How do I remove this annoying toolbar!

Forums: Computers
Email this Topic • Print this Page

Hi there,
For some reason, whenever i open internet explorer, there are these other 2 toolbars. There is one above the taskbar and one underneath the address bar and they won't go away. When i close internet explorer there is still the bar above the taskbar. That one is blue and the one up the top is grey. I tried right clicking on both of them to close them down but it won't let me, i tried using ad-aware and spybot to remove it as well as cwshredder but it didnt get rid of it. And i can't remove it from the add/remove programs either. I can't find anyway to remove it and the bottom one is especially annoying because it is there even when i close down interet explorer.
So if anyone can assist me with this problem it will be very appreciated. I have searched all over the internet on how to solve this problem but i dont
understand how to do what they are talking about so i need someone to work with my questions. Thanks in advance

Topic Stats
Top Replies
Link to this Topic

Type: Discussion • Score: 2 • Views: 12,148 • Replies: 42

No top replies

What are the names of these toolbars?
And may be if you post a Hijack log someone can help you

0 Replies

When I first saw the title to this thread I thought it said "How do I remove this annoying toolbart"

I thought to myself, "What the hell is a toolbart?"

Curious, I entered the thread and then realized it said toolbar with an exclamation mark at the end.

I laughed and laughed at my mistake. It was really funny.

0 Replies

Quote:

It was really funny.

No, it's not, and the Toolbart family of Ames, Iowa want you to know they are sick and tired of people laughing about being confused with the Toolbars who live way across town next to the feed plant. The Toolbarts are a proud family, unlike your own, and will not let this go on for much longer.

Okay, now back to fixing IE.

Joe

0 Replies

The bar above your task bar is the status bar. Left click "View". "Status bar" is probably checked. Click it to remove the the check and the status bar should disappear. Also on "View" you will find "toolbars". Click it and you will get a menu list which probably has a checkmark by the toolbar you don't want. Click it and the checkmark and unwanted toolbar should disappear. This applies to Internet Explorer. I can't vouch for anything else.

0 Replies

No it isn't the status bar, it is this other type of bar about 3 times the size of the taskbar, and this one covers up the status bar. On it, it has casino, mortgage, investment and other ones and the one up the top has a search bar, then the button next to the search field change. Here is my hijack this log:

C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Shaun\My Documents\Files from the internet\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://web.bnaovdapqa.info/01MfuqoxJLLAO53sCjT1aP_kcMRDHFU5E_Sc9/AUFJ8Bn3TrhJZPC_fCyfes/1wO.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 7\SnagItBHO.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 7\SnagItIEAddin.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [System Mechanic Popup Stopper] "C:\Program Files\iolo\System Mechanic 4 Professional\PopupStopper.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O9 - Extra button: CUseeMe Conferencing Companion - {44EFB53C-C965-43CF-9F45-52242D134187} - C:\Program Files\CUseeMe\Amigo.exe
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{B06559CC-F51F-4659-A265-6D47697F20BA}: NameServer = 203.2.75.132 198.142.0.51

0 Replies

But i dont know the name of these bars

0 Replies

Note, this is a quickie and I am skipping some things and not checking some that are merely suspicious or just bloat (though I know that they are not essential).

Shaunzo101 wrote:

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://web.bnaovdapqa.info/01MfuqoxJLLAO53sCjT1aP_kcMRDHFU5E_Sc9/AUFJ8Bn3TrhJZPC_fCyfes/1wO.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 7\SnagItBHO.dll

Fix

Quote:

O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll

Fix

Quote:

O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 7\SnagItIEAddin.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe

Fix

Quote:

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe

Fix

Quote:

O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"

Uninstall MessengerPlus and fix in hjt if needed. This is a common source for this spyware crap.

