Hi Ken,Softomate can refer to quite alot of toolbars so
if you could find any of the folders or listing in the
add/remove screen it would be easier to fix.
First.
Turn off your system restore.
Goto start >right click my computer > then choose
properties > then system restore > check the box ' turn
off system restore ' then press apply and exit
Reboot the pc and see if it still detects Softomate if it
does get the latest pattern file from Trend if thats how
you update it and boot into safe mode (reboot and keep
tapping F8 untill you see the option page the choose safe
mode)Run a full scan in safe mode with trend and MS
Antispy if you have it.
Reboot and see if its still being detected,Turn system
restore back on if its clear by following the above but
unchecking the box 'turn off system restore' then press
apply.
To check for any signs of this manually try this :
Go to add/remove screen and check for these(remove any
found)
IE Toolbar
Searchit - toolbar
YuupSearch Toolbar
Toolbar - My toolbar
masterbarHallmedia.net
AutoSearch
411Ferret Toolbar
qidion - toolbar
You may need to un-register the .dll files if any of the
add/remove screen entries are found Let me know which one
if you need help with that.Also If you find any of the
folders below you then know what variant it is.
Check C:\Programfiles area for these folders
Search-Explorer
MasterBar
SearchLocate
411Ferret
YuupSearch Toolbar
STC
You can also check if these files exist for the other
Variants:
Qidion -
C:\Windows\Downloaded Program Files\qi32.dll
isearch -
C:\Windows\system32\toolbar.dll
C:\Windows\system32\version.txt
Searchit -
C:\Windows\Downloaded Program Files\srchitbar.dll
Gexus & WhyPPC -
C:\Windows\Downloaded Program Files\toolbar.dll
Yuups Vaiant -
C:\Windows\system32\run_dll.exe
If you have been infected with isearch at any stage it
could modify your hosts file so its worth you checking
that.
If you know how to use the hosts file open it with
notepad and check the local host line if its been
modified it will now say 127.0.0.0 plus you will have
security related sites going from 127.0.0.2 upwards
the only entry that should be in the hosts file if you
havent added any are examples then a 127.0.0.1 localhost
line remove anything below this line and restore the
correct number to the localhost if its been changed.
A easier way is to download Hoster 1.6
Download from here:
http://andymanchesta.com/Downloads2/hoster.zip
Save it to your desktop,extract and run.Choose
to 'Restore Original Hosts' to reset them to the
microsoft default host file if its been changed then exit
Let me know if you need any help,Theres alot of possible
reg entries but it will be easier if you can find any of
the files so we know which one it is,The problem could of
even been with system restore if the files have saved
into there so turning the restore off and rebooting then
re-enabling system restore may clear it for you .
Regards
Andy
