Removing tool bars

  • Thread starter Thread starter Keith
  • Start date Start date
K

Keith

Before I got my fire wall running at full speed, I had a
couple of "tool bars" that attached themselves to my
system (Windows XP Home edition) via pop-ups (gambling
sites, etc).

I can hide the bars by "un-checking" them (right click on
the tool bar and de-selecting them), but cannot figure
out how to remove them completely.

Any suggestions?

Thanks
 
get and use spybot to remove these toolbars.
google.com search for spybot.
********************************************
 
Click Start, Run and enter REGEDIT Go to:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar

Look in the right pane and make a note of the value names found there.
Then go to:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID

And locate the sukey that has the same name as the value you noted in the
above step. This will allow you to identify which toolbar corresponds to
which value.

Once you've determined which value, in the first key, and the subkey in the
second, simply right click each and select Delete. You can choose Export,
in case you want to make a backup, just in case.
 
Removing Toolbars:
~~~~~~~~~~~~~

First option is to run Ad-Aware scan (www.lavasoftusa.com). If the toolbar
entries are not removed still,

ToolbarCop:
http://www.angelfire.com/dragon/sramesh2k/utils/ToolbarCop.exe

Manual Procedure:
Start Registry Editor (Regedit.exe)
Go to the following location and check each GUID sub-key. One of which is
the malware toolbar entry:
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions

Also, check here:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions
{check the values in the right-pane to identify the malware toolbar.)

Spot the entry and delete the appropriate key (backup the registry first)

--
Regards,
Ramesh
AOL: SRamesh2k

«·´`·.(*·.¸(`·.¸ ¸.·´)¸.·*).·´`·»
«.............. Ramesh ...............»
«·´`·.(¸.·´(¸.·* *·.¸)`·.¸).·´`·»

~ Please reply to newsgroup ~


Before I got my fire wall running at full speed, I had a
couple of "tool bars" that attached themselves to my
system (Windows XP Home edition) via pop-ups (gambling
sites, etc).

I can hide the bars by "un-checking" them (right click on
the tool bar and de-selecting them), but cannot figure
out how to remove them completely.

Any suggestions?

Thanks
 
Ramesh,

If I'm correct, your utility only removes added buttons, not toolbars,
correct? It lists the Alexa button for my toolbar, but not the Alexa
toolbar itself.
 
Hi Doug,

It's supposed to list the ToolBands also.
It goes like this:

Toolbar buttons page: Takes the following registry keys into consideration:
HKCU\Software\Microsoft\Internet Explorer\Extensions
& HKLM\Software\Microsoft\Internet Explorer\Extensions


ToolBand page: Takes the following registry keys:
HKCU\Software\Microsoft\Internet Explorer\Toolbar\Web Browser
(Maps the CLSIDs to the following location : HKCR\CLSID\<Actual CLSID>

I have google toolbar installed and TBCop removes it pretty fine.
Theoratically, it should remove Alexa as well.

Pls let me know if I'm wrong.

--
Regards,
Ramesh
AOL: SRamesh2k

«·´`·.(*·.¸(`·.¸ ¸.·´)¸.·*).·´`·»
«.............. Ramesh ...............»
«·´`·.(¸.·´(¸.·* *·.¸)`·.¸).·´`·»

~ Please reply to newsgroup ~


Ramesh,

If I'm correct, your utility only removes added buttons, not toolbars,
correct? It lists the Alexa button for my toolbar, but not the Alexa
toolbar itself.
 
Thanks for the help

-----Original Message-----
Click Start, Run and enter REGEDIT Go to:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar

Look in the right pane and make a note of the value names found there.
Then go to:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID

And locate the sukey that has the same name as the value you noted in the
above step. This will allow you to identify which toolbar corresponds to
which value.

