Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Unwanted Viral Browser Toolbars


05 Feb 2013   #1

Windows 7 Home Premium 64 bit. (On both machines)
 
 
Unwanted Viral Browser Toolbars

Hi hoping for some advice about this

My PC is infected by the following:
Snap.do - Babylon Search Toolbar, Claro Search Toolbar. There are 14 total instances of this garbage and I have no idea how they came to be on the computer. I am very conscious of dangerous sites and "passengers" within downloads, I scrutinise everything for the usual check boxes and never check or uncheck anything that might piggy-back in. I have AVG 2012 I.S. and MSE, neither of which have managed to find any of this, never mind kill it.

I have searched the Registry with <Find> and killed these Toolbars in IE and my main browser, FF. However, they return to the Registry after closing it, Restarting and opening <Regedit> again. (Boy, these things are tough!) They do not appear in my browsers now, but Snap.do will show up and take over if I use the Google Search Bar. I have noticed a gradual slow down of my system: not too bad, but timing over a week has shown a slowdown of Boot, by 8 seconds over the 7 days.

As I was typing this, AVG Scheduled Scan pop-up reported no problems, giving 'Zero's' for all, including Spyware. I used Malware Bytes 2 days ago, but have just seen Brink's information about Updates to that, thanks Brink I will try that after logging out, although the sheer persistence of these nasties does not give me confidence.
Thanks to all who post.


My System SpecsSystem Spec
.

05 Feb 2013   #2

Windows 7 64 / Windows 8 64
 
 

Hi.
Boot time most likely affected by badly uninstalled programs.
First, go through your computer's Control center and uninstall all the programs that were installed during last date. This is not only for the toolbars, but for various programs that "protect" browser settings. some of the toolbars use them.
Next, scan your PC with hitman pro ( HitmanPro 3 - SurfRight
Next, Scan with adwcleaner :
If something is still left, try scanning with Spybot (targets such programs better than mbam), or go through your search settings.
My System SpecsSystem Spec
05 Feb 2013   #3

Windows 7 Home Premium
 
 

Bertison,

As gied mentioned, try running the AdwCleaner program:
http://www.bleepingcomputer.com/download/adwcleaner/

It searches and removes unwanted toolbars, programs, adwares, and browser hijackers.
Also, it is compatible with Windows XP, Vista, and 7: versions 32 and 64 bits.

After downloading, save AdwCleaner to the Desktop
Right-click on adwcleaner.exe and select: Run As Administrator
Click the Search button

When done, a text file opens.

Please post the content of the AdwCleaner[Sn].txt in your reply.

Note: You can also find the reports at C:\AdwCleaner[Sn].txt (S = search, n = order number), or, C:\AdwCleaner[Rn].txt (R = remove, n = order number)
My System SpecsSystem Spec
.


05 Feb 2013   #4

Windows 7 Ultimate x64, XP Mode, W8.1 Preview VM - 7 Pro x64 second remote tower
 
 

I found some other references that may be more help to you on how to manually remove all traces. AVG will not find and remove a number of "bugs" as I previously ran with AVG and others until coming across a far superior av/antimalware software with an effective firewall.

The first link here instructs on how to remove the toolbar annoyance from IE and Chrome which will have you download Malwarebytes. How to completely remove Babylon Toolbar and "Search the web (Babylon)"

For FireFox the second link deals with it there on the page seen at How To Uninstall The Babylon Toolbar Completely -

And one other page is found at Mozilla when the question comes up for Can you help me completely delete babylon.com from my computer?

The page there list several more links for each step of the process to review. Generally something you install may have a toolbar option with or without the uncheck boxes seen. You must have just lately tried out something new and got burned by the toolbar installer hidden in the mix. The downloaded program doesn't necessarily mean you were on a bad site since crapware is often more cleverly hidden and only seen during the install.
My System SpecsSystem Spec
06 Feb 2013   #5

Windows 7 Home Premium 64 bit. (On both machines)
 
 

Thanks guys for all of that great advice.
I had an appointment yesterday and did not return until this morning, so apologies for not responding sooner. A little more info:

I had downloaded what I thought to be an Anti Spyware programme from the USA - anyone used "Spyhunter"? That is the source of all the infection reports . Listed as a "Free" Download, it came up with a total of 14 'Infections' all based upon Snap.do, Babylon and Claro Search. When I asked to "Fix" the problems, it asked for $99.99. I uninstalled it, wiped it from the Registry and received a message asking why I uninstalled, then offering the same programme for $10! - thanks, but no thanks!

Purchased & downloaded Malwarebytes Pro, carried out a Full scan, no reports of any Nasties.

gied - thanks, I already tried your suggestions. Kept a note of them though, much appreciated.

cottonball & NightHawk - thanks to you both, I will try them in order. I will report any further results later. I really appreciate your assistance guys, thanks.
My System SpecsSystem Spec
06 Feb 2013   #6

Windows 7 64 / Windows 8 64
 
 

Bertison: As far as I am aware, spyhunter is in ~39 USD range, so it is kinda weird they asked 99 USD. Are you sure this was real SH ?
My System SpecsSystem Spec
06 Feb 2013   #7

Windows 7 Home Premium
 
 

Bertison,

Save your money!

There are plenty of free programs available.

I haven't bought an Antivirus or a malware protection program for more than 12 years!!
My System SpecsSystem Spec
06 Feb 2013   #8

Windows 7 64 / Windows 8 64
 
 

Cottonball: I actually have purchased couple. I do not believe in "free cheese" kind of programs, and thats how many free antiviruses (and anti-malware) work (well, MSE exception). There are other reasons too.
My System SpecsSystem Spec
06 Feb 2013   #9

Windows 7 Home Premium 64 bit. (On both machines)
 
 

Hey folks, hope I am not the cause of a disagreement here!

cottonball, I have to say that gied may be right, as I have traced the infection to some hookey FREE Game software downloaded by a relative. Personally, I am very suspicious of the 'free' stuff, MSE and a few more excepted. I would not have downloaded that software and the computer is now password protected in BIOS and Boot from anyone else using it whilst I am away.

I have managed to remove Snap.do altogether from the Registry, now I am going after the rest.

gied, it did indeed state that SH was $99.99, then $10, after I uninstalled it, which is the part that aroused my suspicion. However, I am in the UK and despite the GBPound currently trading at $1.57, on this side of the Atlantic, we usually find US prices to us become 1 = $1. Not complaining, that's business: if they can get away with it and people are dumb enough to pay it, that's their problem.

I will report any progress here, thank you both.
My System SpecsSystem Spec
06 Feb 2013   #10

Windows 7 64 / Windows 8 64
 
 

Bertison : know some guys at company there, as far as I am told, they have no version for 99 USD, but who knows

By the way, AVG got some bad publicity recently due to similar toolbar /search hijacker distributed through its free version like the ones you remove J
My System SpecsSystem Spec
Reply

 Unwanted Viral Browser Toolbars




Thread Tools



Similar help and support threads for2: Unwanted Viral Browser Toolbars
Thread Forum
Solved Help With Unwanted Toolbars Performance & Maintenance
Going viral: Millions watch Microsoft Surface crash during debut Chillout Room
Need An Opinion On Anti-Viral Software System Security
Viral Infection BSOD Help and Support
Solved Toolbars Customization

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 06:12 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33