Lost Internet Tool bar???????
#1
Member
Thread Starter
Join Date: Sep 2000
Location: Rochester, NY USA
Posts: 121
Upvotes: 0
Received 0 Upvotes
on
0 Posts
Lost Internet Tool bar???????
Something very strange happened to my internet the past few days. I use a local broadband connection as my ISP, but have Yahoo as my set home page (by the way, I am using Windows 98 on a microsoft lap top).
The other day while surfing the net I noticed that one of those annoying internet pop ups appeared, but somehow this one created a new tool bar at the top of the page, right under the navigation bar that allows you to type in various internet addresses. I didn't pay much attention to it as I was able to use the other toolbars to navigate as usual.
Last night, however, this "foreign" tool bar took over, removing my other normal navigation bars. When I clicked on this tool bar it appeared to be from some company offering trips. Anyway, the whole thing caused my computer to crash as I was getting various messages about not having enough space to run the application (I wasn't trying to run anything! Just surfing). After re-booting I went back into the internet via Yahoo and discovered that I no longer had any tool bars, even the foreign bar was gone. Nothing was there.
How do I get back to having the internet be the way I had originally had it? How do I get rid of whatever pirate download or virus (?) came into my computer and loaded this foreign tool bar?
I hope I have given you all enough info to help with my problem. Any and all suggestions are greatly appreciated.
BGH
The other day while surfing the net I noticed that one of those annoying internet pop ups appeared, but somehow this one created a new tool bar at the top of the page, right under the navigation bar that allows you to type in various internet addresses. I didn't pay much attention to it as I was able to use the other toolbars to navigate as usual.
Last night, however, this "foreign" tool bar took over, removing my other normal navigation bars. When I clicked on this tool bar it appeared to be from some company offering trips. Anyway, the whole thing caused my computer to crash as I was getting various messages about not having enough space to run the application (I wasn't trying to run anything! Just surfing). After re-booting I went back into the internet via Yahoo and discovered that I no longer had any tool bars, even the foreign bar was gone. Nothing was there.
How do I get back to having the internet be the way I had originally had it? How do I get rid of whatever pirate download or virus (?) came into my computer and loaded this foreign tool bar?
I hope I have given you all enough info to help with my problem. Any and all suggestions are greatly appreciated.
BGH
#2
Member
Join Date: Jan 2002
Location: Chicago
Posts: 1,860
Upvotes: 0
Received 0 Upvotes
on
0 Posts
First, I would go into Add/Remove programs and remove the offending program (the one that added the toolbar). Then you can click on View, toolbars and add your toolbars that you're missing.
#3
Member
Join Date: Nov 2001
Location: Taylors, SC
Posts: 9,261
Upvotes: 0
Received 0 Upvotes
on
0 Posts
You might try AdAware from www.lavasoftusa.com to seek out the spyware that takes over your computer. You can use it to rid yourself of the stuff that rogue sites install on your computer.
#4
Stopper...
Www.panicware.com
Popup Stopper Companion is the cats meow. I recommend very few programs but this has been an absolute lifesaver! Things like what happened to you tics me off more than anything else in the world! As far as computer that is… I have been married twice and have been taught by professionals how to complain soooooo. Anyway, before you get this removed try to find out who it is and turn them into your Attorney General not so much for prosecution but to make them aware of the offending company and maybe stop this for happening to someone else. Allowing automatic downloads of updates etc should be stopped. Only have updates installed after you check them, some updates, service packs etc can actually do more harm than good! I need to revamp a post earlier but I have found out that by stopping Windows Messenger it stops MSN Messenger from working too. So instead of stopping messenger from working all together set it per my instructions in the post “!!Warning!!” but set it to not load unless you call for it.
Popup Stopper Companion is the cats meow. I recommend very few programs but this has been an absolute lifesaver! Things like what happened to you tics me off more than anything else in the world! As far as computer that is… I have been married twice and have been taught by professionals how to complain soooooo. Anyway, before you get this removed try to find out who it is and turn them into your Attorney General not so much for prosecution but to make them aware of the offending company and maybe stop this for happening to someone else. Allowing automatic downloads of updates etc should be stopped. Only have updates installed after you check them, some updates, service packs etc can actually do more harm than good! I need to revamp a post earlier but I have found out that by stopping Windows Messenger it stops MSN Messenger from working too. So instead of stopping messenger from working all together set it per my instructions in the post “!!Warning!!” but set it to not load unless you call for it.
#5
Member
Join Date: Dec 2000
Posts: 974
Upvotes: 0
Received 0 Upvotes
on
0 Posts
If the problem has not been solved this KB article http://support.microsoft.com/default...;en-us;Q234012 may have some bearing [possibly in conjunction with the hijacking].
Anyway, to disable Windows Messenger in Windows 98 under Internet Explorer disable active scripting [all forms of] in all zones. [It's more likely the source of your problem was an active script than an installed dedicated program].
