SearchWWW

[Guest]

I posted on here some time ago asking for advice on how to remove
http://vbs.www.searchwww.com from my computer and was directed to
instructions on http://www.spy-bot.net/searchwww.asp. Only trouble is I got
to a certain point and got an error message I have no idea what to do about!!


I got as far as:

"From 'Downloaded Program Files' in the Windows folder, right-click the
'{FFFFFFFFFFFF-FFFF-FFFF-FFFFFFFF}' entry entry and remove it."

....but when I follow the next lot of instructions:

This does not actually get rid of the software, so open a DOS command prompt
window (from Start->Programs->Accessories) and enter the following commands:

cd "%WinDir%\System"
regsvr32.exe /u ietoolbar.dll

I get an error (LoadLibrary ("ietoolbar.dll") failed - the specified module
could not be found), so I haven't even been able to go as far as restarting
the computer to be able to delete ietoolbar.dll, ietoolbar.htm and popup.wav
from the System32 folder.

Can anyone tell me what I'm doing wrong and what I need to do do get rid of
it (it's extremely irritating!!). I've tried contacting Spybot but have not
had a reply.

Thanks.

 

[Wesley Vogel]

ietoolbar.dll is a CoolWebSearch parasite variant.

Get CWShredder... The tool specially made to remove the CoolWebSearch
spyware/hijacker.
http://aumha.org/freeware/freeware.php#cwshred

Download, install, run, update and run again. You must have the latest
updates. Without updates, you have a gun without ammo.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Guest]

Thanks for the advice. I did as suggested but it didn't find VBS, just said
CoolWebSearch wasn't found.

Can you suggest anything else that might worl for me?

Thanks.

 

[Wesley Vogel]

Do a Search on your machine for ietoolbar.dll

HOW TO: Search For Hidden Or System Files In Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;302347

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Guest]

Thanks for the suggestion. I tried it a few times but that file wasn't
found. Maybe because I seem to remember part of the instructions on the
Spybot page said to remove it by going to the DOS prompt?

Do you have any other ideas?

Thanks for your help.

 

[Wesley Vogel]

Look for ietoolbar.dll, ietoolbar.htm and popup.wav in the System32 folder.
Delete them if found.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Guest]

Thanks. Couldn't fine those files though (they were other files the original
instruction on the spybot site got me to delete I think).

 

[Wesley Vogel]

Is your homepage still hijacked?

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Guest]

My homepage has always been fine, in that it comes up correctly every time I
log on. The annoying thing about this is that every so often it opens a new
page which has 'searchwww...' on it. Sometimes it even comes up when I'm not
even on the internet and then my 'dial-up' connection flashes up so I could
log on if I wanted to. Very irritating...

 

[Wesley Vogel]

4) HijackThis
http://www.spywareinfo.com/~merijn/downloads.html

4a) HijackThis (direct download)
http://aumha.org/downloads/hijackthis.zip

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Guest]

I tried that and haven't had any problems since, so I think we've sorted
this. Thanks

 

[Wesley Vogel]

Glad to hear it.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In