new toolbars in internet explorer.

  • Thread starter Thread starter Bernie
  • Start date Start date
B

Bernie

I see new toolbars in internet explorer that I didn't install. I ran
spysweeper and it cleaned out the spyware and adware that it found but I
still see the unfamiliar toolbars. How do I get rid of them for good?
 
1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (personal free version)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download sysclean.com and place it in that directory.
Dowload the signature files (pattern files) by obtaining the ZIP file.
For example; lpt228.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) Update Adware with the latest definitions.
3) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) If you are using WinME or WinXP, create a new Restore point


* * * Please report your results ! * * *

Dave





| I see new toolbars in internet explorer that I didn't install. I ran
| spysweeper and it cleaned out the spyware and adware that it found but I
| still see the unfamiliar toolbars. How do I get rid of them for good?
|
|
 
When I run system clean it gives me a string of errors when I click view log
that access denied. An error occured while assessing <folder>
 
Do you understand how to use Adaware ?

Did if flag suspected malware in; the registry, with cookies, and executable files ? If it
did you have Adaware actually remove them ?

Dave





| After running adaware, the strange toolbars are still in internet explorer
|
|
 
And you still have toolbars ?

Can you post a, demonstrative, depictional JPEG ?

Dave



| Yes, adaware removed and quarantined all the malware it found
| | > Do you understand how to use Adaware ?
| >
| > Did if flag suspected malware in; the registry, with cookies, and
| > executable files ? If it
| > did you have Adaware actually remove them ?
| >
| > Dave
| >
| >
| >
| >
| >
| > | > | After running adaware, the strange toolbars are still in internet
| > explorer
| > |
| > |
| >
| >
|
|
 
Yea, I don't know why sysclean doesnt work though. It gives me errors.
Access denied. It couldn't access <filename>
 
Some files will have their respective File Handles open and thus can't be opened for a scan.
For example;
"C:\Documents and Settings\lipman\NTUSER.DAT"

Dave




| Yea, I don't know why sysclean doesnt work though. It gives me errors.
| Access denied. It couldn't access <filename>
|
| | > And you still have toolbars ?
| >
| > Can you post a, demonstrative, depictional JPEG ?
| >
| > Dave
| >
| >
| >
| > | > | Yes, adaware removed and quarantined all the malware it found
| > | | > | > Do you understand how to use Adaware ?
| > | >
| > | > Did if flag suspected malware in; the registry, with cookies, and
| > | > executable files ? If it
| > | > did you have Adaware actually remove them ?
| > | >
| > | > Dave
| > | >
| > | >
| > | >
| > | >
| > | >
| > | > | > | > | After running adaware, the strange toolbars are still in internet
| > | > explorer
| > | > |
| > | > |
| > | >
| > | >
| > |
| > |
| >
| >
|
|
 
If you are using your ISP News Server, don't.

Use; news://msnews.microsoft.com/microsoft.public.windowsxp.general
It allows attachments.

Otherwise you can post in... alt.binaries.comp.virus
And reference that binary post here.

Dave



| But all the files have access denied.
|
| | > Some files will have their respective File Handles open and thus can't be
| > opened for a scan.
| > For example;
| > "C:\Documents and Settings\lipman\NTUSER.DAT"
| >
| > Dave
| >
| >
| >
| >
| > | > | Yea, I don't know why sysclean doesnt work though. It gives me errors.
| > | Access denied. It couldn't access <filename>
| > |
| > | | > | > And you still have toolbars ?
| > | >
| > | > Can you post a, demonstrative, depictional JPEG ?
| > | >
| > | > Dave
| > | >
| > | >
| > | >
| > | > | > | > | Yes, adaware removed and quarantined all the malware it found
| > | > | | > | > | > Do you understand how to use Adaware ?
| > | > | >
| > | > | > Did if flag suspected malware in; the registry, with cookies, and
| > | > | > executable files ? If it
| > | > | > did you have Adaware actually remove them ?
| > | > | >
| > | > | > Dave
| > | > | >
| > | > | >
| > | > | >
| > | > | >
| > | > | >
| > | > | > | > | > | > | After running adaware, the strange toolbars are still in
| > internet
| > | > | > explorer
| > | > | > |
| > | > | > |
| > | > | >
| > | > | >
| > | > |
| > | > |
| > | >
| > | >
| > |
| > |
| >
| >
|
|
 
Sysclean does not work at all. It gives me access denied throughout the log.
I logged in as an administrator in safemode, and followed the instructions
you provided.
 
How can I post the demonstrative jpeg? Sysclean doesn't work at all. It
gives me access denied for all the things it scans although I logged in as
an administrator in safe mode?
 
What website can I go to to send the picture?
Bernie said:
How can I post the demonstrative jpeg? Sysclean doesn't work at all. It
gives me access denied for all the things it scans although I logged in as
an administrator in safe mode?
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Back
Top