To really put the kibosh on Windows Messenger rename MSMSGS.EXE to MSMSGS.FOO. In Win98 the standard folder location is "C:\Program Files\Messenger" To enable it before use rename MSMSGS.FOO to MSMSGS.EXE [simple, with a batch file]. [You need Windows Messenger to surf the net like you need a hole in your head].
Either way, each time a new program or update is installed, or the message "your configuration settings are being updated", is displayed recheck IE settings or for a new copy of MSMSGS.EXE. Why? Because IEAK is installed.
Bigmike stated: "Anyway, before you get this removed try to find out who it is and turn them into your Attorney General not so much for prosecution but to make them aware of the offending company and maybe stop this for happening to someone else".
Two trails exist: Registry, and within Index.dat [within the History folder]. Index.dat is the more interesting of the two.
Examining index.dat with the DOS Edit program:
1. find index.dat files
C:\WINDOWS> attrib index.dat /s
2. change to the history folder [here IE 5x is assumed]
C:\WINDOWS> cd History\History.IE5
3. load index.dat [79 characters per line - the default is
1024 chars. per line]
C:\WINDOWS\History\History.IE5> edit /79 index.dat
Note: the other index.dat file within the History.IE5\MSHIST~1 folder is the 'daily' cache. It's an index pointer, and it can be deleted when IE is inactive. The previous index.dat file [main history cache] cannot be deleted in protected mode, because it's held open.
BTW, irregardless of wether a hijacking occurs or not, in Win98 it's easy to set up your own undo feature.
1. make a copy of scanreg.ini This copy points to a new existing folder. ie: BackupDirectory=c:\newfolder Under 'Files=' minimally add: Files=30,config.sys,autoexec.bat
2. To backup to the newfolder rename c:\windows\scanreg.ini to scanreg.foo and rename the copy to scanreg.ini [use DOS or Windows]. Next enter: scanreg /backup [either Run command box or DOS prompt]. Afterward rename the copy to something else and rename scanreg.foo scanreg.ini.
This backup is a protected copy of the registry, system.ini, win.ini, and DOS boot files. Remember to update this backup when new hardware or programs are installed. At each boot Windows will use the standard backup directory.
After a hijacking restart in MSDOS mode, rename the files again, then enter scanreg /restore [DOS prompt only]. Although I prefer to use DOS, the Windows FIND feature may be used to search for new disk files after a hijacking. Rename suspicious files, [record your actions], wait, then delete if safe.
Anyway, to disable Windows Messenger in Windows 98 under Internet Explorer disable active scripting [all forms of] in all zones. [It's more likely the source of your problem was an active script than an installed dedicated program].
To really put the kibosh on Windows Messenger rename MSMSGS.EXE to MSMSGS.FOO. In Win98 the standard folder location is "C:\Program Files\Messenger" To enable it before use rename MSMSGS.FOO to MSMSGS.EXE [simple, with a batch file]. [You need Windows Messenger to surf the net like you need a hole in your head].
Either way, each time a new program or update is installed, or the message "your configuration settings are being updated", is displayed recheck IE settings or for a new copy of MSMSGS.EXE. Why? Because IEAK is installed.
Bigmike stated: "Anyway, before you get this removed try to find out who it is and turn them into your Attorney General not so much for prosecution but to make them aware of the offending company and maybe stop this for happening to someone else".
Two trails exist: Registry, and within Index.dat [within the History folder]. Index.dat is the more interesting of the two.
Examining index.dat with the DOS Edit program:
1. find index.dat files
C:\WINDOWS> attrib index.dat /s
2. change to the history folder [here IE 5x is assumed]
C:\WINDOWS> cd History\History.IE5
3. load index.dat [79 characters per line - the default is
1024 chars. per line]
C:\WINDOWS\History\History.IE5> edit /79 index.dat
Note: the other index.dat file within the History.IE5\MSHIST~1 folder is the 'daily' cache. It's an index pointer, and it can be deleted when IE is inactive. The previous index.dat file [main history cache] cannot be deleted in protected mode, because it's held open.
BTW, irregardless of wether a hijacking occurs or not, in Win98 it's easy to set up your own undo feature.
1. make a copy of scanreg.ini This copy points to a new existing folder. ie: BackupDirectory=c:\newfolder Under 'Files=' minimally add: Files=30,config.sys,autoexec.bat
2. To backup to the newfolder rename c:\windows\scanreg.ini to scanreg.foo and rename the copy to scanreg.ini [use DOS or Windows]. Next enter: scanreg /backup [either Run command box or DOS prompt]. Afterward rename the copy to something else and rename scanreg.foo scanreg.ini.
This backup is a protected copy of the registry, system.ini, win.ini, and DOS boot files. Remember to update this backup when new hardware or programs are installed. At each boot Windows will use the standard backup directory.
After a hijacking restart in MSDOS mode, rename the files again, then enter scanreg /restore [DOS prompt only]. Although I prefer to use DOS, the Windows FIND feature may be used to search for new disk files after a hijacking. Rename suspicious files, [record your actions], wait, then delete if safe.
Last edited by 2000; 11-02-02 at 11:25 PM.