Quote:

O4 - HKCU\..\Run: [System Mechanic Popup Stopper] "C:\Program Files\iolo\System Mechanic 4 Professional\PopupStopper.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm

Fix

Quote:

O9 - Extra button: CUseeMe Conferencing Companion - {44EFB53C-C965-43CF-9F45-52242D134187} - C:\Program Files\CUseeMe\Amigo.exe
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe

Fix

Quote:

O17 - HKLM\System\CCS\Services\Tcpip\..\{B06559CC-F51F-4659-A265-6D47697F20BA}: NameServer = 203.2.75.132 198.142.0.51

If this is not from your ISP (ask them) fix.

When you are finished, reboot and report whether that did the trick for you.

Note: if you did not post a complete log, you may want to do that if you continue to have problems.

0 Replies

ok, but how do i fix them. Can you explain how in more detail. I cant see any button that says fix

0 Replies

There is a button saying "fix checked" after you scan.

0 Replies

Where do i type all this infomation in??
I'm not quite sure where to type all the infomation in below. Can someone please let me know where i need to type what is below?

Thanks,
Sally

Craven de Kere wrote:

Note, this is a quickie and I am skipping some things and not checking some that are merely suspicious or just bloat (though I know that they are not essential).

Shaunzo101 wrote:

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://web.bnaovdapqa.info/01MfuqoxJLLAO53sCjT1aP_kcMRDHFU5E_Sc9/AUFJ8Bn3TrhJZPC_fCyfes/1wO.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 7\SnagItBHO.dll

Fix

Quote:
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll

Fix

Quote:
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 7\SnagItIEAddin.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe

Fix

Quote:

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe

Fix

Quote:
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"

Uninstall MessengerPlus and fix in hjt if needed. This is a common source for this spyware crap.

Quote:
O4 - HKCU\..\Run: [System Mechanic Popup Stopper] "C:\Program Files\iolo\System Mechanic 4 Professional\PopupStopper.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm

Fix

Quote:
O9 - Extra button: CUseeMe Conferencing Companion - {44EFB53C-C965-43CF-9F45-52242D134187} - C:\Program Files\CUseeMe\Amigo.exe
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe

Fix

Quote:

O17 - HKLM\System\CCS\Services\Tcpip\..\{B06559CC-F51F-4659-A265-6D47697F20BA}: NameServer = 203.2.75.132 198.142.0.51

If this is not from your ISP (ask them) fix.

When you are finished, reboot and report whether that did the trick for you.

Note: if you did not post a complete log, you may want to do that if you continue to have problems.

0 Replies

Craven de Kere wrote:

There is a button saying "fix checked" after you scan.

I'm not quite sure where i need to type in the information above. Does someone know? If so, please let me know.

Thanks
Sally[/b]

0 Replies

I have the same problem
I have used hijack this... "fixed the problems" but those annoing toolbars keep on coming back Sad

