[WinPartners] MS Search Bar in IE - Followup

[Stephen Dowdy]

I have had good luck with BHODeamon (Browser Help Objects)... it watches 
for things being added to IE and can catch things that SpyBot and Adware 
done seem to be able to catch.  It will give you a report and show that you 
have things like Acrobat plugins and other objects, but does a good job at 
letting you know the benign ones from the ones you should be concerned about.

www.definitivesolutions.com   site is down, but the redirect will take you 
to PC Magazine for the download


At 09:59 AM 9/2/2004 -0400, Kerem B Limon wrote:
>Well, specifically you might want to have the so-called "TeaTimer"
>auto-monitoring tool that comes with Spybot turned on. This will watch for
>impending changes to the registry and ask you to accept or deny, in 
>addition to
>a confirmation to install that the 3rd party tool in question may or may not
>present (and a lot do not, auto-installing on improperly configured or
>unpatched versions of IE). So, it wasn't the MSN toolbar, after all, then...
>
>Kerem
>
>
>Quoting Bob Kaynor <bkaynor at MIT.EDU>:
>
> > That did it!  Thanks, Dave, I hadn't thought it look in Add/Remove
> > Programs.  The two programs I removed were "WebIQ" and "WebSearch"; Spybot
> > now gives a clean bill of health.  Per Kerem's earlier note about
> > disallowing changes, I now recall being asked about installing the search
> > toolbar.  I allowed it because I wanted to test it.  I hadn't bargained on
> > all the associated "features"...
> >
> > Thanks again.
> >
> > -RKK
> >
> > At 09:02 AM 9/2/2004 -0400, you wrote:
> > >Hi,
> > >
> > >Check for entries in 'Add or Remove Programs', and remove any suspicious
> > >ones.  I had this problem with spyware tool bars.  See
> > >
> > >         http://www.pchell.com/support/huntbar.shtml
> > >
> > >                         Dave
> > >
> > >On Thu, 2 Sep 2004, Bob Kaynor wrote:
> > >
> > > > Kerem:  When I rechecked Spybot the two HuntBar entries (which I had
> > > > "fixed" previously) had returned.  I elected to fix the two HuntBar
> > > entries
> > > > (again) along with the three IE registry changes.  Spybot reported 
> that
> > > the
> > > > fixes had been made, but when scanned again (after rebooting), all 
> five
> > > had
> > > > returned.  This is a little distressing, particularly since the HuntBar
> > > > bots capture forms entry re- purchases, etc (according to the Spybot
> > info;
> > > > there's nothing for the IE entries).
> > > >
> > > > I don't have time now to explore the registry changes or possible fixes
> > > > further, but any info would be greatly appreciated.  The 
> persistence of
> > > the
> > > > HuntBar stuff make this more than just an annoyance, as far as I'm
> > > > concerned.  Are those likely related to the IE registry changes?  I've
> > > > appended a .PDF file with the Spybot report from my machine, if 
> it's of
> > > any
> > > > help.
> > > >
> > > > Thanks.
> > > >
> > > > -RKK
> > > >
> > > > At 06:33 PM 9/1/2004 -0400, Kerem B Limon wrote:
> > > > >Hmm...Spybotn tells me when I enable the MSN toolbar, a registry key
> > > is added,
> > > > >which is hard to read at the moment. I presume it may be that this is
> > the
> > > > >persistent part (I deny the change). You could try the same tool.
> > > > >
> > > > >Kerem
> > > > >
> > > > >
> >
> >
> > _______________________________________________
> > winpartners mailing list
> > winpartners at mit.edu
> > http://mailman.mit.edu/mailman/listinfo/winpartners
> >
>
>
>Kerem B. Limon
>kerem.limon at mit.edu /e-mail
>
>_______________________________________________
>winpartners mailing list
>winpartners at mit.edu
>http://mailman.mit.edu/mailman/listinfo/winpartners

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.mit.edu/pipermail/winpartners/attachments/20040902/429b4e80/attachment.htm