I Cant Get Rid Of This Thing

HazeHaze O RLY? Join Date: 2003-07-07 Member: 18018Members, Constellation
<div class="IPBDescription">And I've only tried for 30 seconds</div> So while I continue to get this bugger out of my computer, I just got a toolbar virus from clicking a link.. how can I get this out of here?
«13

Comments

  • BulletHeadBulletHead Join Date: 2004-07-22 Member: 30049Members
    Aight, tell me more.

    What is it you speak of?

    What OS you on?
    What browser do you use?
    What anti-virus / anti-spam stuff do you have?
  • MedHeadMedHead Join Date: 2002-12-19 Member: 11115Members, Constellation
    edited June 2005
    Run Ad-aware.
    Run Spybot: Search and Destroy.

    If that fails, what's the name of the toolbar?

    EDIT: BulletHead said much the same thing, but I said it better.
  • HazeHaze O RLY? Join Date: 2003-07-07 Member: 18018Members, Constellation
    No anti virus/spam.

    Running Windows

    Its called.. well, ****, its installing a whole bunch of stuff on my computer against my will as we speak. I can hardly do anything, shes running full speed for the iceberg..

    Four bars now, used to be one.

    "elitebar"
    "search"
    "searchforit"
    "searchtoolbar"

    Using internet explorder..
  • MedHeadMedHead Join Date: 2002-12-19 Member: 11115Members, Constellation
    Restart your computer to stop the current installations. Install the programs I mentioned. Run them.
  • HazeHaze O RLY? Join Date: 2003-07-07 Member: 18018Members, Constellation
    Downloading the programs.. restarting ASAP
  • ShoeboxShoebox Join Date: 2004-11-15 Member: 32817Members
    whenever i get radom toolbar crap i go to control panel then add/remove programs and remove anything i know i didnt put on there. i also run adaware/spybot S&D and AVG but since i use Firefox i dont get a whole lot of that crap.
  • HazeHaze O RLY? Join Date: 2003-07-07 Member: 18018Members, Constellation
    Oh my god this thing is a monster. Text is now linked randomly anywhere in the internet. "program" is underlined in every post, a link. Help!! (updating adaware)
  • BulletHeadBulletHead Join Date: 2004-07-22 Member: 30049Members
    edited June 2005
    STOP

    DOWNLOAD MOZILLA

    STOP USING INTERNET EXPLORER

    That will most likely sever this things connection with the internet

    Then, THRU MOZILLA

    www.download.com
    SpyBot Search and destroy 1.03 (or whatever current version is)

    THEN, go to the Trend Micro website, and run an online virus scan

    If I knew where you lived, and you could wait till thursday, I'd come do a much more thoroguh scan myself

    EDIT- also, use cntl alt delete and stop ANY processes EXCEPT SCVHost, Mozilla, and Explorer. Or just boot in safe mode and do what I said
  • HazeHaze O RLY? Join Date: 2003-07-07 Member: 18018Members, Constellation
    Crap, Adaware is fighting the good war.. but the losing war. PRESS ON BUDDY!

    Yes, I've been doing it all.. I'm a fool not to use mozilla earlier, Hell I have firefox right here, WHY WASNT I USING IT!!?

    Epiphany. (sp, but still)

    Help more!
  • ShoeboxShoebox Join Date: 2004-11-15 Member: 32817Members
    yes i HIGHLY recommend Firefox to anyone who doesnt have it.
  • MedHeadMedHead Join Date: 2002-12-19 Member: 11115Members, Constellation
    Yes, whatever you choose, whether it be Mozilla, Firefox, Opera, or even Maxthon, do so as soon as possible. Don't stick with Internet Explorer unless you're fully prepared with spyware and virus scanners. While it's wise - well, pretty much necessary - to have spyware and virus scanners regardless of browser, it's definitely a requirement when using Internet Explorer.

    Remember to check your status bar when clicking on strange links: while not foolproof, you'll have a better chance of catching these things than ignoring the status bar entirely.
  • BulletHeadBulletHead Join Date: 2004-07-22 Member: 30049Members
    There really isn't much more to do...

    How much do you know of what YOU put on there? if you're 99% sure...

    DISCONNECT YOUR CABLE
    This will PERMENENTLY sever this things connection

    Then go to your C drive and delete ANY fold you find suspect (UNLSS IT'S IN A SYSTEM FOLDER eg WINDOWS... dear god help you if you delete that)

    I need more info... and I need to be there to help...

    do you have MSN and can you use Remote Assistance? I've never tried that.. but I may be able to help.
  • HazeHaze O RLY? Join Date: 2003-07-07 Member: 18018Members, Constellation
    Its all down to one folder, "Toolbar" inside my program files. It cant be deleted.. how can I forcibly override the file and take it out?
  • MedHeadMedHead Join Date: 2002-12-19 Member: 11115Members, Constellation
    Make it easier on yourself by clicking the "Date" filter in Windows Explorer. Be prepared to see your system folder near the top of the list: these things like to hide out in there.
  • MedHeadMedHead Join Date: 2002-12-19 Member: 11115Members, Constellation
    <!--QuoteBegin-Haze+Jun 8 2005, 12:47 AM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Haze @ Jun 8 2005, 12:47 AM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> Its all down to one folder, "Toolbar" inside my program files. It cant be deleted.. how can I forcibly override the file and take it out? <!--QuoteEnd--> </td></tr></table><div class='postcolor'> <!--QuoteEEnd-->
    It can't be deleted because it's running. Check MSConfig for any strange programs booting up. Kill it in your Task Manager (doubt that will work). Stop using Internet Explorer (perhaps it will kill the program so you can delete the folder).
  • BulletHeadBulletHead Join Date: 2004-07-22 Member: 30049Members
    edited June 2005
    Ah! Then you go in and mess with it's code

    Open up random files in there and just play with the code

    YOU MUST CLOSE YOUR BROWSER FIRST

    Warning- This could cause serious malfunctions of any toolbars you DO want.

