Member Avatar for NTADarwin

Hello, this is my first post, I am having a problem with a toolbar and blue box on IE, running off of and having something to do with Viewpoint folder in Program Files I believe, and I have researched it, but with my limited knowledge I thought it would be wise to post a new thread then to go off of others that may cause me to mess up my computer by doing something that my system don't like that theirs didn't mind, see where i'm coming from?

Now I have already ran AdAware SE, Spybot S&D, and my Anti-Virus software, did not fix this, they were all updated with current definitions and such. I have noticed that this toolbar runs off of iexplore.exe in the task manager, then I open up internet explorer and there are two iexpore.exe in the TM of course. I did close out of the toolbar, ended the process but it always comes back, and using resources that I would rather put to use somewhere else. So any help would be greatly appreciated. I have a HJT log , I also have a print screen of what the toolbar looks like Thank you. Sorry for the somewhat lengthy (in my opinion) post.

Isiah

  • 2 Contributors
  • 5 Replies
  • 266 Views
  • 2 Days Discussion Span
  • Latest Post Latest Post by crunchie

Dani AI

Generated

Short summary and cause (context from the thread)
The persistent blue toolbar seen in ’s screenshots is typical of LOP/toolbar-style adware: a Browser Helper Object or toolbar DLL injected into Internet Explorer. Killing iexplore.exe only temporarily removes the visible process because the module is registered to auto-start or is reloaded whenever IE launches. The advice from to use specialised removers is appropriate; those tools remove common installer artifacts that ordinary scanners sometimes miss.

Recommended removal workflow (concise, safe)

  1. Boot to Safe Mode to keep the toolbar from loading.
  2. Run a dedicated remover (the ones mentioned in the thread often handle LOP components).
  3. Use an autorun/inspection utility (Autoruns or HijackThis) and a process inspector (Process Explorer) to locate the toolbar DLL and the exact path it loads from.
  4. Back up the registry, then remove the specific Run/Uninstall/Browser Helper Object entries that point to that DLL; delete the DLL and its folder.
  5. Reboot normally and run a full scan with updated anti-malware signatures.

Registry/locations to check (common places)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
HKCR\CLSID\<GUID>\InprocServer32    (points to toolbar DLL)
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

Verification and cleanup notes
Look in HijackThis for O2 (BHO) and O4 (Run) lines that reference unknown DLLs or vendor strings. Check Services and Scheduled Tasks for any updater/service names containing the vendor string and remove them if they belong to the toolbar. After removal, clear Temporary Internet Files, reset IE’s search/home settings, and rerun scans until nothing suspicious remains. Editing the registry and removing DLLs is irreversible—always export keys or create a system restore point first. Finally, a password reset and monitoring of accounts is sensible if any sensitive data was used while the infection was present.

Recommended Answers

All 5 Replies

Member Avatar for crunchie

Download Omegakiller from Run the program from it's own folder and allow it to remove any malware it finds.

Member Avatar for NTADarwin

Thank you for the quick response, I tried that, but it doesnt seem to let me download it. I registered then logged in, but when I press Download it simply directs me to a page that says

'Access denied. We are working very hard on providing a solid, safe downloads section for all. Why not register? to get member access. It's free and your privacy remains protected. You can sign up here.'

Maybe you could attach it as a zip here, or tell me what I am possibly doing wrong to get that message. Since it is fairly small in size, maybe you could just attach it as a zip please? Thank you, and sorry if I seem snotty.

Isiah

Member Avatar for crunchie

Hi Isiah Try this instead.

First of all could you click Start>Settings>Control Panel>Add or Remove Programs and uninstall 'Window Search', 'Window Searching', '', 'LOP SEARCH', 'Browser Enhancer', or 'Ultimate Browser Enhancer' if listed. You may be given a code to insert, do so and reboot when done. If not listed there, run the Lop Remover from:

Member Avatar for NTADarwin

Thank you so much, if I have any more problems i'll post back in this thread, but it seems to be fixed for now, again, thank you.

Isiah

Member Avatar for crunchie

You are welcome :).

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.