| Author |
Message |
Terranoid
|
# Posted: 30 Sep 2007 18:35
Reply
Does anyone know how to get rid of the Security Toolbar 7.1? I can't find it in the Add/Remove Programs or anywhere in the Program files. Can anyone help?
Thanks
|
FHteam
Admin
|
# Posted: 1 Oct 2007 04:24 - Edited by: FHteam
Reply
Terranoid
BE CAREFUL that's a nasty & there's a lot of BAD advice out there including buying a removal program that is put out by the same people who make the infected toolbar!!
================================================== =
UPDATE: November 2008:
There is now a program that specifically targets this nasty, it names this toolbar as something it can remove. Malwarebytes' Anti-Malware (the link is to Download.com's page, it's easy to find the freeware download there).
Malwarebytes Anti-Malware is a new & excellent program that doesn't waste its time on cookies, it targets malware & it's the only program that I know of that specifically names the Security Toolbar 7.1.
Download & install it but we still think that it is VERY IMPORTANT to turn OFF System Restore, which will delete any saved restore points, & restart in Safe Mode before running AntiMalware. DO NOT turn System Restore back on until you are sure all infections have been removed.
===================================================
That *should* fix the problem, especially if you only have the one infection. If not there's a very thorough Malware Removal Guide + a help forum at Major Geeks
|
Terranoid
|
# Posted: 1 Oct 2007 12:49
Reply
Those programs seem to have done the job. Thanks a lot, you've been a big help.
|
FHteam
Admin
|
# Posted: 1 Oct 2007 15:02
Reply
You're welcome Terranoid glad it worked :)
Keep both of those programs, they are true freeware. After 30 days the auto-update feature of AVG anti spyware stops working in the free version so remember to update it manually every 2-3 days.
|
Apocalypse
|
# Posted: 23 Nov 2007 02:16
Reply
Thanks FHTeam for the invaluable advice!
I too was an unwitting victim of this insidious spyware but both programs certainly worked for me!!
|
nik
|
# Posted: 27 Dec 2007 18:19
Reply
thanx FHTeam for the advise... it worked on my system...
|
computerdude
|
# Posted: 16 Feb 2008 20:29
Reply
omg thank you FHTeam. i thought i was screwed when that thing got on my computer. those programs seem to have gotten rid of it. great advice
|
T-man
|
# Posted: 5 Mar 2008 00:06
Reply
If you are getting ... The Security Toolbar 7.1 on your Internet Explorer Browser ... along with the hijacked homepage ... and a bunch of pop-ups telling you buy anti-software don't do it ! ... It's just more spyware ...
Run this free removal tool "SmitfraudFix" ... It's very simple to use and it only took a few minutes ... I recommend printing the directions before starting the procedure ... this is the first computer virus I ever dealt with ... and I am happy this fixed the problem so easily.
|
FHteam
Admin
|
# Posted: 5 Mar 2008 01:52 - Edited by: FHteam
Reply
T-man thank you for telling us about this program & I'm glad it worked for you. BTW spyware is spyware it is NOT a virus. A true virus is malicious & *much* more difficult to deal with.
FH Team recommendation for removal of Security Toolbar 7.1 still stands: see our first post in this topic. AVG AntiSpyware & SpyBot are known-safe, fully developed & supported programs that will not damage your system.
SmitFraudFix author notes that his program can cause false positive alerts from some AV programs. Although he recommends cleaning in safe mode he does not mention turning off System Restore first or deleting previous restore points so the infected files could still be stored by Windows.
I have removed the SmitFraudFix link, it did not go to an English page. This program looks to be a good anti-spyware/malware removal tool which I will research & list properly & then post *our* link here if appropriate.
|
FHteam
Admin
|
# Posted: 5 Mar 2008 03:54 - Edited by: FHteam
Reply
UPDATE:
T-man you were incredibly lucky using SmitFraudFix! It is definitely NOT a tool for a novice. I have listed it but with some serious warnings & links to qualified help.
Read this forum topic.
You obviously only had one easy-to-clean infection which is why it worked flawlessly. You could have caused more problems than you started with & had to completely reinstall Windows!
|
sooohappy
|
# Posted: 15 Apr 2008 06:24
Reply
Just wanted to give a big Thumbs Up to you fellas, i was at wits end with security toolbar 7.1, pop ups etc. In a moment of clarity i googled the name and found this site. Worried about who to trust i followed the FH Teams advice and had my computer back in no time. I should tell you at this point that I barely know one end of the computer from the other and if I can do it Anyone can. :)
|
FHteam
Admin
|
# Posted: 17 Apr 2008 15:24
Reply
Glad we could help sooohappy :)
We don't have the resources to offer in-depth help so we try to find solutions that are basic, easy to follow & do work. If that's not possible we'll refer you to the sites that can help.
|
kazjones
|
# Posted: 25 May 2008 15:35
Reply
the toolbar 7.1 :|
its really annoying?
how did it get there?
ive tried them sites and
they say there no longer available?
i'm really scared it might do somthing to
my computer :| didnt even know how it got there.
please help
kaz x
|
FHteam
Admin
|
# Posted: 25 May 2008 17:51
Reply
kazjones you got the toolbar because *you* clicked on a link to install it OR you installed another program without virus/spyware checking it first & it automatically installed the toolbar as well as the program.
