Since the TM's generic
page on fighting spyware is getting so full of instructions on how
to protect your PC from spyware--instructions on how to remove spcific
spyware will be placed on a page designed just for specific fixes.
Elite Tool Bar
The Elite Tool Bar shows up in
your c:\windows\system32 file as eliteqjj32.exe This is one
of the shrewdest pieces of spyware out there. It is so hard to get
rid of because it loads itself into the PC's RAM when you boot up
the PC and runs from memory. Then it turns around and deletes its
own executable file so you (or anti-spyware programs you may run)
can't find it. When the PC shuts down it then reinstalls the executable
and starts the whole process over next time you boot up. Nasty, but
pretty darn slick.
You can download software specifically
designed to tackle the Elite tool bar called ETRemoverv120.exe (the
version may change) from Softpedia and run it from safe mode--it
has to be run from safe mode. You can also boot the PC to a DOS prompt
and go to folder c:\windows\system32 and delete the elitejj32.exe
to kill it.
If you know enough about PC's
to work in the registry then you can delete the call to the executable
from the HKEY_Current_User, Software, Microsoft, Current Version,
Run directory. If you do a search in the registry you will probably
find another reference or two to it which can also be deleted.
Bargin Buddy
The TM has also crossed swords
on friend's PCs with the infection known as Bargin Buddy. It's not
your Buddy.
The removal steps for the version
which TM removed are:
First, go to start--control panel--add/remove
programs and uninstall Bullseye Network, Cashback by Bargain Buddy,
and Navisearch.
During the uninstall you are
required to fill out a survey asking why you uninstalled the product.
Be very careful here answering the Yes/No questions during the uninstall
because they are worded in a way to trick you into keeping the product
if you are not very careful.
After doing the uninstall you still need to
run Adaware or Spybot Search & Destroy or some anti-spyware program
to remove the little pieces of junk left laying around various folders.
Even though they won't harm you or bring the program back--you still
want to get rid of them.
Apparently there is a new version of Bargin Buddy
out there now which has a different routine for uninstalling it so
if you have the new version this may not work for you.
MSBlaster
There are fixes designed just for MSBlaster than can
be easily found on the internet just by typing it into a search engine
that give you a complete cleaning. The TM has stopped the blaster by
(on a system with dual operating systems like Win98 and Win 2000 or
XP) booting up in Win98 then finding the blaster32.exe file and renaming
it. You could also boot to a DOS prompt and delete or rename it.
Try to get the complete fix if
you can, but if you can't and need a quick fix then rename or delete
the file till you can get it. This will stop the blaster in his tracks.
More specific fixes coming!
Back to the Spyware Protection page
