| Windows 7: Unwanted Viral Browser Toolbars |
06 Feb 2013
|
#11 | | Windows 7 Home premium 64bit |
Have you been downloading from cnet? They pack those tool bars at least Babylon from what I know in there downloads. Stay away from downloading from that site. Main reason I never download from there anymore. | My System Specs |
| Computer type PC/Desktop System Manufacturer/Model Number me OS Windows 7 Home premium 64bit CPU AMD Phenom II X4 925 (Deneb) OC 3.4GHz Motherboard M5A78L-MLX Plus Memory 8192MB RAM DDR3 1600 Graphics Card XFX HD 6870 1GB (Connected via HDMI) Monitor(s) Displays Polaroid TLAC-02255 22" Digital HD LED TV and 17"LED Monitor Screen Resolution 1920x1080 60Hz / 1280x1024 60Hz Keyboard Microsoft USB Comfort Curve Keyboard 2000 (IntelliType Pro) Mouse Logitech Optical Gaming Mouse G400 PSU CORSAIR CX600 600w Case AZZA Orion 202 EVO with 3fans and a corsair af fan Cooling cooler master hyper TX3 cpu cooler Hard Drives 500gb hdd 7200rpm Western Digital Internet Speed 5.22Mbps download 0.65Mbps upload Antivirus Comodo Internet Security Browser IE 10 |
06 Feb 2013
|
#12 | | Windows 7 Home Premium On East 4th Street, USA |
Microsoft Security Essentials and avast! Free are good.
Never had any problems with either. | My System Specs | | OS Windows 7 Home Premium |
06 Feb 2013
|
#13 | | Windows 7 Home Premium 64 bit. (On both machines) Lincolnshire, UK. |
Thanks M1GU31, a Cnet download was responsible. I backtracked and discovered that the Spyhunter prog that I downloaded was spelled differently to the REAL one, which explains things to gied! The real Spyhunter is priced a lot less than $99.99.
I found and killed 2 Snap.do 'Helper Bars' in the Registry, nothing in there from Babylon or Claro Search Bars. I then used my purchase of Malwarebytes Pro, to carry out a Full Scan. It found nothing. The 'puter is much quicker now and I have concluded that the false SH prog was giving me false information to make me "buy" their "product".
I take note of the advice about AVG, which I intend to replace with Bitdefender ASAP. I had BD on my 'puter for 2 years and changed it, due to cost of the next version. False economy I guess.
Lesson learned, but many thanks to all who advised me, this Forum still rocks! | My System Specs | | System Manufacturer/Model Number (PC) Gigabyte EG41MFT-US2H Self build. (Laptop) HP Dv7. OS Windows 7 Home Premium 64 bit. (On both machines) CPU (PC) Intel Quad Core Q6600: (Laptop) Turion II M520 Motherboard PC: as above. Laptop (HP System Board) 3639 33.23 Memory PC: Corsair DDR3 4GB Corsair Laptop: DDR-2 Micron 800 4 GB. Graphics Card ATI Asus HD6770: Laptop: ATI Mobile Radeon 4500. Sound Card Onboard. Monitor(s) Displays PC: Lyama Prolite E2407HDS 24" Laptop 17" Screen Resolution PC: 1920x1080. Laptop:1600x900 Keyboard Logitech MK 250 wireless. Mouse PC: Logitech MK 250 wireless. Laptop: Logitech Wireless M235 PSU OCZ 550 GX. Laptop - ? Case Black Coolermaster Centurion 5 II. Cooling 2x120 mm. Coolermaster front & rear: 120mm. CM side fan. Hard Drives Pc: WD 5000AAKS (O/s, Photos, Files.)
Seagate ST3100520AS 1TB (Films, Video)
Laptop: WDC WD32000BEKT-605t1
External Backup: another WD 5000AAKS, in Trust E-SATA case. Internet Speed (Rural Lincolnshire!) From 2 to 2.8 Mb. Other Info Clean-installed laptop. PC, networked as Master to laptop.
TV Tuner card "WinTV Nova T-500 Dual Tuner fitted, in order to watch sport & own film/TV choice without marital discord! NOTE: works fine, excellent Freeview reception in a poor signal area.
