Tech Support > Operating Systems > Windows 98 > parasites
parasites
Posted by Gordon on September 27th, 2003


I used the aumha.org site to look for parasites. My computer freezes and
when I restart it says IEDLL.EXE is corrupt re install. The aumha site says
I have "BargainBuddy/Apuc" parasite. Also "IGetNet/ClearSearch" parasite and
"ISTbar/XXXToolbar" parasite. However, I am unable to get the "Information
and removal instructions". I have Windows 98se on a Dell Desktop. Please
help. (Cable connection). Norton av. No firewall at the present time. I had
trouble with ZoneAlarm. It is still installed from months ago but it is not
on. Thanks.



Posted by LuckyStrike on September 28th, 2003


Gordon,

For ISTbar
http://www.mvps.org/inetexplorer/darnit_2.htm#istbar

BargainBuddy/Apuc (file>find>type Apuc>third one down)
http://www.mvps.org/inetexplorer/Darnit.htm

Igetnet
http://www.mvps.org/inetexplorer/darnit_2.htm

Then, after this get your firewall back in service, get a decent Antivirus
program, and a spyware, adware, malware scanner. Make sure you have applied
all the proper updates and patches for your PC from WINDOWS UPDATE, and not
from stuff you get in the "mail".

The following are free for home use.

AVG Antivirus
http://www.grisoft.com/us/us_dwnl_free.php

Ad-Aware
http://www.lavasoftusa.com/support/download/

Spybot S&D (use this with extreme care, and also get help from SpywareInfo
forums)
http://www.safer-networking.org/inde...&page=download

Spybot General info
http://tomcoyote.org/SPYBOT/

Spybot help info
http://tomcoyote.org/SPYBOT/index1.php

TomCoyote Forums
http://tomcoyote.org/forums/

SpywareInfo forums
http://forums.spywareinfo.com/index.php?showforum=11

Install the programs>update immediately>read the help files>Run the
programs>consult with the forums if you don't know how to interpret the
results. Particularly true for Spybot S&D.

HTH -
--

LuckyStrike
LS@smokedamagedfurniture.youcandriveitawaytoday.co m
----------------------------------------------
"Gordon" <gordonhh@nospam.com> wrote in message
news:kPodb.27385$XF.27052944@news4.srv.hcvlny.cv.n et...


Posted by H Leboeuf on September 28th, 2003


Iedll.dll is from this bad parasite.
Get the removal tool.

CoolWebSearch - CWS http://www.spywareinfo.com/articles/cws/
More: Where a removal program is available.
http://www.spywareinfo.com/~merijn/cwschronicles.html
Direct Download: If the site is not available.
http://216.180.252.218/~spywareinfo....cwshredder.zip
--

When you clean the others have a look at this page and follow the security
measures.

Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

P.S. if you do a lot of surfing I would recommand a firewall. ZoneAlarm is
free.

Henri Leboeuf
Web page: http://www.generation.net/~hleboeuf/index.htm


"Gordon" <gordonhh@nospam.com> wrote in message
news:kPodb.27385$XF.27052944@news4.srv.hcvlny.cv.n et...

Posted by Gordon on September 28th, 2003


I am having trouble getting rid of 'Igetnet/ClearSearch' parasite. I went to
the instructions: They gave me a list of installed files that I was supposed
to rename. When I went to search-files and folders, none came up. When I
pulled the registry and put them in search - almost all came up under
Hkeycurrentuser/software/microsoft/windows/explorer - I don't know how to
get the full trail - when I click on the left side the values on the right
that match the ones I am looking for disappear. Anyway, they are named
a,b,c, etc. up to j. "a" is "" which is not on my list. One item
"winstart.exe is on the list twice. Are these the installed files I am
looking for? Should I delete them or rename them? The instructions at the
top of the page say to "rename installed files" and at the bottom it says
Delete references to: winstart, winstart002,winstart001.exe. Are they
talking about the registry? Thanks for your help.
I seem to have gotten rid of ISTbar but I have a program and files called
"ISTsvc" Should I remove it. It gives me a warning that some other software
might not work if I uninstall it. Thanks
"LuckyStrike" <LS@smokedamagedfurniture.youcandriveitawaytoday.c om> wrote in
message news:OiCQnPVhDHA.2212@TK2MSFTNGP09.phx.gbl...


Posted by H Leboeuf on September 29th, 2003



Did you download and run thees tools? At least Ad-Aware.

IGetNet http://www.doxdesk.com/parasite/IGetNet.html
--

Henri Leboeuf
Web page: http://www.generation.net/~hleboeuf/index.htm


"Gordon" <gordonhh@nospam.com> wrote in message
news:1DIdb.312$Kq4.854984@news4.srv.hcvlny.cv.net. ..

Posted by LuckyStrike on September 29th, 2003


Gordon,

That ISTsvc is also an item you don't want; it is adware. Get rid of it.

Adware.ISTSvc
http://www.symantec.com/avcenter/ven...re.istsvc.html

Same with Winstart

IGetNet-Browser Helper Object and a process run at Windows start-up
(WinStart.exe or WinStart001.exe) which writes to the Hosts file ...">
http://www.pestpatrol.com/PestInfo/I/IGetNet.asp

http://www.pestpatrol.com/msigetnetsupport.asp

Winstart.exe
http://www.trendmicro.com/vinfo/viru...NGET.A&VSect=T

http://www.trendmicro.com/vinfo/viru...e=ADW_TENGET.A

If the pest is difficult to remove you should then try a full virus and
spyware/malware/pest scan.

Trend-Micro House call; on-line virus scan
http://housecall.trendmicro.com/

PestPatrol On-line scan
http://www.pestscan.com/
PestPatrol Free On-line Spyware Detection Service
http://www.pestpatrol.com/News_Media...3_Pestscan.asp

In my prior response, I provided links for utilities to aid you in
detection/removal of unwanted freeloading vermin. Have you pursued those
links, and obtained any of the programs?
--

LuckyStrike
LS@smokedamagedfurniture.youcandriveitawaytoday.co m
----------------------------------------------

"Gordon" <gordonhh@nospam.com> wrote in message
news:1DIdb.312$Kq4.854984@news4.srv.hcvlny.cv.net. ..



Similar Posts