Warning on bottom task bar

[michael]

What does;
res://H:\Program~1Toolbar\toolbar.dll/sa mean

Any help please

 

[Bill Sanderson]

This looks like spyware to me--tell us more--in what context does this
appear--what does the warning say?

 

[michael]

This is a Warning Message in an orange outlined box.

Microsoft Antispyware Notice.
An Internet Explorer Change has been Blocked.

Microsoft Antispyware has blocked the Internet Explorer
URL for your Customize Search from being changed.

Current URL;
res://H:\Progra~1Toolbar\toolbar.dll/sa
Blocked URL;
res://H:\Progra~1Toolbar\toolbar.dll/sa

This is a known browser hijack attempt that has

Manage blocked Internet Explorer URLS

All the above are in this Warning Box.

When I click; " Manage blocked Internet Explorer URLS "
another box comes onto desktop to delete the URL/URLS but
nothing is inside the box to delete. Also the orange
warning box appears 3 times from the bottom of the task
bar and then collapses back into the task bar. This only
happens when Win XP Pro starts, ie every time I start
windows.

Thank you for your help,

Michael

 

[Bill Sanderson]

Does the warning name the spyware involved?

If Microsoft Antispyware hasn't taken care of this when you've restarted in
safe mode and done a full, deep scan, I'd recommend looking further.

If you do a google search on toolbar.dll symantec, the first two hits show
different spyware which use this .dll file. You can check those two
articles and see whether their manual removal steps (or, if you are lucky,
an automated removal tool) help.

Alternatively, Trend Micro's online antivirus scanner now detects and
removes spyware--so it might be worth trying:

http://housecall.trendmicro.com

 

[Michael]

I went to trendmicro, did a full scan, nothing found on
any drive ?? I will now try a manual removal.

Michael

 

[Michael]

Hi again,
I have found the Registry hack, and deleted it. Restart
pc no warning from MS Antispyware, all seems OK now.

Thank you very much for your help.

Michael
...................................

 

[Bill Sanderson]

Good work--sorry Microsoft Antispyware didn't do the job in an easier way,
though.