Re: How do I Remove Unwanted BHOs?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: RayMich (RayMich76_at_netscape.net)
Date: 07/07/04


Date: Wed, 07 Jul 2004 13:29:01 -0400

Wesley,

Thanks again for your reply.

Some additional info:
1. A found some Altnet directories and files in my computer - I read
that these also are some type of scumware, so I deleted them. I also
found directories and files for MyWay. I deleted them also. None of
these can be found in my Add or Remove Programs utility.

2.I searched the registry for MyWay and deleted all references to that
as well

3. I searched my registry for altnet and have been able to delete all
entries EXCEPT for the one that started all this.

4. I have tried using MSconfig as well as starting in Safe Mode. - Still
NO LUCK!

5. I have tried followed all instructions in the pestpatrol website for
removing topicks and have found NO instances of any of those files in
that computer.

6. I am running Ad-aware on all my computers as well as PestPatrol and
Norton Antivirus. PestPatrol is the only one that has found this
problem, but can't fix it!

7. I have used Spybot S & D on another computer in the past and got
totally screwed up with it. I finally had to uninstall it and delete all
directories and files it created. I also had to roll back by using
"System Restore" before I could even access the internet again. This
experience has made me leary of trying Spybot S & D on this computer.

8. I have tried using HijackThis in the past, but I never got a single
response after I posted the log file on their website, so I figured it
would be a waste of time now.

9. I will try downloading CWShredder and see what it finds. I'll try the
others you have suggested here also.

10. As far as my Internet Options are concerned,
         Enable Install On Demand (Internet Explorer) was UNCHECKED
         Enable Install On Demand (Other) WAS checked so I unchecked
           it

What would happen if I unchecked the entry that reads
         Enable third-party browser extensions

BTW- My Internet Explorer still has a phantom toolbar that only appears
as a "blank" with a check mark. If I uncheck it, the toolbar will hide,
but I can click on the blank and the toolbar reappears. I still have not
found where it keeps its files.

I'll keep you posted.

