|
Title: Dotcomtoolbar
Type: Spyware
Remove Dotcomtoolbar. Removal instructions
Severity scale:
 (39 / 100)
Dotcomtoolbar properties: • Changes browser settings • Connects itself to the internet • Hides from the user • Stays resident in background Automatic Dotcomtoolbar removal: 
We are testing STOPzilla's efficiency at removing Dotcomtoolbar
(2005-09-22 05:08:31)
We are testing Malwarebytes Anti Malware's efficiency at removing Dotcomtoolbar
(2005-09-22 05:08:31)
We are testing Spyware Doctor's efficiency at removing Dotcomtoolbar
(2005-09-22 05:08:31)
Dotcomtoolbar manual removal:Kill processes:redirect[XVS].exe Delete registry values: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\redirect HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Default_Search_URL=[site address] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar=[site address] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\SearchAssistant=explorer HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Page=[site address] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page=[site address] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant=[site address] HKEY_CLASSES_ROOT\GoRSDN.ContextItem HKEY_CLASSES_ROOT\GoRSDN.ContextItem.1 HKEY_CLASSES_ROOT\Pugi.PugiObj HKEY_CLASSES_ROOT\Pugi.PugiObj.1 HKEY_CLASSES_ROOT\ToolBand.hits HKEY_CLASSES_ROOT\ToolBand.hits.1 HKEY_CLASSES_ROOT\CLSID\{29DD1EA6-1FDA-44A4-B083-C9900547BC48} HKEY_CLASSES_ROOT\CLSID\{5F1ABCDB-A875-46c1-8345-B72A4567E486} HKEY_CLASSES_ROOT\CLSID\{FC2493D6-A673-49FE-A2EE-EFE03E95C27C} HKEY_CLASSES_ROOT\Interface\{7B9A715E-9D87-4C21-BF9E-F914F2FA953F} HKEY_CLASSES_ROOT\Interface\{7C479D09-1280-41D2-945F-2377736B8CF7} HKEY_CLASSES_ROOT\Interface\{EAF2CCEE-21A1-4203-9F36-4929FD104D43} HKEY_CLASSES_ROOT\TypeLib\{6D3F5DE4-E980-4407-A10F-9AC771ABAAE6} HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{5F1ABCDB-A875-46C1-8345-B72A4567E486} HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&RSDN Search HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{5F1ABCDB-A875-46C1-8345-B72A4567E486} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{5F1ABCDB-A875-46C1-8345-B72A4567E483} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\%Windir%/Downloaded Program Files/toolbar_nieuw14.dll HKEY_CURRENT_USER\Software\DotComToolbar HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DownloadManager HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DotComToolbar Unregister DLLs: toolbar_nieuw14.dll Delete files: redirect[XVS].exe, toolbar_nieuw14.dll Misc: [XVS] is the version number. The toolbar_nieuw14.dll file can be found in C:\Windows\Downloaded Program Files or C:\Winnt\Downloaded Program Files folder. 
Information added: 2004-03-19 10:00:00
Information updated: 2005-09-22 02:31:16 Additional resources related to Dotcomtoolbar:Attention: If you know or you have a website or page about Dotcomtoolbar removal, feel free to add a link to this list: add url |
Latest spyware news:
Subscribe to news
Similar parasites:
|
FORUM:
HELP:
Spreading the knowledge:
It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your
visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.
Adds the value:
'redirect'='' on the registry key:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun
If a user accesses a Web site, it hooks the URL and changes it to:
www.dotcomtoolbar.com/redirect/url.asp?url=
Which allows www.dotcomtoolbar.com to log your IP address and visiting URL.
Post Comment: