Toolbar888 removal

Hi guys, i hope you are able to help, i am having problem with the toolbar888 issue, every 5 to 10 minutes, it keeps popping up on the screen, i say remove, and nevertheless in 5 to 10 minutes, it will re appear, I have followed the support pages, and will attach the required file logs, please help

many thanks Clive

my HIjack file as below, also see attachements:

 

What should i do?

thanks for the attached post, am i right in saying you have removed my file from my original post, and put it as an attached file? If so cheers

 

Yes Halo has done as you say. I still need the bitdefender log though.

Have you looked in Add/Remove programs for Toolbar888 I have seen it successfully removed simply by uninstalling it. If not I can give you manual removal instructions.

 

I will run a bitdefender program, and pass the log, when I fiollowed the instructions given, i was unable to run bitdefender. I will give it a try today and post it. Yes I have looked in ad/remove files as well as using uninstall 2006, and toolbar888 was there, and remove it,but to no avail, i will keep you posted

 

OK, just try one more time with the Bitdefender scan and if you are still having a problem let me know and I will procede from there.

 

This is the report that Bitdefender wanted me to send to them for their stats purpose, i hope that this is the right one. I know that of the 43 infected files 42 were deleted, and 1 was left, don't know which one.

cheers for the help

Clive

// Edit: Removed inline BD Summary (unneeded) //

 

You have both Antivir and AVG installed. You shouldn't run 2 antiivirus programs please uninstall one before continuing as per the read and run me.

You have spybots teatimer enabled. We asked you to disable this in the Read and Run Me, please do this before continuing.

I see no evidence of Toolbar888 in your logs.

Did you add these lines to your host file

They are effectivly blocking alcohol-soft.com and I see you have Alcohol 120 installed so can only think of one reason why you'd block their site.

Using add/remove programs which can be accessed from the control panel, uninstall the following:

Download and install Sun Java Runtime Environment 5.0 Update 9


Download

- Pocket KillBox

Extract to its own folder somewhere that you will be able to locate later.

IMPORTANT: You should print or save the below locally, so you can refer to them while offline. You must exit all browsers before running the below steps and it would be best if you actually physically unplug your cable to the internet, reboot, and do not run anything but what I give you to do. Also it would be good to exit all processes and items in your System tray.

Do the above before continuing! Okay unplug your cable now.

Make sure you have rebooted in Normal Mode (do not open any other processes)


Run HijackThis. Click the 'Do a system scan only' button.


Once the scan has completed click Config

Click Misc Tools

Click Open Process Manager

Terminate the following processes by selecting them from the list and clicking Kill Process

Click back to return to the scan results.

Place a checkmark in the box next to the following lines:

Click on the 'Fix checked' button. Wait for HijackThis to finish; close HijackThis.

Now run Pocket Killbox:

Paste the below filenames into KILL BOX one at a time. Check mark the box that says "Delete on Reboot" and checkmark the box "Unregister DLL" (If available) Click the RED X and it will ask you to confirm the file for deletion say YES and when the next box opens prompting you to reboot now...click NO...and proceed with the next file. Once you get to the last one click YES and it will reboot.

If Killbox does not reboot or you get a Pending Operations type error message just reboot your PC yourself.

Now boot into SAFE MODE

Open Windows Explorer navigate to and DELETE the following: (Some of these may have already been deleted by Pocket Killbox)

If you have Windows XP delete the contents of C:\WINDOWS\Prefetch.


REBOOT to Normal Mode.

Let me know how things are running now

Post a fresh HijackThis log, a fresh newfiles log and a fresh activescan log.