Websearch Toolbar Removal?

[Ketchup345]

Somehow I have the incredibly annoying Websearch Toolbar on my computer (maybe because my mom still uses IE?). There are a few things that I must use IE for (some sites won't accept FF), and this tolbar gets in the way.

Going throught the Settings > Control Panel > Add/Remove Programs doesn't work (it reinstalls next time I open IE).

Spybot and Adaware may detect it, but don't keep it dead (again, it appears the next time I load IE).

Can anyone recommend a program that does work and keep this annoyance gone, and/or step by step instructions that even idiots can follow?



<font size=-1>[ This Message was edited by: Ketchup345 on 2005-02-27 10:23 ]</font>

[SpikeOtacon]

Google 'Hijack THIS!'

It will give you a log after you run it. Save the log to a .txt and post it here.

[Ketchup345]

Logfile of HijackThis v1.98.2
Scan saved at 2:07:35 PM, on 2/27/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32LEXBCES.EXE
C:WINDOWSsystem32LEXPPS.EXE
C:WINDOWSsystem32spoolsv.exe
C:Program FilesiPodbiniPodService.exe
C:PROGRA~1ToolbarPIB.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:PROGRA~1COMMON~1WinToolsWToolsA.exe
C:Program FilesCommon FilesWinToolsWToolsS.exe
C:Program FilesCommon FilesWinToolsWSup.exe
C:PROGRA~1ToolbarTBPS.exe
C:PROGRA~1ToolbarPIB.exe
C:Program FilesTrilliantrillian.exe
C:PROGRA~1ToolbarTBPSSvc.exe
C:DOCUME~1JasonLOCALS~1TempTemporary Directory 1 for hijackthis.zipHijackThis.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yahoo.com/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50141
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,CustomizeSearch = res://C:PROGRA~1Toolbartoolbar.dll/sa
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.dell4me.com/myway
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50141
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch = res://C:PROGRA~1Toolbartoolbar.dll/sa
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} - C:PROGRA~1Toolbartoolbar.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:PROGRA~1LavasoftAD-AWA~1SPYBOT~1SDHelper.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} - C:PROGRA~1COMMON~1WinToolsWToolsB.dll
O2 - BHO: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} - C:PROGRA~1Toolbartoolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogletoolbar1.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:progra~1mcafee.comvsomcvsshl.dll
O3 - Toolbar: AIM Search - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - C:Program FilesAIM ToolbarAIMBar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar1.dll
O3 - Toolbar: &Search Toolbar - {339BB23F-A864-48C0-A59F-29EA915965EC} - C:PROGRA~1Toolbartoolbar.dll
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM..Run: [PCMService] "C:Program FilesDellMedia ExperiencePCMService.exe"
O4 - HKLM..Run: [diagent] "C:Program FilesCreativeSBLiveDiagnosticsdiagent.exe" startup
O4 - HKLM..Run: [UpdReg] C:WINDOWSUpdReg.EXE
O4 - HKLM..Run: [TkBellExe] "C:Program FilesCommon FilesRealUpdate_OBrealsched.exe" -osboot
O4 - HKLM..Run: [VSOCheckTask] "c:PROGRA~1mcafee.comvsomcmnhdlr.exe" /checktask
O4 - HKLM..Run: [MCAgentExe] c:PROGRA~1mcafee.comagentmcagent.exe
O4 - HKLM..Run: [MCUpdateExe] c:PROGRA~1mcafee.comagentMcUpdate.exe
O4 - HKLM..Run: [VirusScan Online] c:PROGRA~1mcafee.comvsomcvsshld.exe
O4 - HKLM..Run: [DwlClient] C:Program FilesCommon FilesDellEUSWSupport.exe
O4 - HKLM..Run: [Dell AIO Printer A920] "C:Program FilesDell AIO Printer A920dlbkbmgr.exe"
O4 - HKLM..Run: [MPFExe] C:PROGRA~1McAfee.comPERSON~1MpfTray.exe
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [iTunesHelper] C:Documents and SettingsJasonDesktopMedia PlayersiTunesHelper.exe
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [WildTangent CDA] RUNDLL32.exe "C:Program FilesWildTangentAppsCDAcdaEngine0400.dll",cdaEngineMain
O4 - HKLM..Run: [mmtask] C:Program FilesMUSICMATCHMUSICMATCH Jukeboxmmtask.exe
O4 - HKLM..Run: [ViewMgr] C:Program FilesViewpointViewpoint ManagerViewMgr.exe
O4 - HKLM..Run: [WinTools] C:PROGRA~1COMMON~1WinToolsWToolsA.exe
O4 - HKLM..Run: [TBPS] C:PROGRA~1ToolbarTBPS.exe
O4 - HKLM..Run: [McRegWiz] c:PROGRA~1mcafee.comagentmcregwiz.exe /autorun
O4 - Global Startup: America Online 8.0 Tray Icon.lnk = C:Program FilesAmerica Online 8.0aoltray.exe
O4 - Global Startup: Forget Me Not.lnk = C:Program FilesCards and Calendar MakersCreataCardAG CreataCardAGRemind.exe
O4 - Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOfficeOSA9.EXE
O8 - Extra context menu item: &Google Search - res://c:program filesgoogleGoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:program filesgoogleGoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:program filesgoogleGoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:program filesgoogleGoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:program filesgoogleGoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:WINDOWSSystem32msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:WINDOWSSystem32msjava.dll (file missing)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:Documents and SettingsAll UsersStart MenuProgramsAOL Instant Messengeraim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:WINDOWSSystem32Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O15 - Trusted Zone: *.musicmatch.com
O16 - DPF: {2253F320-AB68-4A07-917D-4F12D8884A06} (ChainCast VMR Client Proxy) - http://64.124.45.181/downloads/ccpm_0237.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://bin.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,76/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://bin.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,16/mcgdmgr.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://antu.popcap.com/games/popcaploader_v5.cab
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://sea2fd.sea2.hotmail.msn.com/activex/HMAtchmt.ocx
O18 - Protocol: tpro - {FF76A5DA-6158-4439-99FF-EDC1B3FE100C} - C:PROGRA~1Toolbartoolbar.dll

[SpikeOtacon]

R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50141
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,CustomizeSearch = res://C:PROGRA~1Toolbartoolbar.dll/sa

R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50141
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch = res://C:PROGRA~1Toolbartoolbar.dll/sa

O3 - Toolbar: &Search Toolbar - {339BB23F-A864-48C0-A59F-29EA915965EC} - C:PROGRA~1Toolbartoolbar.dll

I believe that's everything. Try removing those entries, after having every IE window closed. You may need to restart should it not work immidiatly, or there could be some remenant left of the toolbar I didn't see.

[J3553]

You already have Ad-aware and Spybot, but do you have a firewall running? If not, I recommend checking out ZoneAlarm, they have a free version that works well for blocking any unwanted intrusions.

http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp

[anwserman]

If you have SP2, you might be able to disable the toolbar by using Tools > Manage Addons.

Other then that, I think Spike got it.