• Welcome to Overclockers Forums! Join us to reply in threads, receive reduced ads, and to customize your site experience!

HELP http://search-itnow.com/ has takin over my computer

Overclockers is supported by our readers. When you click a link to make a purchase, we may earn a commission. Learn More.

jstutman

Member
Joined
Oct 13, 2001
no spy ware or anything has a way to remove it. every time IE cant find a web site this site pops up. it is worthless and it has tons of pop ups. please help me remove this crap from my computer

PLEASE HELP ME.

OH SOMEONE HELP.
 

KILLorBE

Member
Joined
Mar 28, 2001
Location
The Netherlands
Have you been looking for pr0n:p ;)
The QcBar variant should have an 'uninstall' option on the 'Adult Links' toolbar menu.

Manual removal
LinkZZ variant
Open the 'Downloaded Program Files' folder in the Windows folder, right-click the 'NullCtrl Class' entry, and remove it. You can also delete the key 'HKEY_CURRENT_USER\Software\LinkZZ' from the registry to clean up if you like.

QcBar variant
Open the registry (click 'Start', choose 'Run' and enter 'regedit') and delete the following keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{765E6B09-6832-4738-BDBE-25F226BA2AB0}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{765E6B09-6832-4738-BDBE-25F226BA2AB0}
HKEY_CURRENT_USER\Software\QcBar
HKEY_CLASSES_ROOT\QcBar
HKEY_CLASSES_ROOT\QcBar.1
HKEY_CLASSES_ROOT\Allch.IEObj
HKEY_CLASSES_ROOT\Allch.IEObj.1
HKEY_CLASSES_ROOT\CLSID\{765E6B09-6832-4738-BDBE-25F226BA2AB0}
HKEY_CLASSES_ROOT\CLSID\{D6FC35D1-04AB-4D40-94CF-2E5AE4D0F8D2}
HKEY_CLASSES_ROOT\Interface\{ED7D1356-F7C2-4A27-A87C-C0DFEB3A628F}
HKEY_CLASSES_ROOT\Interface\{242CA913-1637-4F74-9729-EA349AF3ECAC}
HKEY_CLASSES_ROOT\TypeLib\{C02EE3A0-1881-419F-A5ED-737223463292}
HKEY_CLASSES_ROOT\TypeLib\{60381D4B-8129-449A-A5F2-5417AD0571CC}
Restart Windows. You can now delete the program files to clean up: open a DOS command prompt window (from Start->Programs->Accessories) and enter the following commands:

del "%WinDir%\Downloaded Program Files\allch.dll"
del "%WinDir%\Downloaded Program Files\QcBar.dll"
QaBar variant
Open a DOS command prompt window (from Start->Programs->Accessories) and enter the following commands:

cd "%WinDir%\System"
regsvr32 /u "..\Downloaded Program Files\QaBar.dll"
del "..\Downloaded Program Files\QaBar.inf"
You can then delete the file 'insqcb.ins' in the System folder (inside the Windows folder, called 'System32' on Windows NT, 2000 and XP or just 'System' under Windows 95, 98 and Me), and the 'Adult Links Daily' icons on the Start Menu and Desktop, plus the 'QcBar' folder inside the Application Data folder. (Application Data can be found in the Windows folder under Windows 95, 98 and Me, or in your user 'Profiles' folder in the Windows folder under Windows NT, or in your user 'Documents and Settings' folder in 2000 and XP.) You can also delete the registry key 'HKEY_LOCAL_MACHINE\Software\QcBar' to clean up if you like.

All variants
The 'Adult Links', 'Adult Search', 'Sports' and 'Instant Viagra' folders can be deleted from the Favorites folder. Then, if your search settings have been hijacked

QaBar and some releases of QcBar also hijack address bar searches to point to search-itnow.com. To stop this happening, go to the Programs tab in Internet Options and click 'Reset web settings'.
You could also try Spyware Eliminator, Spy Sweeper and/or Pest Patrol.

More info can be found at Spyware Info.
Hope that helps
 

illwillchill

Member
Joined
Jun 8, 2002
Location
Seattle, WA
here's a bunch of tools one should use if you frequent pornographic sites daily

adaware
http://www.lavasoft.de/support/download/

Spybot - Search & Destroy
http://security.kolla.de/index.php?lang=en&page=download

If you ran these you wouldn't have this problem in the future

MRU-Blaster
http://www.wilderssecurity.net/mrublaster.html

erase those Most Recently Used files


and a good registry cleaner I recommend Jouni Vuorio's jv16 powertools

http://www.vtoy.fi/jv16/shtml/jv16powertools.shtml

and of course a good antivirus norton/etc.

this should cover your tracks