Claro toolbar infection?

Page 1 of 2 12 LastLast

  1. Posts : 24,479
    Windows 7 Ultimate X64 SP1
       #1

    Claro toolbar infection?


    I think I may have an infection from downloading a Shockwave Flash player although I UNchecked all of the add on in its program. I got a "Claro Toolbar" installed and IE opened to a Claro search as my home page. I uninstalled this Claro toolbar but I think something remains. I have downloaded NBRT 3 times but it won't run, see error. I also ran Power Eraser and nothing was found. I ran the free MalwareBytes too and it was clean.

    I did uninstall the toolbar and removed it from IE9 Add Ons.
    Claro toolbar infection?-nbrt-error.jpg

    Claro toolbar infection?-toolbar-missing.jpg
      My Computer


  2. Posts : 10,994
    Win 7 Pro 64-bit
       #2

    This has me puzzled, Gary. Claro is apparently a fairly well-known problem. But after Googling, Bing-ing, Yahoo-ing, and using a few more search engines, and going through literally dozens of pages, I couldn't find any removal instructions from any of the well-known antimalware companies. Even searching on BleepingComputer failed to provide anything. This was the closest I came to finding removal instructions that didn't also include an ad to buy some unknown, unheard of, removal tool.

    How To Remove The iSearch Claro Search Hijacker Virus (isearch.claro-search.com) | Botcrawl.com
      My Computer


  3. Posts : 24,479
    Windows 7 Ultimate X64 SP1
    Thread Starter
       #3

    Thanks Lee, I did the search regimen as well but didn't find what you did. I had already went through the normal uninstall process and disabling of the addon. Maybe I have got rid of it but...
    I did a system restore to the day before I downloaded it which corrected another issue. I ran the sfc scan which found corrupt files that couldn't be repaired. Non repairable files The search service still will not start on demand, perhaps that is normal?

    I used the Norton removal tool and installed an earlier version which corrected the toolbar missing, it is now back. My earlier version of Norton had this issue which I think was Claro related. The red "X" on the tray icon mean it is not working or not up to date or expired.

    Claro toolbar infection?-nis-fubar.jpg

    Sorry if this confuses you, it has me too.
      My Computer


  4. Posts : 35
    Windows 7 64 / Windows 8 64
       #4

    Haven't heard of claro tooblar distributed through trojans. However, in many cases it might install additional software on its own to protect the user from uninstalling it.
    As Claro is Potentially unwanted program only, it is not surprising that bootable scanner does not find anything (they aim at rootkit/trojan infections more).
      My Computer


  5. Posts : 25,847
    Windows 10 Pro. 64/ version 1709 Windows 7 Pro/64
       #5
      My Computer


  6. Posts : 568
    Windows 7 64-bit, Windows 8.1 64-bit, OSX El Capitan, Windows 10 (VMware)
       #6

    Maybe it's my duckduckgo.com search engine, but there are some pretty good advices for cleaning up after Claro toolbar. Top two search result by the ducks for "uninstall Claro":

    Remove Claro Search Virus, removal instructions
    Remove Claro Search (Removal Instructions)
      My Computer


  7. Posts : 24,479
    Windows 7 Ultimate X64 SP1
    Thread Starter
       #7

    Cr00zng said:
    Maybe it's my duckduckgo.com search engine, but there are some pretty good advices for cleaning up after Claro toolbar. Top two search result by the ducks for "uninstall Claro":

    Remove Claro Search Virus, removal instructions
    Remove Claro Search (Removal Instructions)
    Thank to you both! The AdwCleaner found some more crappola and removed it. My system seems to be chugging along fine so far.
    Code:
    ***** [Services] *****
    
    ***** [Files / Folders] *****
    Folder Deleted : K:\ProgramData\Babylon
    Folder Deleted : K:\Users\GlBritton\AppData\Roaming\Babylon
    ***** [Registry] *****
    Key Deleted : HKCU\Software\APN PIP
    Key Deleted : HKCU\Software\DataMngr
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
    Key Deleted : HKCU\Software\592dcdfb369bf15
    Key Deleted : HKLM\Software\PIP
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
    ***** [Internet Browsers] *****
    -\\ Internet Explorer v9.0.8112.16457
    [OK] Registry is clean.
    *************************
      My Computer


  8. Posts : 10,994
    Win 7 Pro 64-bit
       #8

    Great news, Gary!
      My Computer


  9. Posts : 25,847
    Windows 10 Pro. 64/ version 1709 Windows 7 Pro/64
       #9

    Good old Bayblon is still getting people.
    Here is another little program that find things that aren't infection but you might not want.
    Download CKScanner by askey127 from Here & save it to your Desktop
      My Computer


  10. Posts : 24,479
    Windows 7 Ultimate X64 SP1
    Thread Starter
       #10

    Hmm, I Googled CKScanner and some sites say it is a virus? I tried getting it though but the download was going only 2.02KBs and then froze.

    I did find some more claro items in the Registry by doing a search, no Babylon though.
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 08:17.
Find Us