Full
Name: |
IEPlugin |
| Type: |
Adware |
| Also Known As: |
winobject
IMIToolbar
TrojanDownloader.Win32.Intexp
Adware.dsrearch
Win32.OneClickNetSearch.f (Kaspersky)
DSrearch
DSRCH
TrojanDownloader.Win32.OneClickNetSearch.b
TrojanDropper.Win32.Delf.av
Win32.Imiserv.F (Computer Associates)
Trj/Downloader.MO (Panda)
TrojanDownloader.Win32.OneClickNetSearch.c (Kaspersky) |
| Created By: |
Zeno Tecnico |
| Danger Level: |
4 |
| Category Description: |
Program that delivers advertisements on your PC.
Note that many websites have their own advertising, unrelated to adware.
Adware is any software application in which advertising is displayed while the program is running. The authors of these applications include additional code that delivers the ads, which can be viewed through pop-up windows or through a bar that appears on a computer screen and sometimes through text links or in integrated search results. Adware may or may not track personal information. It may also gather information anonymously or in aggregate only. Users should check the EULA and Privacy policy to ensure if the adware on their machines conforms to their standards. |
| Comment: |
IEPlugin is an IE Browser Helper Object. It monitors site addresses, content entered into forms, and even local filenames browsed, and pops up advertisements when it sees a targeted keyword. It also installs a process to update itself, which will attempt to connect to its servers every minute or so.
Adds a desktop toolbar for searching the intenet. |
| |
|
| Information URL: |
http://www.ieplugin.com |
| Properties: |
|
| Manual Removal: |
First you must prevent 'winserv' from starting up every time you start the computer. Run regedit and open the key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
There should be two values here called 'Win Server' and 'Win Server Updt'. Delete them both. Next, deregister the IEPlugin DLLs by executing the following commands.For Windows 95/98/Me, use:
"%WinDir%\SYSTEM\regsvr32.exe" /u "%WinDir%\winobject.dll"
"%WinDir%\SYSTEM\regsvr32.exe" /u "%WinDir%\systb.dll"
Or, for Windows NT/2000/XP:
regsvr32 /u "%WinDir%\winobject.dll"
regsvr32 /u "%WinDir%\systb.dll"
Now reset the computer, and you should be able to go into your Windows folder and delete:
winobject.dll
winserv.exe
wupdt.exe
systb.dll
kw.dat
toServer.pst
lu.dat
extract.exe
button0.ico
button1.ico
button2.ico
logo.ico
|