NOTE: We need to update our recommendations for removing this toolbar for inexperienced users because....
AVG has recently updated to version 8 which combines their anti virus & anti spyware programs into one program. This is fine if you use, or want to use, their anti virus but not if you're using a different one, especially if it's a commercial one like Norton or McAfee!
Two anti virus programs on a system are OK if you are a *very experienced user* otherwise they're a recipe for disaster!!
I'll be back ASAP.
|
FHteam
Admin
|
# Posted: 25 May 2008 19:09 - Edited by: FHteam
Reply
================================================== =
UPDATE: November 2008:
There is now a program that specifically targets this nasty, it names this toolbar as something it can remove. Malwarebytes' Anti-Malware (the link is to Download.com's page, it's easy to find the freeware download there).
Malwarebytes Anti-Malware is a new & excellent program that doesn't waste its time on cookies, it targets malware & it's the only program that I know of that specifically names the Security Toolbar 7.1.
Download & install it but we still think that it is VERY IMPORTANT to turn OFF System Restore, which will delete any saved restore points, & restart in Safe Mode before running AntiMalware. DO NOT turn System Restore back on until you are sure all infections have been removed.
===================================================
|
kanathy
|
# Posted: 29 May 2008 20:24
Reply
I`ve downloaded both programs and i think it is running, but the toolbar is still there on iternet explorer.
How do i get rid of it?
|
Imagica
Member
|
# Posted: 29 May 2008 23:06
Reply
Did you shut down your system and restart in Safe Mode in between installing the two programs and then running them? If not, the toolbar will not have been deleted because it is still active when Windows is running normally.
Make sure that you read each step carefully in the "admin" post just above yours and be sure you understand what you have to do for each step.
|
kanathy
|
# Posted: 30 May 2008 15:14
Reply
Oh, it`s gone now! :]
I just had to wait... I`m very impatient.
Thanks so much!
|
caraindublin
|
# Posted: 28 Jun 2008 18:56
Reply
Thank you so so so much for the help in removing toolbar, I cannot believe I actually did it............cheers to you!
Carmel
|
Jay
|
# Posted: 29 Jul 2008 21:09
Reply
Tried the AVG/Spybot combo and it didn't work.
Then I ran smitFraudFix and (so far) it's worked like a charm.
I have to agree with T-man on this one and the latest version prompts you through it - no problem for a novice.
|
Jay
|
# Posted: 29 Jul 2008 21:14
Reply
...found it here...
author's website
It was a nasty bugger - wasted half my day recovering. Wish others the best of luck!
|
FHteam
Admin
|
# Posted: 30 Jul 2008 03:09
Reply
Jay the link you posted was a direct link to the download & that's not a good idea for several reasons. Mainly it's because it bypasses ALL of the information provided by the author & one VERY important point here is that SmitFraudFix is for Win2K/XP ONLY. Use it on any other version of Windows & there's a risk of causing a lot more harm than good!
I'm really pleased to know that updates to SmitFraudFix have made it easier to use & there is now much more information on the author's English page so I have changed your link to point to the author's page.
|
deek104
|
# Posted: 15 Aug 2008 13:20
Reply
superantispyware.com will remove this just download the free version
|
FHteam
Admin
|
# Posted: 16 Aug 2008 00:05
Reply
Good call deek104 seems to be a neat program & I will be listing it.
BTW some AV programs & online scans such as Panda NanoScan will flag "SmitFraudFix" as a "hacker tool" - duh! of course it is but it's been around for long enough now for all of the free/commercial apps to recognize that it's a legit program. There is NO excuse for false positive "scares" like this.
|
Atoy
|
# Posted: 22 Sep 2008 06:16
Reply
Hi FHteam!
I got Security Toolbar 7.1 and its related malicious activities. I initially tried to remove it with Kaspersky by updating Kaspersky (last update was in May). Kaspersky stopped updating at around 75%. It gave a warning sign in blue that read:
Quarantine scan
The quarantined file is not infected. You are advised to restore it.
File
C:\Documents and Settings\...\is-DBF3K.tmp
Status
Not infected
--> Resume...
Restore the file to its original location.
--> Cancel
Do not restore
I clicked Cancel. Since then, this warning sign, in red, has been popping up:
Kaspersky Anti-Virus: key notification
Warning!
Your key has been blacklisted.
The update feature is disabled and your computer can be infected.
If you purchased our software, please contact our Technical Support Service.
If you are using a pirated version of our software, please click here to renew.
If you have already purchased a product, please activate it now.
Close
Kaspersky was installed in May 2008 by my cousin who is a techie. I tried contacting him via mobile, landline and YM, to help fix the problem, but to no avail. I guess anyone who doesn't want to be reached will never be reached.
