I really need help with the "elite toolbar" [Archive] - Glock Talk

PDA

View Full Version : I really need help with the "elite toolbar"


noneyet
12-14-2004, 09:13
I have been working on this problem for about a week now so I must turn to the masters for guidance- so here is my question/problem:
I have a dell inspiron 2650 running xp. It got infected with a virus some how (and I think that it also killed my router but that is another story) and it started strangeling the internet connection, we are on DSL. At the same time the elite toolbar started showing up. so I ran a Spy Bot SD and Symanted Corporate 8.0 to find and kill it, well it found and killed some stuff but not all of it, and after hours of trying, I wiped everything out (I thought) and started anew.

I used partition magic and reinstalled everything again, connected to the pluged in the network cable and boom pop ups and the elite toolbar was back. (had installed all of the latest virus updates for Symantec Corporate 9.0 this time as well as SP 1 and updates from the FEB 04 disk.

So I went back and tried again. wiped everything clean the same way and reinstalled everything and it came back. So i installed SP2 and spy bot SD as well as Ad-aware SE set symantec to find spyware and scaned all over again. they all found stuff and deleted it. The stuff that could not be deleted I manually deleted, and I followed the instructions on the Symantec website for removal of the toolbar. IT STILL IS THERE, or it keeps hijacking me and taking me to freegay porn.com or something so it can redownload itself.

I do not know what to do with this thing. If any of you guys could help I would really appreciate it. Sorry for the long post but it's involved.

Washington,D.C.
12-14-2004, 12:27
http://computercops.biz/postp386237.html

Washington,D.C.
12-14-2004, 12:37
http://forums.net-integration.net/index.php?act=SC&c=19

noneyet
12-14-2004, 20:29
thanks for the help, i downloaded hijack this and i think that i got rid of it, BUT when I am online now after about two minutes I cant get any pages to load, this happens with firefox and IE. what do you make of this?

Washington,D.C.
12-14-2004, 23:19
Try CCleaner http://www.ccleaner.com

Washington,D.C.
12-14-2004, 23:23
Open Internet Explorer.. Click Tools > Options > Security > make sure "Internet is highlighted > Custom Level > select "medium" > click Reset > OK > Advanced > Restore Defaults > OK > Close Internet Explorer.

If that doesn't reset things, then you may have a problem with an Anti-Virus or Firewall software interfering. If you are running either, post what brand/version and I'll see what I can find.

The "Advanced" in the instructions above refers to a tab at the top of the window that should be visible after you complete the step directly before it.

noneyet
12-15-2004, 09:07
AHHHHHHHHHHHHHHHHHHHH.
(now that thats out of my system)

Washington, D.C. I was in the middle of typing a reply to you thanking you for all of your help, as I thought that it was fixed, then the next thing I know I was redirected to amateur.freegayspace.com again. Things where going so great too, oh well back to the drawing board i guess.

by the way I am running SP2 firewall and Symantac Corporate edition 9.0 virus blocker, which flashed a warning for the w32.blaster i think about 5 minutes befor i was redirected, it said that it was deleted. oh and system restore is disabled.

Washington,D.C.
12-15-2004, 09:49
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.ratsou.b.html

Washington,D.C.
12-15-2004, 09:52
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.ratsou.html

noneyet
12-15-2004, 10:08
thanks for your help, I will try those ones next
so far this is what I have done:
ran virus scan, spybot SD Ad-aware and the ccleaner, hijack this, and the remover for w32blaster. here is what the came up with:
virus scan and w32 blaster remover found nothing
and

Washington,D.C.
12-15-2004, 10:21
These should help http://www.avast.com/eng/down_cleaner.html and http://www.emsisoft.com/en/software/free/ and http://www.webroot.com/

and new stinger TODAY http://majorgeeks.com/download4063.html and new Hijack This TODAY http://majorgeeks.com/download3155.html after all of those with Windows XP run RegScrubXP 3.25 http://www.lexundesigns.com/LexunFreeware/index.htm That one should work with Windows 2000 too.

noneyet
12-17-2004, 09:29
Thanks so much for your help, now it appears that I have the W32Spybot.Worm....... So I am following the instructions on the symantec website right now, I did not find anytrace of that other virus you mentioned however so i am a little curious about how I keep getting redirected to that website. Man I hope that this works.