Cannot Remove Elite Toolbar

[PiTbUlL440]

I have recently been having trouble getting rid of the Elite Sidebar on Internet Explorer. Everytime it comes up you have the option to close it. When I close it, it just keeps popping up. I have also goin into View -> Explorer Bar -> and taken the check off Elite Sidebar, but again it keeps coming up. I have also been getting a lot of pop-ups. Can someone please help me. Thank you

[ANZAC_ELITE]

Originally Posted by PiTbUlL440

I have recently been having trouble getting rid of the Elite Sidebar on Internet Explorer. Everytime it comes up you have the option to close it. When I close it, it just keeps popping up. I have also goin into View -> Explorer Bar -> and taken the check off Elite Sidebar, but again it keeps coming up. I have also been getting a lot of pop-ups. Can someone please help me. Thank you

Try this:

Sidebar removal

[PiTbUlL440]

That's a little too confusing. Do you think you could find an easier solution? Thanks.

[sp_100]

Originally Posted by PiTbUlL440

That's a little too confusing. Do you think you could find an easier solution? Thanks.

You are kidding, right?

[Overclocked Doc]

Do you have Spybot & Adaware installed on your computer? If not, download them and run. That would probably be a good place to start.
Post back, and someone will be sure to help you.

[PiTbUlL440]

I have both Ad-aware and Spybot and have scanned with both, but no luck.

[Overclocked Doc]

Download and run "Hijackthis" and post your log. You may be able to deal with the problem by removing the unwanted "BHO" as well as anything in the start reg. that shouldn't be there. I'm sure that sp_100 will have some good insight as well.

Symantecs solution as linked by Anzac_Elite is technically correct, and may or may not be needed depending on how deep your system has been compromized. I'm simply suggesting an alternative that may work (as it appears you probably are not that "keen" on routing through the registry files)

[transformer]

Hi all,

i have read ur conversation above... myself also face the same problems...

i already done all the way suggest by u all, like spybot, ad-aware, delete the registry files manually. but the elite spyware stil come out...

Any others advance solution for these case...

thanks a lot!

[PiTbUlL440]

I have used HJT and removed the unwanted BHO's and it was gone for a while. Later it came back though. I just did it today and maybe it's gone for good. Any more suggestions? Thanks

[calthedogman]

Originally Posted by PiTbUlL440

I have both Ad-aware and Spybot and have scanned with both, but no luck.

I went to majorgeeks.com

I downloaded AntiVir xp. It is free. It found the elite bar trojan and killed it. so much for Norton. Crap compared.
While you are there , download "Spyware blaster" (free too) and run that.
Dont pay xoftspy and the like 30 quid as they dont work. the free stuff did.
(to be fair, they gave me my money back)

Good luck.

Cal

X

[Cache]

please post your HijackThis log.

[calthedogman]

[quote=calthedogman]I went to majorgeeks.com

I downloaded AntiVir xp. It is free. It found the elite bar trojan and killed it. so much for Norton. Crap compared.
While you are there , download "Spyware blaster" (free too) and run that.
Dont pay xoftspy and the like 30 quid as they dont work. the free stuff did.
(to be fair, they gave me my money back)

Good luck.

Cal

Sorry, make that, SPYWARE DOCTOR.

That should zap it

[gnatbug]

try and download a program called adware away. its $29 but you get a two week free trial so this is long enough to get rid of it. I had 5 different hijackers on my computer and tried all sorts of expensive software that didn't even work.

Click here to go to the download page.

[mgriffit]

If you are still having problems with Elite, download the removal tool from this link:
http://www.softpedia.com/get/Interne...-Remover.shtml

Hope this helps

[condor1334]

I tried the tool but it didn't work it said missing file or something. here is my HJT log

Logfile of HijackThis v1.97.7
Scan saved at 9:41:41 PM, on 3/30/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Ideazon\Zboard Software\Driver\ZboardTray.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\devldr32.exe
C:\Program Files\Ideazon\Zboard Software\Driver\Zboard.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\System32\wuauclt.exe
F:\Installers2\HijackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\AIM\aim.exe
C:\WINDOWS\System32\wuauclt.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://ie.search.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.search.msn.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir...r=6&ar=msnhome
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SU B_PVER}&ar=home
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir...ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir...r=6&ar=msnhome
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir...ie&ar=iesearch
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [etbrun] C:\windows\system32\elitebdi32.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: AIM (HKLM)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1112215464781
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab

help me please. i've tried adaware, Spybot, Adaware Away and several otehr but nothing is gettin rid of these dang pop ups