Is "If you are using a pirated version of our software, please click here to renew." for real? Does Kaspersky support pirated versions?
So, I downloaded from www.download.com the free version of SUPERAntiSpyware which easily removed Security Toolbar 7.1, wcs.exe, the exclamation mark enclosed in yellow triangle in the task bar, and the antivirus page in Internet Explorer.
However, the "Kaspersky Anti-Virus: key notification" still keeps popping up. It has actually replaced wcs.exe. Same activity, different names. I have a feeling that the persistent "key notification" warning sign is a virus and/or a malicious software of some sort. Am I right?
Is there a free software that I can download that will remove or repair this? (SUPERAntiSpyware doesn't work on the "Kaspersky Anti-Virus: key notification") Will it work well (side by side) with SUPERAntiSpyware? I feel sorry that I attempted to update Kaspersky. I feel that if I used SUPERAntiSpyware alone, there MAY have been no problem.
Security Toolbar 7.1 got into the system when I downloaded an MP3 from the Malena film soundtrack. The Web site features the works of Italian composer Ennio Morricone. The site didn't look malicious. Looks can really be deceiving.
Please help.
Thank you so much.
Atoy
|
Imagica
Member
|
# Posted: 22 Sep 2008 11:10 - Edited by: Imagica
Reply
As your problem Atoy now looks to be with Kaspersky your best bet is to see what help you can get from their tech. support resources. This page might help.
http://support.kaspersky.com/faq/?qid=208279333
It looks quite likely that your version is not legal, in which case your options are to either purchase a new key from them or remove the program from your system. There are freeware anti-virus programs around... I use the AVG free version.
http://free.grisoft.com/ww.download-avg-anti-virus -free-edition
|
FHteam
Admin
|
# Posted: 22 Sep 2008 16:49 - Edited by: FHteam
Reply
Atoy here's what *I* would do:
Download AVG 8
Download WinPatrol
Download ATF Cleaner. (it's not the first program on their web page you have to scroll down for it.)
Close your Internet connection
Run ATF Cleaner.
Install WinPatrol with the default settings (run at startup & start program now).
Double click WinPatrol's tray icon, click on the "Startup Programs" tab then one at a time click on Kapersky entries & click the "Remove" button.
Repeat with "Active Tasks" & "Processes".
Check "Delayed Start"; "IE Helpers"; "Scheduled Tasks" for anything you don't want or don't recognize.
Restart your system in "Safe Mode" & uninstall Kapersky.
While you're in safe mode it would be a good idea to check your "Add/Remove Programs" list for anything that shouldn't be there.
Restart your system & install AVG & reconnect to the net when it wants to check for updates.
Note: AVG includes a surfing link checker & email checker which you may not want. If you install them & then disable them AVG assumes you disabled them accidentally & reminds you in various places. If you choose "Custom Install" you can uncheck anything you don't want & it won't install, AVG assumes this was deliberate & doesn't nag ;-)
You can now run AVG scans & see if it finds anything, you can also recheck WinPatrol for unwanted entries. On an ongoing basis WinPatrol will alert you & ask for your permission when any program installs if it attempts to make ANY system changes.
Hope this helps!
Dee
|
Atoy
|
# Posted: 23 Sep 2008 06:25
Reply
Dear Guys,
Please forgive me for this, I have follow-up questions: The folder where I stored the malicious Malena MP3 now contains a 42-byte MS-DOS Batch File. It looks like a frame housing a bolt and nut icon. Scans with Kaspersky (before its removal), SUPERAntiSpyware and AVG detect no threat. I dare not delete it for fear of not being able to access the computer the next time around. Is it a system file deliberately relocated to the MP3 folder by the malicious software for "panic" deletion of the computer user? Should I move it or just leave it alone?
The computer no longer harbors Kaspersky's pesky warning. I couldn't have done it without you. Thanks so much especially to deek104, Imagica and Dee of FHteam.
More power.
Atoy
|
Imagica
Member
|
# Posted: 23 Sep 2008 14:20
Reply
This is going to be a case of answering questions with questions!
What version of Windows are you running?
What is the file name?
Have you run a Google search on the file name?
How do you know it is an MS-DOS batch file?
I can't imagine a file this small being dangerous but it does no harm to be cautious.
|
Atoy
|
# Posted: 23 Sep 2008 14:57
Reply
Hi Imagica!
It's Windows XP Professional.
The file name is "2" beside the bolt-and-nut-in-a-frame icon.
A Google search returned the number 2 and a lot of part 2's (level, version, etc.).
Windows Explorer folder in Tiles or Details view mode reveals the file to be an MS-DOS batch file. I honestly don't know what a batch file is. The file appeared around the time of appearance of Security Toolbar 7.1 (at the time of download of the malicious MP3).
Thanks for bearing with me. I guess I will just have to leave that file/folder untouched.
More power.
Atoy
|