Laptop Mouse: tiny USB thumb drive, works fine. |
06 Feb 2013
|
#14 | | Windows 7 Home Premium 64 bit. SP-1 Northern Ohio |
Cnets pages and download clutter make it very easy to miss things. It is very easy to miss lots of unwanted things. I use FileHippo. I sure some here won't agree with FileHippo. That being said it works well for me. You still have to watch because sites change policies often. | My System Specs | | Computer type PC/Desktop System Manufacturer/Model Number Home made Desktop OS Windows 7 Home Premium 64 bit. SP-1 CPU Intel i7-960-3.2 @ 4.25 Motherboard ASUS P6X58D-E Memory KINGSTON KHX2000C9, Hyper X,12 GIGS Graphics Card MSI/Nvidia/460GTX-Cyclone 1GD5/OC Monitor(s) Displays DYNEX 40 IN. Screen Resolution 1920-1080 or 1280-720 HDMI Keyboard M/S 3000 v 2.0 wireless Mouse M/S 5000 wireless PSU Corsair AX-850 Plus Gold Case Corsair 600T (Black) + side panel with 2 140 mm Noctua fans Cooling Corsair H50/2 Noctua NF-P12 (120 mm) Push/Pull- Hard Drives INTEL SSD 120GB-SER 510
Seagate 1TB SATA 600 7200 rpm Hard Drive Internet Speed 3.0 mb Antivirus Microsoft Security Eesentials Browser I.E. 10 default/Firefox Other Info LG BluRay-Read/Write
Sound system
KLipsch-THX
Asus Router RTN-12
2 Noctua 140 added on top of 600t case
Malwarebytes Anti Malware Professional
Windows 7 Firewall |
06 Feb 2013
|
#15 | | Windows 7 Home premium 64bit |
Glad I was able to help, I agree with layback bear, filehippo is a better site for downloading software and from my experience with filehippo the files there are clean, I use filehippo myself. Yea anyways I asked if it was cnet because my brothers computer got a babylon toolbar from downloading in that site even though it gives the option not to install but somtimes ppl over read something and miss details. Had to remove it from his xp computer, took a while to remove it because you have to go into the registry and all your browsers options. | My System Specs | | Computer type PC/Desktop System Manufacturer/Model Number me OS Windows 7 Home premium 64bit CPU AMD Phenom II X4 925 (Deneb) OC 3.4GHz Motherboard M5A78L-MLX Plus Memory 8192MB RAM DDR3 1600 Graphics Card XFX HD 6870 1GB (Connected via HDMI) Monitor(s) Displays Polaroid TLAC-02255 22" Digital HD LED TV and 17"LED Monitor Screen Resolution 1920x1080 60Hz / 1280x1024 60Hz Keyboard Microsoft USB Comfort Curve Keyboard 2000 (IntelliType Pro) Mouse Logitech Optical Gaming Mouse G400 PSU CORSAIR CX600 600w Case AZZA Orion 202 EVO with 3fans and a corsair af fan Cooling cooler master hyper TX3 cpu cooler Hard Drives 500gb hdd 7200rpm Western Digital Internet Speed 5.22Mbps download 0.65Mbps upload Antivirus Comodo Internet Security Browser IE 10 |
06 Feb 2013
|
#16 | | Windows 7 Home Premium 64 bit. SP-1 Northern Ohio |
You will get Babylon whether you put a check mark in the box or remove the check mark. You will get it either way. If the Babylon option is there I recommend finding another place to get the download you want.
Been there done that. | My System Specs | | Computer type PC/Desktop System Manufacturer/Model Number Home made Desktop OS Windows 7 Home Premium 64 bit. SP-1 CPU Intel i7-960-3.2 @ 4.25 Motherboard ASUS P6X58D-E Memory KINGSTON KHX2000C9, Hyper X,12 GIGS Graphics Card MSI/Nvidia/460GTX-Cyclone 1GD5/OC Monitor(s) Displays DYNEX 40 IN. Screen Resolution 1920-1080 or 1280-720 HDMI Keyboard M/S 3000 v 2.0 wireless Mouse M/S 5000 wireless PSU Corsair AX-850 Plus Gold Case Corsair 600T (Black) + side panel with 2 140 mm Noctua fans Cooling Corsair H50/2 Noctua NF-P12 (120 mm) Push/Pull- Hard Drives INTEL SSD 120GB-SER 510
Seagate 1TB SATA 600 7200 rpm Hard Drive Internet Speed 3.0 mb Antivirus Microsoft Security Eesentials Browser I.E. 10 default/Firefox Other Info LG BluRay-Read/Write
Sound system
KLipsch-THX
Asus Router RTN-12
2 Noctua 140 added on top of 600t case
Malwarebytes Anti Malware Professional
Windows 7 Firewall |
06 Feb 2013
|
#17 | | Windows 7 Ultimate X64 SP1 Mt. Crumpit/Whoville |

Quote: Originally Posted by Layback Bear Cnets pages and download clutter make it very easy to miss things. It is very easy to miss lots of unwanted things. I use FileHippo. I sure some here won't agree with FileHippo. That being said it works well for me. You still have to watch because sites change policies often. I think Filehippo is one of the 2-3 good download sites left. Softpedia, MajorGeeks, c|Net, Download.com all are getting crappy and bundle crapware.
