Unexplained search bar in IE

Discussion in 'Windows Desktop Systems' started by CelicaMan94, Feb 16, 2004.

  1. CelicaMan94

    CelicaMan94 OSNN Junior Addict

    Messages:
    27
    I just formatted my computer, and I'm already being hit with BS...

    This search bar on IE, called Spidersearch.com bar or whatnot, has the neat ability to replace the advertisements on most web pages with nothing but porn ads. It also has an IE link, which can't be removed, that reads "Naughty Sex Starved College Girls". Don't get me wrong, T & A is nice, but this is ridiculous.

    I can't uninstall it, I tried deleting any registry that was associated with it, whenever I disable it it just comes right back after reboot, and worst of all I have no clue where it came from. Can someone help me get rid of this nuisance?
     
  2. lad_in_brum

    lad_in_brum OSNN Addict

    Messages:
    138
    Location:
    Birmingham, UK
    Have you tried using spy-bot and ad-aware?
     
  3. Enyo

    Enyo Moderator

    Messages:
    1,338
  4. Johnny

    Johnny .. Commodore .. Political User

    Messages:
    5,015
    Location:
    Happy Valley
    use hijackthis, ad aware, and spy bot. they will clean it up. also use regedit to clean the registry again.

    Then when you do that get yourself a pop up stopper and web filter ..
     
  5. CelicaMan94

    CelicaMan94 OSNN Junior Addict

    Messages:
    27
    I scanned and deleted what I saw that could be the search bar, but it just comes right back up when I open a new browser window. The log is attached.
     
  6. Tiesto

    Tiesto OSNN Addict

    Messages:
    112
    I dont see the attachment
     
  7. CelicaMan94

    CelicaMan94 OSNN Junior Addict

    Messages:
    27
    Me either. I attached it though. I'll try again.
     
  8. CelicaMan94

    CelicaMan94 OSNN Junior Addict

    Messages:
    27
    Here it is
     

    Attached Files:

  9. sboulema

    sboulema Moderator

    Messages:
    2,846
    Location:
    Amstelveen, The Netherlands
    remove these:

    Code:
    R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = [url]http://www.spidersearch.com/frame_results.php[/url]
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = [url]http://www.spidersearch.com/frame_results.php[/url]
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = [url]http://www.spidersearch.com/frame_results.php[/url]
    
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = [url]http://www.spidersearch.com/frame_results.php[/url]
    
     
  10. CelicaMan94

    CelicaMan94 OSNN Junior Addict

    Messages:
    27
    I removed those keys, but it's still there. Do I need to reboot?
     
  11. Mubbers

    Mubbers Shoot! Political User

    Messages:
    1,087
    Probably yes, also make sure the process is stopped (task manager) but adaware should do this for you or it may rewrite itself.

    Mubbers
     
  12. CelicaMan94

    CelicaMan94 OSNN Junior Addict

    Messages:
    27
    I got ad-aware and scanned, but no luck at all. The damn thing just won't go away.
     
  13. Enyo

    Enyo Moderator

    Messages:
    1,338
    Remove the lines above and also remove:

    O3 - Toolbar: (no name) - {0AAF602E-72A1-45FE-BAB1-06971E07EAA2} - C:\WINDOWS\System32\bmeb.dll
    O2 - BHO: ineb Helper - {753AA023-02D1-447D-8B55-53A91A5ABF18} - C:\WINDOWS\System32\bmeb.dll
     
  14. CelicaMan94

    CelicaMan94 OSNN Junior Addict

    Messages:
    27
    Schweet, that killed it. Thanks a lot for the help!
     
  15. Friend of Bill

    Friend of Bill What, me worry?

    Messages:
    1,572
    CW Shredder is also a good program to take care of hijackers.