Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Claro toolbar infection?


23 Dec 2012   #1
Microsoft MVP

Windows 7 Ultimate X64 SP1
 
 
Claro toolbar infection?

I think I may have an infection from downloading a Shockwave Flash player although I UNchecked all of the add on in its program. I got a "Claro Toolbar" installed and IE opened to a Claro search as my home page. I uninstalled this Claro toolbar but I think something remains. I have downloaded NBRT 3 times but it won't run, see error. I also ran Power Eraser and nothing was found. I ran the free MalwareBytes too and it was clean.

I did uninstall the toolbar and removed it from IE9 Add Ons.
Name:  NBRT error.JPG
Views: 7
Size:  53.6 KB

Name:  toolbar missing.JPG
Views: 4
Size:  15.7 KB



My System SpecsSystem Spec
.

23 Dec 2012   #2

Microsoft Community Contributor Award Recipient

Win 7 Pro 64-bit
 
 

This has me puzzled, Gary. Claro is apparently a fairly well-known problem. But after Googling, Bing-ing, Yahoo-ing, and using a few more search engines, and going through literally dozens of pages, I couldn't find any removal instructions from any of the well-known antimalware companies. Even searching on BleepingComputer failed to provide anything. This was the closest I came to finding removal instructions that didn't also include an ad to buy some unknown, unheard of, removal tool.

How To Remove The iSearch Claro Search Hijacker Virus (isearch.claro-search.com) | Botcrawl.com
My System SpecsSystem Spec
23 Dec 2012   #3
Microsoft MVP

Windows 7 Ultimate X64 SP1
 
 

Thanks Lee, I did the search regimen as well but didn't find what you did. I had already went through the normal uninstall process and disabling of the addon. Maybe I have got rid of it but...
I did a system restore to the day before I downloaded it which corrected another issue. I ran the sfc scan which found corrupt files that couldn't be repaired. Non repairable files The search service still will not start on demand, perhaps that is normal?

I used the Norton removal tool and installed an earlier version which corrected the toolbar missing, it is now back. My earlier version of Norton had this issue which I think was Claro related. The red "X" on the tray icon mean it is not working or not up to date or expired.

Claro toolbar infection?-nis-fubar.jpg

Sorry if this confuses you, it has me too.


My System SpecsSystem Spec
.


25 Dec 2012   #4

Windows 7 64 / Windows 8 64
 
 

Haven't heard of claro tooblar distributed through trojans. However, in many cases it might install additional software on its own to protect the user from uninstalling it.
As Claro is Potentially unwanted program only, it is not surprising that bootable scanner does not find anything (they aim at rootkit/trojan infections more).
My System SpecsSystem Spec
25 Dec 2012   #5

Windows 7 Pro. 64/SP-1
 
 

My System SpecsSystem Spec
25 Dec 2012   #6

Windows 7 64-bit, Windows 8.1 64-bit, OSX Maverick
 
 

Maybe it's my duckduckgo.com search engine, but there are some pretty good advices for cleaning up after Claro toolbar. Top two search result by the ducks for "uninstall Claro":

Remove Claro Search Virus, removal instructions
Remove Claro Search (Removal Instructions)
My System SpecsSystem Spec
26 Dec 2012   #7
Microsoft MVP

Windows 7 Ultimate X64 SP1
 
 

Quote   Quote: Originally Posted by Layback Bear View Post
Quote   Quote: Originally Posted by Cr00zng View Post
Maybe it's my duckduckgo.com search engine, but there are some pretty good advices for cleaning up after Claro toolbar. Top two search result by the ducks for "uninstall Claro":

Remove Claro Search Virus, removal instructions
Remove Claro Search (Removal Instructions)
Thank to you both! The AdwCleaner found some more crappola and removed it. My system seems to be chugging along fine so far.
Code:
***** [Services] *****

***** [Files / Folders] *****
Folder Deleted : K:\ProgramData\Babylon
Folder Deleted : K:\Users\GlBritton\AppData\Roaming\Babylon
***** [Registry] *****
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\DataMngr
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\592dcdfb369bf15
Key Deleted : HKLM\Software\PIP
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
***** [Internet Browsers] *****
-\\ Internet Explorer v9.0.8112.16457
[OK] Registry is clean.
*************************
My System SpecsSystem Spec
26 Dec 2012   #8

Microsoft Community Contributor Award Recipient

Win 7 Pro 64-bit
 
 

Great news, Gary!
My System SpecsSystem Spec
26 Dec 2012   #9

Windows 7 Pro. 64/SP-1
 
 

Good old Bayblon is still getting people.
Here is another little program that find things that aren't infection but you might not want.
Download CKScanner by askey127 from Here & save it to your Desktop
My System SpecsSystem Spec
26 Dec 2012   #10
Microsoft MVP

Windows 7 Ultimate X64 SP1
 
 

Hmm, I Googled CKScanner and some sites say it is a virus? I tried getting it though but the download was going only 2.02KBs and then froze.

I did find some more claro items in the Registry by doing a search, no Babylon though.
My System SpecsSystem Spec
Reply

 Claro toolbar infection?




Thread Tools



Similar help and support threads for2: Claro toolbar infection?
Thread Forum
Claro Chrome Toolbar Browsers & Mail
Explorer Toolbar Editor and or remove buttons on Explorer toolbar Free Developer Programs and Projects
HT Omega Claro Plus... XP w/SP3 Sound & Audio
HT Omega Claro Plus Installation Problem Sound & Audio
No surround sound in some games (Claro+ & Win7 x64 RTM) Sound & Audio
HT Omega CLARO Not Functioning Drivers
HT Omega - Claro Plus+ Drivers

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 09:48 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33