Sometimes one has to look through the license agreement before an opt out box is shown. | My System Specs | | Computer type PC/Desktop System Manufacturer/Model Number Home Built Desktop By DataTech OS Windows 7 Ultimate X64 SP1 CPU Intel i5-2550K, Differing ~4.4-4.8GHz No built in GPU Motherboard ASUS P8Z68-V PRO/GEN3 Memory 16GB G.Skill Sniper 2133MHz 4x4GB Graphics Card ASUS ENGTX460 DirectCU/2DI/1GD5 GeForce GTX 460 Sound Card Onboard Realtek 5-1 Monitor(s) Displays Samsung P2570HD Screen Resolution 1920x1080 Keyboard Old, beat-up Dell USB From 10 yrs Ago Mouse Gigabyte m6900 wired PSU Corsair HX650W Case Inwin Dragon Rider Cooling Hyper 212 EVO w/two Noctua fans, push-pull, @1300 RPM Hard Drives Crucial M4 128GB for OS, 750GB Seagate MomentusXT for data, 500GB Seagate Constellation for storage Internet Speed 8-19 Mbs down, 3-4 Mbs up Comcast Cable Antivirus Norton Internet Security Browser IE 9, Opera when needed Other Info 4 case fans, LG BluRay-RE, ASUS DVD-RW, Mr. Fusion power generator with flux capacitor, 1.21 gigawatts. |
06 Feb 2013
|
#18 | | Windows 7 Ultimate x64, XP Mode, W8 RP VM, Linux Mint Debian 2nd OS HD- 7 Pro x64 second case New England |

Quote: Originally Posted by Bertison Thanks guys for all of that great advice.
I had an appointment yesterday and did not return until this morning, so apologies for not responding sooner. A little more info:
I had downloaded what I thought to be an Anti Spyware programme from the USA - anyone used "Spyhunter"? That is the source of all the infection reports . Listed as a "Free" Download, it came up with a total of 14 'Infections' all based upon Snap.do, Babylon and Claro Search. When I asked to "Fix" the problems, it asked for $99.99. I uninstalled it, wiped it from the Registry and received a message asking why I uninstalled, then offering the same programme for $10! - thanks, but no thanks!
Purchased & downloaded Malwarebytes Pro, carried out a Full scan, no reports of any Nasties. gied - thanks, I already tried your suggestions. Kept a note of them though, much appreciated. cottonball & NightHawk - thanks to you both, I will try them in order. I will report any further results later. I really appreciate your assistance guys, thanks. It's called "Scam Ware"! A bogus program will download a list of bugs and then claim you can see them removed when buying the full version when no program actually exists or the fake poses as a genuine article.
Have a look at the notice I posted about one that had the gui of Advanced System Care black and dark theme and all with the words "Security Essentials" as the program name mocking the MS SE genuine article and then charging for it? New Variant of "FAKE" Security Essentials to be aware of!
SCAMWARE! is precisely what you ran into apparently. The one I cleaned off of a few laptops last year downloaded 4 trojans and blocked the taskmanager with a fake "Windows Process Doctor" to prevent killing the program. GFI support was a little upset when I hadn't used their special remover tool but opened the file location to find the offender and move it to another location and then boot up in Safe Mode to manually remove the one main file. The regular av program then took care of the rest which included the 4 trojans and rogue scamware gui. 
Quote: Originally Posted by gied Bertison : know some guys at company there, as far as I am told, they have no version for 99 USD, but who knows
By the way, AVG got some bad publicity recently due to similar toolbar /search hijacker distributed through its free version like the ones you remove  J The AVG Internet Security toolbar alerts you to bad sites allowing you to back off or close the browser window fast to prevent something from being stuffed on your system when hitting a bad site. Someone apparently put out a bogus version mocking the original addon since the actual toolbar doesn't hijack anyone.
