Dear Gentlepersons:


This is the first forum ever for me anywhere, so here's hoping.
Have used SE Plus for a year with no problems.
Then came along the Sep 19th new definitions.
System finds below item and says it deletes it,,,,but it doesn't...
or the bad guys found a way to make it replicate itself immediately
before or after deletion.
I don't use IE very often so am hoping it's not a big problem....but,
the whole world does.....so.....the whole world must have this same
problem....which to me means that this should be the number one problem.
Purposely waited 'til next definitions hoping this would delete it, but
yesterday's didn't.
Don't want to look at this forever, and if I ever start using IE more,
definitely want to delete it.
Below is the item.....can someone tell me what it means and how to delete it.

The whole purpose for being is to delete all bad guys.

MegaSearch Toolbar Object Recognized!
Type : RegValue
Data :
TAC Rating : 4
Category : Data Miner
Comment :
Rootkey : HKEY_USERS
Object : S-1-5-21-4282951562-1647371527-101265881-1005\software\microsoft\internet explorer\toolbar\Webbrowser
Value : {4e7bd74f-2b8d-469e-d0fc-e57af4d5fa7d}


THANKS BUNCHES!!

COULD THIS BE A FALSE POSITIVE????
Dear Gentlepersons:


This is the first forum ever for me anywhere, so here's hoping.
Have used SE Plus for a year with no problems.
Then came along the Sep 19th new definitions.
System finds below item and says it deletes it,,,,but it doesn't...
or the bad guys found a way to make it replicate itself immediately
before or after deletion.
I don't use IE very often so am hoping it's not a big problem....but,
the whole world does.....so.....the whole world must have this same
problem....which to me means that this should be the number one problem.
Purposely waited 'til next definitions hoping this would delete it, but
yesterday's didn't.
Don't want to look at this forever, and if I ever start using IE more,
definitely want to delete it.
Below is the item.....can someone tell me what it means and how to delete it.

MegaSearch Toolbar Object Recognized!
Type : RegValue
Data :
TAC Rating : 4
Category : Data Miner
Comment :
Rootkey : HKEY_USERS
Object : S-1-5-21-4282951562-1647371527-101265881-1005\software\microsoft\internet explorer\toolbar\Webbrowser
Value : {4e7bd74f-2b8d-469e-d0fc-e57af4d5fa7d}


THANKS BUNCHES!!

Hi ,

I merged your topics so we don't have two going at once on the same subject.

Apologies for the late reply, we've been quite swamped in here as you can probably see.

Are you still needing help?

I'm now subscribed to this topic so I will receive a notice from the board as soon as you reply, so I can be here much more quickly than it has taken to get to your new topic.


Hmmm, don't know if that is a FP or not?

Do you have the Verizon Broadband toolbar installed?

I get this when Google on the CSLID

http://www.castlecops.com/tk1923-VZBB_DLL.html
Field Value
GUID {4E7BD74F-2B8D-469E-D0FC-E57AF4D5FA7D}
Filename VZBB.DLL
Object Name Verizon Broadband Toolbar
Status L BHO TB
Description Verizon Toolbar

Hello CJ:

I'm using Verizon DSL broadband so I guess their toolbar is installed somewhere, although I don't think
I'm using it. Believe I'm using MSN toolbar, as their web page loads at first usage..

I notice your system Ad Watch Event Log detects it as a Registry Modification. Now does this mean that it
prevents it from actually entering the system, so your system is doing its job every time at startup but
for some reason just can't delete it.

Thanks Bunches...Again.

Mike

Could you please run this tool to produce a log and post it back her:

A diagnostic log from this free tool called HijackThis
Instructions on creating a HijackThis Log
http://www.lavasoftsupport.com/index.php?showtopic=216

Hi Again:

I hesitate to use this Hijack This tool as I am not a nerd.

Called Verizon people and they tell me I do NOT use their toolbar. ..I'm using Windows toolbar.

Does that just perhaps change things??

Eagles lost.....Booo...

Mike

I really only want you to produce the log from HijackThis this. That's all. I'll review it and advise if anything needs "fixing"

You may delete this now.

Thanks

Mike

Ok, I take it you've gotten this resolved then. I'll move this topic to the archives "Resolved" section (read only). If you should have any further issues, please feel free to start a new topic.