Best computer security tips
I am having trouble getting rid of a toolbar called: tshssdrblcr.
Also my home page keeps changing to: mysearchnow.com.
Whatever web page I look at the mysearchnow.com home page appears within seconds, This is rendering my Internet Explorer Useless.
I have searched for any installed programs related to this, with no avail, also deleted all cookies.
Does anyone know how to get rid of this CRAP.?
Try these solutions from a previous thread click here . HTH TR
Have tried what you suggested but the toolbar 'tshssdrblcr' still keeps coming back and removes the google toolbar that I want to keep.
anything in add remove programs? try:
click start/run and type msconfig
click the start up tab and untick everything except your AV and firewall then restart.
when starting the computer do so in safe mode tap f8 or f5 when it starts up.
once in windows click start/search and type in "tshssdrblcr"
remove it if found.restart.
For a quick check to see what you've got click this and see what the detection script comes up with.
If you have something it'll then advise on getting rid of it.
In fact looking at the And.dox site this is what it says for 'MySearch'
An IE toolbar providing search features, and a homepage-/search-hijacker, targeted at the sites run by MyWay. (The same people as iWon.com, writers of the Aornum parasite.)
MySearch/MySearch was the first variant, targeted at mysearch.com.
MySearch/MyWay uses different filenames and is targeted at myway.com itself.
MySearch/MyWeb is a new variant targeted at mywebsearch.com.
Also known as
MyWay Speed Bar.
The MySearch and MyWay variants have been bundled with Grokster, Morpheus, WeatherBug, and software from mgshareware.com. MySearch has also been installed by the FavoriteMan parasite.
The MyWeb variant is bundled with software (Popswatter, SmileyCentral, My Mail Stamp) from “Fun Web Products” (the same people as MyWay).
What it does
No. (The search results may contain advertising, but the toolbar itself does not generate any.)
In the MySearch MyWay variants, no. There is an update feature, but it prompts you before running code.
In the MyWeb variant, yes: it is installed by an ActiveX downloader control which stays around and can be used by web sites to install software from Fun Web Products without warning.
Open 'Add/Remove Programs' in the Control Panel. Select the 'My Search Bar' (MySearch variant), 'MyWay Speed Bar' (MyWay) or 'My Web Search Bar' (MyWeb) entry and click 'Remove'. For the MyWeb variant, be sure to also remove 'Fun Web Products Easy Installer'.
You can then reset your home page (Internet Options->General->Start Page) if it has been changed, and search settings (Internet Options->Programs->Reset web settings).
try Hijack this from click here and also view the tutorial there
There is probably something in the registry that is causing this to keep reappearing (I speak from recent personal experience and woodchip and Jester pointed me in the right direction).
Start, Run and enter
and click OK to start the registry editor.
Before you do anything create a backup on the desktop using File/Export. If things go pear-shaped you can double click this to restore the registry.
Then Edit/Find and look for tshssdrblcr and mysearchnow and when each is found press the DEL key and OK to confirm.
Then exit the registry editor and reboot.
Thanks for your replies, Sorted now.
This thread is now locked and can not be replied to.