Ray

Wesley Vogel wrote:
> Ray,
>
> [[TOPicks also has distribution agreements with other popular Internet
> software, that provide TOPicks as a bundled bonus to their users. If you
> have TOPicks on your computer, and you have not installed it yourself, this
> is probably how it was installed.]]
>
> You may not be able to get rid of the offending registry key(s) until you
> get rid of all of the related files on your machine. The files, or parts
> there of, may recreate the key(s).
>
> Check this one out first >>>>
> TOPicks
> http://www.pestpatrol.com/pestinfo/t/topicks.asp
>
> Remove TOPicks Adware
> http://www.spyany.com/program/article_spy_rm_TOPicks.html
>
> TOPicks
> http://www.spywareguide.com/product_show.php?id=613
>
> How to Detect and Remove TOPicks?
> http://www.securemost.com/articles/trou_3_remove_topicks.htm
>
> TOPicks 1.5
> http://www.regblock.com/spydet_613_topicks.html
>
> ================
>
> Also, you *need* more than one antiscumware program.
> One will not cut the mustard!! Now, for the canned reply.............
>
> First. Make sure of these settings and nothing will install without you
> answering YES. (Except what may install as part of some other software.)
> Don't click YES if you don't know/trust the source.
>
> Start | Settings | Control Panel | Internet Options | Advanced tab |
> Make sure both of these are NOT checked.
>
>  Enable Install On Demand (Internet Explorer)
> [[Specifies to automatically download and install Internet Explorer
> components if a Web page needs them in order to display the page properly or
> perform a particular task.]]
>
>  Enable Install On Demand (Other)
> [[Specifies to automatically download and install Web components if a Web
> page needs them in order to display the page properly or perform a
> particular task.]]
>
> Apply | OK
> ======================
>
> Second. If you need a scan right now.
>
> Follow the instructions!
> THE PARASITE FIGHT QUICK FIX PROTOCOL
> http://aumha.org/a/quickfix.php
>
> ======================
>
> Third.
> It is known as scumware. Visit these sites. 1, 2, 3 and 4 are really good.
>
>
>
> Download, install, run, update and run again; one or all. They are all
> good, FREE utilities. Make sure you update every program, even if you
> just downloaded it. You must have the latest updates.
>
> >>>>>>>>>> Run CWShredder first!!! <<<<<<<<<<<<
>
> 1) CWShredder direct download:
> http://216.180.233.163/~merijn/files/CWShredder.exe
>
> 2) SpywareBlaster
> [[SpywareBlaster doesn't scan and clean for spyware - it prevents it from
> ever being installed.
> The most important step you can take is to secure your system. And
> SpywareBlaster is the most
> powerful protection program available.]]
> http://www.javacoolsoftware.com/spywareblaster.html
>
> 3) Spybot S & D
> http://www.safer-networking.org/index.php?lang=en&page=download
>
> 4) HijackThis (some other stuff that may be of interest also)
> http://www.spywareinfo.com/~merijn/downloads.html
>
> 4a) HijackThis (direct download)
> http://aumha.org/downloads/hijackthis.zip
>
> 5) Bazooka Adware and Spyware Scanner v1.13
> http://www.kephyr.com/spywarescanner/index.html?source=appvisit
>
> 6) ToolbarCop
> http://www.mvps.org/sramesh2k/toolbarcop.htm
>
> 7) AdAware
> http://www.lavasoft.de/support/download/
>
> ===============
>
> Problems uninstalling? Here's some advice.
> http://www.kephyr.com/spywarescanner/uninstallproblems.phtml
>
> Additional information & instructions.
> A wealth of information here, boys and girls.
>
> THE PARASITE FIGHT QUICK FIX PROTOCOL
> http://aumha.org/a/quickfix.htm
>
> THE PARASITE FIGHT
> Finding, Removing & Protecting Yourself From Scumware
> http://aumha.org/a/parasite.htm
>
> Bugs, Glitches & Stuffups
> http://www.mvps.org/inetexplorer/Darnit.htm
>
> Dealing with Unwanted Spyware and Parasites
> http://mvps.org/winhelp2002/unwanted.htm
>
> Unexplained computer behavior may be caused by deceptive software
> http://support.microsoft.com/default.aspx?scid=kb;EN-US;827315#appliesto
>
> Spyware and Deceptive Software
> http://www.microsoft.com/mscorp/twc/privacy/spyware.mspx?gssnb=1
>
> What you should know about spyware
> http://www.microsoft.com/security/articles/spyware.asp
>
> Cleaning Up XP
> http://www.kellys-korner-xp.com/xp_c.htm#cleanup
>



Relevant Pages

  • Re: How to Delete Search Assistant from Registry
    ... (Except what may install as part of some ... >THE PARASITE FIGHT QUICK FIX PROTOCOL ... >4a) HijackThis (direct download) ... >Dealing with Unwanted Spyware and Parasites ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How to Delete Search Assistant from Registry
    ... Make sure of these settings and nothing will install without ... >> [[Specifies to automatically download and install Internet Explorer ... >> THE PARASITE FIGHT QUICK FIX PROTOCOL ... >> [[SpywareBlaster doesn't scan and clean for spyware - it prevents it ...
    (microsoft.public.windowsxp.security_admin)
  • Re: cannot uninstall application
    ... Make sure of these settings and nothing will install without you ... > THE PARASITE FIGHT QUICK FIX PROTOCOL ... > Download, install, run, update and run again; ... > How to use HijackThis to remove Browser Hijackers & Spyware ...
    (microsoft.public.windowsxp.basics)
  • Re: How to Delete Search Assistant from Registry
    ... Make sure of these settings and nothing will install without you ... [[Specifies to automatically download and install Web components if a Web ... THE PARASITE FIGHT QUICK FIX PROTOCOL ... Bazooka Adware and Spyware Scanner v1.13 ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Server Service
    ... but that isn't a fix for me. ... (Except what may install as part of some ... >THE PARASITE FIGHT QUICK FIX PROTOCOL ... >Dealing with Unwanted Spyware and Parasites ...
    (microsoft.public.windowsxp.perform_maintain)