down the culprit.

Or if you have IE 6 SP-2 you can do this within the browser:
How to manage Internet Explorer add-ons in Windows XP Service Pack 2
http://support.microsoft.com/default.aspx?scid=kb;en-us;883256

If all the above fails, then the problem could be something new that the
spyware cleaners above don't have in their databases yet. In that case....
HijackThis direct download:
http://www.spywareinfo.com/~merijn/files/hijackthis.zip
Tutorial on how to use HijackThis:
http://www.spywareinfo.com/~merijn/htlogtutorial.html
Then post it's output log to the forum here for analysis and feedback by the
parasite experts:
http://www.spywareinfo.com/forums/
Or the other HijackThis Logs forums listed here:
http://www.spywareinfo.com/~merijn/forums.html

Or try this program to get some of the most nasty malware:
CWShredder direct download:
http://aumha.org/downloads/cwshredder.zip

An alternate resource for all of this and more:
http://www.aumha.org/secure.htm

 

[Don Varnau]

Hi Bill,
Have you installed Messenger Plus (not a Microsoft program) from
http://www.msgplus.net/ ?

If so, see these instructions
http://www.msghelp.net/showthread.php?tid=21598

If Messenger Plus is not installed, you should go to
Dealing with Unwanted Spyware and Parasites:
http://mvps.org/winhelp2002/unwanted.htm
Download, update and run Ad-aware and Spybot. They probably won't remove
this, but may remove other malware. Download HijackThis and post a log to
the appropriate forum at one of these sites:
Look for the proper forum and an "Important- Read This First" message
so that you follow proper procedure.

* HijackThis Quick Start http://www.tomcoyote.org/hjt/#Top

http://castlecops.com/forums.html
http://tomcoyote.com/forums/
http://www.bleepingcomputer.com/forums/
http://forums.spywareinfo.com/
http://www.spywarewarrior.com/index.php
http://forum.aumha.org/viewforum.php?f=30

Hope this helps,
Don
[MS MVP- IE]

 

[Frank Saunders, MS-MVP OE]

Everytime I run IE6 I get what appears to be a toolbar appear at the
bottom of my screen with various internet search options;
dating,creatid,travel, computers etc. The website running this is
http://searchweb2.com/passthrough/newpass2.html


I have added this address to my garbage can in Internet Security, I
have run adware scan but it returns every time I run IE6, it is
driving me crazy. There are no buttons on what appears to be a
toolbar. It remains on the screen even when I close IE6, the only way
to remove it is to log off and log on to the computer again.

I have disabled the "Enable third party browser extensions" settings
in Internet advanced settings.

Can anybody help a very frustrated user?


Thanks

Bill Partridge

Also, ToolbarCop:
http://www.mvps.org/sramesh2k/toolbarcop.htm

--
Frank Saunders, MS-MVP OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/security/protect/default.aspx
http://defendingyourmachine.blogspot.com/