    Also- you could try deleting individual files INSIDE it.

    Like I said, I could do a HELL of a lot more if only I could get to you...

    Where DO you live? Anywhere within 5 hours of Harrisburg PA?
  • RaVeRaVe Join Date: 2003-06-20 Member: 17538Members
    Hmmm my fault I guess?

    First, sever your connection to the internet. This way it won't update.

    After this, check in Program Files > Common Files. There should be quite a few of those somewhere in there.

    Then run Ad-aware, and Spybot S&D for the removal of such annoyances. I know that they get rid of SearchForIt and SearchToolbar IIRC.

    But remember to somehow save this page if you have bad short-term memory. You wouldn't want them to start installing stuff again <!--emo&:p--><img src='http://www.unknownworlds.com/forums/html/emoticons/tounge.gif' border='0' style='vertical-align:middle' alt='tounge.gif' /><!--endemo-->
  • BulletHeadBulletHead Join Date: 2004-07-22 Member: 30049Members
    By The Way

    He MAY have that god awful CoolCookie Web Search...
    I used to have a program to get rid of it, but the updates never came one day... I think the programmer of it (yes, one dude) was hacked and ddosded and god knows what else cause he just vanished <!--emo&:(--><img src='http://www.unknownworlds.com/forums/html/emoticons/sad-fix.gif' border='0' style='vertical-align:middle' alt='sad-fix.gif' /><!--endemo-->
  • HazeHaze O RLY? Join Date: 2003-07-07 Member: 18018Members, Constellation
    <!--QuoteBegin-BulletHead+Jun 7 2005, 11:48 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (BulletHead @ Jun 7 2005, 11:48 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> Ah! Then you go in and mess with it's code

    Open up random files in there and just play with the code

    YOU MUST CLOSE YOUR BROWSER FIRST

    Warning- This could cause serious malfunctions of any toolbars you DO want.

    Also- you could try deleting individual files INSIDE it.

    Like I said, I could do a HELL of a lot more if only I could get to you...

    Where DO you live? Anywhere within 5 hours of Harrisburg PA? <!--QuoteEnd--> </td></tr></table><div class='postcolor'> <!--QuoteEEnd-->
    Nope.

    I need to find MSConfig.. bear with me, I'm a computer nub who games.
  • HazeHaze O RLY? Join Date: 2003-07-07 Member: 18018Members, Constellation
    I kill it and it starts back up again. Now what?
  • BulletHeadBulletHead Join Date: 2004-07-22 Member: 30049Members
    It's more than one process most likely.

    *sighs* I'm too tired now to explain how to go thru and kill it for good... much less contain it next time you start. I'd prolly wind up guiding you on how to nuke your pr0n folder or god knows WHAT else if I tried to give you in depth help...

    it's 1 am here BTW

    Like I said, if SpyBot can't kill it...

    Try finding a free demo of SpyWare Sweeper? That may work better, I don't know. I don't usually find myself in this predicament XD
  • HazeHaze O RLY? Join Date: 2003-07-07 Member: 18018Members, Constellation
    edited June 2005
    Yeah its basically reinstalling itself over and over again. Every time I delete it it reinstalls and kills me.

    edit: and I cant do anything because it wont let me delete the program because its "in use."
  • RaVeRaVe Join Date: 2003-06-20 Member: 17538Members
    Hmm....this might sound risky, but just MIGHT help stop those on start up =\

    Open up Regedit and navigate to
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\

    Then look for any entries that share the same program name as those you have terminated. Delete them, and restart your PC.

    If it works, the program shouldn't come up. If it does though....I honestly have no idea what to do.
  • MedHeadMedHead Join Date: 2002-12-19 Member: 11115Members, Constellation
    edited June 2005
    Have any computer savvy friends? If not friends, enemies? Bake/buy some cookies, because you need their help.

    MSConfig is in the Run dialog. Click Start > Run and type "msconfig" without the quotes in the text area. Then click on the Startup tab.
  • HazeHaze O RLY? Join Date: 2003-07-07 Member: 18018Members, Constellation
    *cough*

    Where is regedit?
  • HazeHaze O RLY? Join Date: 2003-07-07 Member: 18018Members, Constellation
    I have my extemely computer savvy friend right here. *holds up XP CD* Fastest reformat in the west. Err, east. Eastish.
  • RaVeRaVe Join Date: 2003-06-20 Member: 17538Members
    rofl.

    Hit Winkey + R, type regedit

    Be careful not to touch anything else, or your computer might die <!--emo&:p--><img src='http://www.unknownworlds.com/forums/html/emoticons/tounge.gif' border='0' style='vertical-align:middle' alt='tounge.gif' /><!--endemo-->
  • MedHeadMedHead Join Date: 2002-12-19 Member: 11115Members, Constellation
    regedit is in the Run window as well.
  • HazeHaze O RLY? Join Date: 2003-07-07 Member: 18018Members, Constellation
    Disabled *everything* that starts on startup, but they still do -- I cant delete them. I'll try RaVe's way now..
  • HazeHaze O RLY? Join Date: 2003-07-07 Member: 18018Members, Constellation
    ... [nub]

    cant find 'HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\
    '

    i'm thinking i have to replace hkey local machine with a different name?[/nub]
Sign In or Register to comment.