Help! How do I get rid of jokwmp toolbar?

MimiJane

Hi all,

The above toolbar has suddenly appeared at the top of my pc screen ... from doing a bit of research, I gather it's some sort of Trojan virus that can trace internet activity? I can't get rid of it permanently and have run Norton and Spybot to no avail.

I'm by no means an IT expert and would really appreciate any advice on how to get rid of this, preferably nothing too complicated!

Many thanks,

Mimi

superscaper

Uninstall anything to do with it from add remove programs then go through the "invisible" malware removal sticky.

MimiJane

Wow, that was quick!

I've looked at Add/Remove Programs and can't find anything that might relate to it ... any ideas what I should be looking for?

I'll have a look at the malware removal sticky now.

Thanks.

superscaper

It was only a "just in case". It doesn't really surprise me there's nothing there if it was installed without your knowledge.

If you can't get rid of it then try scanning in safe mode. Also Norton really isn't the best antivirus to have installed. Even the free ones are better.

MimiJane

Tried scanning Norton, Spybot and AVG in safemode, picked up Trojan Horse Downloads.zlob (all sorts of entries) and deleted these. When I turned the pc back on, I got a red screen with "your privacy is being invaded" across it. The toolbar has gone, but adult sites keep appearing and I'm getting loads of messages saying my machine's infected and I should run this program and that program (which I haven't).

Also, a Windows message comes up when I switch on saying the privacy pathway is unavailable (or something like that).

Looks like the pc's still infected and haven't a clue what to do. Should I call in my local pc repair man? I'm not at all confident about trying to do any more myself to solve the problem. Am I OK to use the pc in the meantime?

Thanks for any help

superscaper

You're not really safe using the PC for normal use at all until you're confident it's clean (there could be keyloggers etc). Have you gone through the malware removal sticky (it was written as an easy step by step for non-techie people)? E.g. you should have at very least scanned with superantispyware by now and if you'd gone through the advice you should have a hijackthis log to show us if there's still problems.

Browntoa

SDFix was just updated to detect/remove this toolbar.

Please download SDFix by AndyManchesta and save it to your desktop.

alternate download
When using this tool, you must use the use the Administrator's account or an account with "Administrative rights"

• Double click SDFix.exe and it will extract the files to %systemdrive% (this is the drive that contains the Windows Directory, typically C:\SDFix).
• DO NOT use it just yet.

Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during start up(but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".

Open the SDFix folder and double click RunThis.bat to start the script.

• Type Y to begin the cleanup process.
• It will remove any Trojan Services or Registry Entries found then prompt you to press any key to Reboot.
• Press any Key and it will restart the PC.
• When the PC restarts, the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
• Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt.
• Copy and paste the contents of the results file Report.txt in your next reply.

sourced from

http://www.bleepingcomputer.com/forums/topic117256.html

MimiJane

Hi both,

Thank you so much for your quick replies.

I've just found and run Smitfraud.fix (specifically for the Trojan Virus I seemed to have). All appears to be OK again now. Toolbar gone, no Windows message about privacy danger and desktop icons and background OK again (icons were highlighted and I had a white background I couldn't get rid of). Also no messages flashing up asking me to download spyware software.

Do you think I still need to run the SDFix? Please advise ...

Once again, many thanks.

Mimi

superscaper

Can't hurt to run it. Your PC can't be "too clean". May still be worth going through the malware removal guide anyway to ensure there aren't any other more hidden nasties. You may also want to seriously reconsider having Norton.