As far as these types of "First Buy and then We cure your pc" nonsense the volume of scamwares has been on the rise for the last two years roughly over trojan droppers and other malwares. With everyone having been seeing a slower economy some clowns want to cash in on gullibility by pumping fake versions with close sounding names to valid programs. | My System Specs | | OS Windows 7 Ultimate x64, XP Mode, W8 RP VM, Linux Mint Debian 2nd OS HD- 7 Pro x64 second case CPU AMD Phenom II X4 975 Deneb 3.6ghz - 965 on new mini tower Motherboard Gigabyte GA-790XTA-UD4 Memory Kingston Hyper X DDR3 1600 1.5v 16gb - Mushkin on 2nd build Graphics Card MSI HD Radeon 5750 1gb - MSI HD Radeon 6450 on mini tower Sound Card Creative Labs X-Fi XtremeGamer - Realtek onooard 2nd case Monitor(s) Displays 2 x Acer P191W 19" widesscreen - HP 20" widescreen mini towe Screen Resolution 1440x900 native - 1600x1024 on 7 Pro x64 build Keyboard Microsoft Recusa Razor - MS Comfort 3000 on second build Mouse MS Trackball Explorer - A4TECH dual scroll wheel trackball PSU Corsair 750TX - primary / Corsair CX600 - second Case Antec 900-2 - SSD compatible / NZXT Vulcan mini tower Cooling Zalman CNPS9900A Hard Drives Primary Ultimate x64 build-
WD Black Edition 1tb Sata 6.0 = 2
WD Black Edition 1tb Sata 3.0 = 2 (OS drives)
WD 1tb Green Power sata = 2 1 external
usb flash drives = 18
Second 7 Pro x64 mini tower-
WD Caviar SE 500gb sata II single drive presen Internet Speed 30mbps upgrade - primary hard wired - mini tower usb WiFi |
06 Feb 2013
|
#19 | | Windows 7 Home Premium 64 bit. SP-1 Northern Ohio |

Quote: Originally Posted by Britton30 
Quote: Originally Posted by Layback Bear Cnets pages and download clutter make it very easy to miss things. It is very easy to miss lots of unwanted things. I use FileHippo. I sure some here won't agree with FileHippo. That being said it works well for me. You still have to watch because sites change policies often. I think Filehippo is one of the 2-3 good download sites left. Softpedia, MajorGeeks, c|Net, Download.com all are getting crappy and bundle crapware.
Sometimes one has to look through the license agreement before an opt out box is shown. I have been watching for the opt out box in the agreement because you mentioned it before. They know that nobody reads those.
I thank you it is great advice. | My System Specs | | Computer type PC/Desktop System Manufacturer/Model Number Home made Desktop OS Windows 7 Home Premium 64 bit. SP-1 CPU Intel i7-960-3.2 @ 4.25 Motherboard ASUS P6X58D-E Memory KINGSTON KHX2000C9, Hyper X,12 GIGS Graphics Card MSI/Nvidia/460GTX-Cyclone 1GD5/OC Monitor(s) Displays DYNEX 40 IN. Screen Resolution 1920-1080 or 1280-720 HDMI Keyboard M/S 3000 v 2.0 wireless Mouse M/S 5000 wireless PSU Corsair AX-850 Plus Gold Case Corsair 600T (Black) + side panel with 2 140 mm Noctua fans Cooling Corsair H50/2 Noctua NF-P12 (120 mm) Push/Pull- Hard Drives INTEL SSD 120GB-SER 510
Seagate 1TB SATA 600 7200 rpm Hard Drive Internet Speed 3.0 mb Antivirus Microsoft Security Eesentials Browser I.E. 10 default/Firefox Other Info LG BluRay-Read/Write
Sound system
KLipsch-THX
Asus Router RTN-12
2 Noctua 140 added on top of 600t case
Malwarebytes Anti Malware Professional
Windows 7 Firewall |
06 Feb 2013
|
#20 | | Windows 7 Ultimate x64, XP Mode, W8 RP VM, Linux Mint Debian 2nd OS HD- 7 Pro x64 second case New England |
I think you may find a few things at FileHippo that are tainted as well if you were to go through everything. It's becoming too common place in seeing the "unwanted extras" tossed into the mix when going to download any supposed freebies. That's where they get you with other things tucked away nicely! c/net downloads is seeing this as well. | My System Specs | | OS Windows 7 Ultimate x64, XP Mode, W8 RP VM, Linux Mint Debian 2nd OS HD- 7 Pro x64 second case CPU AMD Phenom II X4 975 Deneb 3.6ghz - 965 on new mini tower Motherboard Gigabyte GA-790XTA-UD4 Memory Kingston Hyper X DDR3 1600 1.5v 16gb - Mushkin on 2nd build Graphics Card MSI HD Radeon 5750 1gb - MSI HD Radeon 6450 on mini tower Sound Card Creative Labs X-Fi XtremeGamer - Realtek onooard 2nd case Monitor(s) Displays 2 x Acer P191W 19" widesscreen - HP 20" widescreen mini towe Screen Resolution 1440x900 native - 1600x1024 on 7 Pro x64 build Keyboard Microsoft Recusa Razor - MS Comfort 3000 on second build Mouse MS Trackball Explorer - A4TECH dual scroll wheel trackball PSU Corsair 750TX - primary / Corsair CX600 - second Case Antec 900-2 - SSD compatible / NZXT Vulcan mini tower Cooling Zalman CNPS9900A Hard Drives Primary Ultimate x64 build-
WD Black Edition 1tb Sata 6.0 = 2
WD Black Edition 1tb Sata 3.0 = 2 (OS drives)
WD 1tb Green Power sata = 2 1 external
usb flash drives = 18
Second 7 Pro x64 mini tower-
WD Caviar SE 500gb sata II single drive presen Internet Speed 30mbps upgrade - primary hard wired - mini tower usb WiFi Unwanted Viral Browser Toolbars problems? All times are GMT -5. The time now is 03:58 PM. | |