Unexplained search bar in IE

[CelicaMan94]

I just formatted my computer, and I'm already being hit with BS...

This search bar on IE, called Spidersearch.com bar or whatnot, has the neat ability to replace the advertisements on most web pages with nothing but porn ads. It also has an IE link, which can't be removed, that reads "Naughty Sex Starved College Girls". Don't get me wrong, T & A is nice, but this is ridiculous.

I can't uninstall it, I tried deleting any registry that was associated with it, whenever I disable it it just comes right back after reboot, and worst of all I have no clue where it came from. Can someone help me get rid of this nuisance?

 

[lad_in_brum]

Have you tried using spy-bot and ad-aware?

 

[Enyo]

Download HiJack This from:

http://www.ntfs.org/forum/showpost.php?p=21749&postcount=4

And post your log here.

 

[Johnny]

use hijackthis, ad aware, and spy bot. they will clean it up. also use regedit to clean the registry again.

Then when you do that get yourself a pop up stopper and web filter ..

 

[CelicaMan94]

I scanned and deleted what I saw that could be the search bar, but it just comes right back up when I open a new browser window. The log is attached.

 

[Tiesto]

I dont see the attachment

 

[CelicaMan94]

Me either. I attached it though. I'll try again.

 

[CelicaMan94]

Here it is

 

[sboulema]

remove these:

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = [url]http://www.spidersearch.com/frame_results.php[/url]
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = [url]http://www.spidersearch.com/frame_results.php[/url]
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = [url]http://www.spidersearch.com/frame_results.php[/url]

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = [url]http://www.spidersearch.com/frame_results.php[/url]

 

[CelicaMan94]

I removed those keys, but it's still there. Do I need to reboot?

 

[Mubbers]

Probably yes, also make sure the process is stopped (task manager) but adaware should do this for you or it may rewrite itself.

Mubbers

 

[CelicaMan94]

I got ad-aware and scanned, but no luck at all. The damn thing just won't go away.

 

[Enyo]

Remove the lines above and also remove:

O3 - Toolbar: (no name) - {0AAF602E-72A1-45FE-BAB1-06971E07EAA2} - C:\WINDOWS\System32\bmeb.dll
O2 - BHO: ineb Helper - {753AA023-02D1-447D-8B55-53A91A5ABF18} - C:\WINDOWS\System32\bmeb.dll

 

[CelicaMan94]

Schweet, that killed it. Thanks a lot for the help!

 

[Friend of Bill]

CW Shredder is also a good program to take care of hijackers.