Once you've determined which value, in the first key, and the subkey in the
second, simply right click each and select Delete. You can choose Export,
in case you want to make a backup, just in case.






.
Click to expand...
 
The toolbar entries are in:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar

And the values match up with subkeys:

HKEY_CLASSES_ROOT\CLSID

that actually define the toolbars.
 
Alexa Toolbar is listed as "Microsoft CommBand" in the Web Browser registry
key. It is also listed in the Toolband form(TBCop). I just downloaded Alexa
and tested it.

--
Regards,
Ramesh
AOL: SRamesh2k

«·´`·.(*·.¸(`·.¸ ¸.·´)¸.·*).·´`·»
«.............. Ramesh ...............»
«·´`·.(¸.·´(¸.·* *·.¸)`·.¸).·´`·»

~ Please reply to newsgroup ~


Ramesh,

If I'm correct, your utility only removes added buttons, not toolbars,
correct? It lists the Alexa button for my toolbar, but not the Alexa
toolbar itself.
 
Exactly, Doug. In Alexa's case, it seemed to have created another CLSID.
[3CEFF6CD-6F08-4e4d-BCCD-FF7415288C3B]

--
Regards,
Ramesh
AOL: SRamesh2k

«·´`·.(*·.¸(`·.¸ ¸.·´)¸.·*).·´`·»
«.............. Ramesh ...............»
«·´`·.(¸.·´(¸.·* *·.¸)`·.¸).·´`·»

~ Please reply to newsgroup ~


The toolbar entries are in:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar

And the values match up with subkeys:

HKEY_CLASSES_ROOT\CLSID

that actually define the toolbars.
 
Alexa creates a button and a toolbar, Ramesh, and they are treated
separately. The Alexa button shows up in your app, but the toolbar itself
doesn't. And removing the button does not remove the toolbar.



Ramesh said:
Exactly, Doug. In Alexa's case, it seemed to have created another CLSID.
[3CEFF6CD-6F08-4e4d-BCCD-FF7415288C3B]

--
Regards,
Ramesh
AOL: SRamesh2k

«·´`·.(*·.¸(`·.¸ ¸.·´)¸.·*).·´`·»
«.............. Ramesh ...............»
«·´`·.(¸.·´(¸.·* *·.¸)`·.¸).·´`·»

~ Please reply to newsgroup ~


The toolbar entries are in:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar

And the values match up with subkeys:

HKEY_CLASSES_ROOT\CLSID

that actually define the toolbars.



Ramesh said:
Hi Doug,

It's supposed to list the ToolBands also.
It goes like this:

Toolbar buttons page: Takes the following registry keys into consideration:
HKCU\Software\Microsoft\Internet Explorer\Extensions
& HKLM\Software\Microsoft\Internet Explorer\Extensions


ToolBand page: Takes the following registry keys:
HKCU\Software\Microsoft\Internet Explorer\Toolbar\Web Browser
(Maps the CLSIDs to the following location : HKCR\CLSID\<Actual CLSID>

I have google toolbar installed and TBCop removes it pretty fine.
Theoratically, it should remove Alexa as well.

Pls let me know if I'm wrong.

--
Regards,
Ramesh
AOL: SRamesh2k

«·´`·.(*·.¸(`·.¸ ¸.·´)¸.·*).·´`·»
«.............. Ramesh ...............»
«·´`·.(¸.·´(¸.·* *·.¸)`·.¸).·´`·»

~ Please reply to newsgroup ~


Ramesh,

If I'm correct, your utility only removes added buttons, not toolbars,
correct? It lists the Alexa button for my toolbar, but not the Alexa
toolbar itself.
Click to expand...
Click to expand...
 
Thanks a lot.........

I mistakenly referenced "hklm/software/microsoft/internet
explorer/toolbar/web browser" instead of
"hklm/software/microsoft/internet explorer/toolbar"

Now, all is fine. Detects Alexa too :) Updated one at:
http://www.angelfire.com/dragon/sramesh2k/utils/ToolbarCop.exe

Very good learning experience (from a pro).

Regarding your QuickLaunch project:
This might help you:
http://support.microsoft.com/support/kb/articles/Q214/8/42.ASP

--
Regards,
Ramesh
AOL: SRamesh2k

«·´`·.(*·.¸(`·.¸ ¸.·´)¸.·*).·´`·»
«.............. Ramesh ...............»
«·´`·.(¸.·´(¸.·* *·.¸)`·.¸).·´`·»

~ Please reply to newsgroup ~


The toolbar entries are in:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar

And the values match up with subkeys:

HKEY_CLASSES_ROOT\CLSID

that actually define the toolbars.
 
Back
Top