searchmiracle.elitebar help!

I have a bug on my computer. I don't know how it got through my Norton Internet Security and Microsoft AntiSpyware, but it did. I've run Norton, Microsoft AntiSpyware and Spy-bot and got a bug called Adware.Elitebar.B off my computer (I think) - My computer runs absolutely fine...but when I restart my computer, the Microsoft AntiSpyware gives an alert about Searchmiracle.Elitebar (without the B). I have the option to Allow the bug or Block the bug. I block it, MS AntiSpyware removes something and my computer runs just fine. If I reboot I get the message again from MS AntiSpyware, I Block it and the computer runs just fine again. It's just annoying! Can you help? I really do appreciate your input...

 

I forgot to mention that I am running Windows XP with Service Pack 2.

 

This is what symantec says to do.

Symantec fix

We have a special tool that might work for it. It must be used in safe mode, run it a couple of time and read the README it has. Elite Tool Bar Remover
Here is what author says about this tool.
Author website

Also we ask that you first try to do ALL the TUTORIAL listed below.

This site has alot of good tools for cleaning up your computer. It's very important that the first thing you do is the following:

First, please follow ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal.
If you already have any of the programs linked in the tutorial please double check your version to make sure you have the latest one and that you have any/all updates for the programs.

NOTE: In order to resolve the issues you are having it is very important that you at least try to perform all the steps as outlined. If you have any difficulty please post back letting us know what steps you have completed, what you found while doing the scans if anything and details about any problems you have encountered in completing the steps. The more details you can provide the better.

Try this... you may find it's all you need. If not post your results and I am sure someone will help you. Everyone is quite busy, as you can see by the number of posts, so hang in there.
Good Luck!!

After doing ALL of the above if you still have a problem:

Make sure you have HijackThis 1.99 and follow the guidelines on where to install it and how to post a log as an attachment. This is all covered in the sticky thread NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting

Now post a HijackThis log as an attachment to your message (Do not post the log inline). All running programs should be closed, INCLUDING YOUR WEB BROWSER, e-mail. Close before running Hijack This!

To repeat: Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file. Place it in its own folder for example C:\Program Files\HJT

 

Well, I did everything on the "READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal" page but still get the same Microsoft Antispyware Alert when I reboot (see attached). I did not find anything on my computer doing the scans with all the software I ran from the "READ ME FIRST" page. What should I do now? Do you want me to attach a Hijackthis job?

Thank you.

 

Yes, attach a HJT log as instructed in post #3 of this thread.

 

The microsoft beta has been having some problems, they do show some false positives sometimes. I don't know if it is true in this particular case. You need to make sure you do what is said in this article by Chaslang. Spyblaster will protect you from a lot of things and I would strongly consider using Firefox as your browser.

Chaslang's Recommendation to prevent spyware

Did you run the the ELITE TOOLBAR REMOVER from #3 in this thread?

 

I am trying to install the sun java, as recommended but keep getting the attached message. What can I do to install the sun java program?
Thanks.

 

Here is my Hijack This File.

I did all the recommended things:
When, and if, we ask you to post your logfile, please attach it as a file. To do this save the log file and select Go Advanced and then Manage Attachments to upload it in a new thread if you have not already started a thread for your problem. It is very important that you close all running programs including your web browser (this includes Internet Explorer), email, items in the tray before running Hijack This!

Finally, do NOT install Hijack This to the Desktop, any folder under Documents and Settings (Win2k, WinXP), a temp folder or choose to run it directly from the downloaded ZIP file. You will not get backups or could easily lose them if you do not follow these directions. Place Hijack This in its own folder, for example C:\Program Files\HJT Also do not run Hijack This in safe mode unless someone specifically requests that you do so.

Please also answer my post below about sun java installation....

 

You did not do this:

Finally, do NOT install Hijack This to the Desktop, any folder under Documents and Settings (Win2k, WinXP), a temp folder or choose to run it directly from the downloaded ZIP file. You will not get backups or could easily lose them if you do not follow these directions. Place Hijack This in its own folder, for example C:\Program Files\HJT Also do not run Hijack This in safe mode unless someone specifically requests that you do so.

You are running HJT from the zipped file. You must give HJT it's own folder like C:\Program Files]HJT

Pls do this properly and resubmit.
I am not sure about the Sun Java.
I will try and find out.