This is my LOG:
Logfile of HijackThis v1.97.7
Scan saved at 23:23:55, on 4.10.2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\spoolsv.exe
F:\WINDOWS\System32\drivers\CDAC11BA.EXE
F:\Program Files\Common Files\Symantec Shared\ccProxy.exe
F:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
F:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
F:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
F:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
F:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
F:\WINDOWS\System32\svchost.exe
F:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
F:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
F:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
F:\WINDOWS\Explorer.EXE
F:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
F:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
F:\WINDOWS\system32\ctfmon.exe
f:\progra~1\intern~1\iexplore.exe
F:\Program Files\Internet Explorer\iexplore.exe
F:\WINDOWS\system32\devldr32.exe
F:\Program Files\Symantec\LiveUpdate\LUALL.EXE
F:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
F:\Program Files\Internet Explorer\iexplore.exe
F:\Program Files\Messenger\msmsgs.exe
F:\Documents and Settings\Mutsi\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.co.uk/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.wthtalqiqiaevdmsssdfi.us/15MD3cNpFXUEA9Q7QEGQtb88BsoqbUVGN1iMCHIAKv6_YikY1DsLF2qRsoSTynQz.asp
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - F:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - F:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - F:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [URLLSTCK.exe] F:\Program Files\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [ccApp] "F:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] F:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [Joy32] F:\PROGRA~1\BIBUSE~1\junk beep phone.exe
O4 - HKLM\..\Run: [Warn Nurb Bold Bows] F:\Documents and Settings\All Users\Application Data\Acidmeetwarnnurb\Support data.exe
O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Symantec NetDriver Monitor] F:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = F:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab
O16 - DPF: {1671869C-25B3-4C80-9446-8AE6111F8765} (MaxisHotDateTeleX Control) - http://thesims.ea.com/teleport/hotdate/NPC/MaxisHotDateTeleX.cab
O16 - DPF: {2DAE59A1-B355-4653-8D33-33A3A8F8C078} (MaxisVacationTeleX Control) - http://thesims.ea.com/teleport/vacation/MaxisVacationTeleX.cab
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB
O16 - DPF: {8629CFEB-C31A-4429-9BB0-8765A8A24FDA} (MaxisUnleashedLotTeleX Control) - http://thesims.ea.com/teleport/unleashed/LOT/MaxisUnleashedLotTeleX.cab
O16 - DPF: {A44B714B-EE0F-453E-9300-A69B321FEF6C} (MaxisSimsFamilyTeleX Control) - http://thesims.ea.com/teleport/families/MaxisSimsFamilyTeleX.cab
O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) - http://sc.groups.msn.com/controls/PhotoUC/MsnPUpld.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/activedata/SymAData.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E6A3C1E2-F792-483E-9133-596215172BE9} (AcceptLang Class) - http://runonce.msn.com/setacceptlang.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - http://www.symantec.com/techsupp/activedata/ActiveData.cab

0 Replies

swilliams wrote:

Craven de Kere wrote:
There is a button saying "fix checked" after you scan.

I'm not quite sure where i need to type in the information above. Does someone know? If so, please let me know.

Thanks
Sally[/b]

Have you got "hijack-this" installed on your computer? If you have, run it, save the log, and copy & paste it into a new topic here in A2K. If you haven't, let me know and I'll post you a link to the site where it is.

0 Replies

I got hijack this and it does not remove the above problem, I have the same problem, the same kind tooolbar look likes, I removed *fixed* them but still that did not remove thode annoying *toolbars*

Laura

0 Replies

I'm not really a techie, and I don't want to tell you anything that's wrong and ruin your PC, but have you got a Norton Anti-Virus toolbar as well as the one that you want to get rid of?

0 Replies

I got a norton in my toolbar, but I have noticed that the one I try to get rid of is not actually a toolbar, it just looks like it...

0 Replies

And there is a really good tutorial in this site how to go through your highjack this log

http://www.spywareinfo.com/~merijn/htlogtutorial.html#o8

I did all that it said.... stuped parasites are still there Sad

0 Replies

Have you got a website or any way that you can post a picture here? If you can, come back and we'll get you to take a screen print and we can have a look at this mystery toolbar.

0 Replies

I add some more useful addresses, maybe they can be useful, I hope, cause I still got my problem... so am going back to it and I'll be back to tell you how it went Razz

Other Spyware and Parasite related Sites and Newsgroups

news://alt.privacy.spyware/ | news://news.grc.com/grc.spyware
Google Groups - Spyware (Web based link)
CEXX.ORG Spyware Message Board
Andrew Clover's Parasite List (detection and manual removal instructions)
Security and Privacy Forum by Net-Integration
ComputerCops Forums
http://forums.us.dell.com/supportforums/
http://forums.techguy.org/
http://www.cybertechhelp.com/forums/index.php
http://pcpitstop.ibforums.com/
Spyware Warrior Forums
Wilders Security Forums

0 Replies

How do I remove this annoying toolbar!

Related Topics

Quick Links

My Account

able2know