Did you run the Elite Toolbar Remover in #3 from this post?

 

Sorry about the incorrect hijack this post. I think I know what I did. The first time I "saved" the file to a folder (the .zip file to C:\Program Files\HJT)

This time I "Open" the file, and it opened. I clicked the file (it was an .exe and not a .zip file) and it opened the Hijack This software. I closed everything and did a scan. Please let me know if the attached is correct.

Thank you for your patience.

 

I think I overlooked running the Elite Toolbar Remover. But I promise it is the only think I overlooked....

I will run and post my results...

 

I ran the elite toolbar remover in safe mode...turned off the computer, turned it on and the stupid alert for searchmiracle.elitebar came up!

Now what...

 

Supply me with a new HJT from the correct folder.

 

What? I did it wrong again? Then I guess I just don't get it. I really do not understand the instructions on how to use Hijack This. Please help.

 

This line shows where you are running it from and that you are clicking the zip file.
C:\DOCUME~1\LANCEF~1\LOCALS~1\Temp\Temporary Directory 1 for hijackthis[1].zip\HijackThis.exe


1. Make a folder in the Program Files and call it HJT
2. Left double click the zipped folder and it should give you a choice where to unzip it to
3 browse until you find the folder you just made and then choose that folder to unzip it to
4 Then go to c:\Program Files\HJT and the Hijack This.exe file should be there.
5 Now left double click 0n it and it should run.

If #2 doesn't work when you click on it just D/L it again to somewhere else and then follow the above procedure

Good luck

 

Alrighty then...
This has to be right. What I did was a little different than what you explained to do though...

- I downloaded and saved a zipped folder which contains an .exe file.
- I used Windows Explorer to find the zipped folder containing the .exe file.
- When I highlight the zipped folder, on the side the Windows Explorer (listed under "File and Folder Tasks") it said extract files.
- I processed to extract the files to the C:\Program Files\HJT folder.
- I found the extracted file and clicked, then ran the Hijack This extracted program, with all programs closed of course.

I hope this works..

 

I need to correct my the steps I explained in the last post:

- I downloaded and saved a zipped folder which contains an .exe file.
- I used Windows Explorer to find the zipped folder containing the .exe file.
- When I highlight the .exe file in the zipped folder, on the side the Windows Explorer (listed under "Folder Tasks") it said extract files...please see attached screen capture.
- I processed to extract the files to the C:\Program Files\HJT folder.
- I found the extracted file and clicked, then ran the Hijack This extracted program, with all programs closed of course.

Thanks for your help!!!

 

YOU DID IT RIGHT with HJT!!!

I do not see Elite Bar on your computer. Your computer looks clean. We currently are recommending not to use the Microsoft Beta. If you feel you should that is up to you. I strongly reccomend you:
Install SpyWare Blaster and Enable all Protection
Immunize with Spybot
Use Firefox instead of IE Firefox doesn't use ActiveX controls)
Be sure to follow the Protect from Malware
If you use Microsoft Spyware beta see if you can block things silently and thus you won't keep getting the popups.


I'm not sure what the problem with installing Java is, I have asked a few others and they have not seen the message before. You might try going to the software forum and posting it there.

There is some concern about the LimeWire you have installed. The jury is still out but the P2P programs are SUSPECT. They say they have no malware but I am not sure I trust them. If you want to get rid of it just go to add/remove programs. Once again this is up to you.

Good Luck.

 

All sounds great!

I took your recommendations and did the following:

-removed Microsoft Beta from my computer
-Installed SpyWare Blaster and Enable all Protection
-Immunized with Spybot - Search & Distroy
-Use Firefox instead of IE
-followed the Protect from Malware
-posted a question about sun java in the software forum

I don't understand this about Limewire?? Are you saying my Limesire looks infected?? You could tell from looking at my Hijack This Log??
There is some concern about the LimeWire you have installed. The jury is still out but the P2P programs are SUSPECT. They say they have no malware but I am not sure I trust them. If you want to get rid of it just go to add/remove programs. Once again this is up to you.

 

LimeWare is not infected as such. From my understanding they at one point bundled malware with their product. They now say they don't do that anymore.
Whether they do or not - jury is still out. I can not say for sure that you should trust or not trust it at this point. Alot of the P2P software has had malware in it. Maybe they are OK now. it is up to you. Just watch it for a while and see if any problems.

 

Sorry meant LimeWire.