American Life in Poetry #200: What My Father Left Behind by Chris Forhan
...surviving the loss of a parent... American Life in Poetry #199: Inscrutable Twist by Anne Pierson Wiese ...a memoryscape... American Life in Poetry #198: Self-Portrait by Zozan Hawez ...the first we've published by a young person who is also a political refugee. American Life in Poetry #197: A Small Moment by Cornelius Eady I suspect that one thing some people have against reading poems is that they are so often so serious, so devoid of joy, as if we poets spend all our time brooding about mutability and death and never having any fun. American Life in Poetry #196: Gloves by Jose Angel Araguz One of the most effective means for conveying strong emotion is to invest some real object with one's feelings,... American Life in Poetry #195: Christmas Night by Conrad Hilberry ...no more than a little flare of light, an affirmation,... American Life in Poetry #194: Applied Geometry by Russell Libby ...a way that makes it feel deep and magical. American Life in Poetry #193: How Is It That the Snow by Robert Haight The first two lines of this poem pose a question many of us may have thought about... American Life in Poetry #192: Fences by Pat Mora ...contrasts the lives of rich tourists with the less fortunate people who serve them. American Life in Poetry #191: Finding a Bible in an Abandoned Cabin by Robert Wrigley ...what's left of a Bible... American Life in Poetry #190: Cutting Hair by Minnie Bruce Pratt Occupational hazards, well, you have to find yourself in the occupation to know about those. American Life in Poetry #189: On Swearing by Gary Dop ...standing at Normandy, remembering. American Life in Poetry #188: Ghost Villanelle by Dan Lechay The drifting veils of rhyme and meter disclose a ghost,... American Life in Poetry #187: The Accompanist by Dick Allen ...the way he so easily draws us in... American Life in Poetry #186: Daughter by James Lenfestey ...the beautiful mystery of a daughter. American Life in Poetry #185: The Old Liberators by Robert Hedin ...and now all those have died... American Life in Poetry #184: After Work by John Maloney I hope it's not just a guy thing, a delight in the trappings of work. American Life in Poetry #183: Gathering Leaves in Grade School by Judith Harris But are our memories as richly detailed as these... American Life in Poetry #182: The Crow by Kaelum Poulson A middle school student and already accomplished maker of poems, he writes of the thankless toils of an unlikely but entirely necessary member of our community--the crow! American Life in Poetry #181: Prayer for the Dead by Stuart Kestenbaum ...the author of this week's poem, lost his brother Howard in the destruction of the twin towers of the World Trade Center. American Life in Poetry #180: My name came from. . . by Emmett Tenorio Melendez ...an eleven-year-old poet from San Antonio, Texas, proudly presents us with his name and its meaning. American Life in Poetry #179: Bushwick: Latex Flat 2001 by D. Nurkse I especially like the use of the verb, lap, in line seven, because that's exactly the sound a four-inch wall brush makes. American Life in Poetry #178: Father, Child, Water by Gary Dop We mammals are ferociously protective of our young,... American Life in Poetry #177: Rain at the Zoo by Kristen Tracy ...so perfectly truthful and vivid? American Life in Poetry #176: Sunflower by Frank Steele Hearts and flowers, that's how some people dismiss poetry, suggesting that's all there is to it, just a bunch of sappy poets weeping over love and beauty. American Life in Poetry #175: Driving to Camp Lend-A-Hand by Berwyn Moore ...fear--irrational, but exquisitely painful all the same. American Life in Poetry #174: To Katharine: At Fourteen Months by Joelle Biele Here's a lovely picture of a small child learning the laws of physics. American Life in Poetry #173: Piano by Patrick Phillips ...a masterful job of comparing a wrecked piano to his feelings. American Life in Poetry #172: Marry Me by Veronica Patterson ...senryu is a Japanese form similar to haiku but dealing with people rather than nature. American Life in Poetry #171: Planting the Sand Cherry by Ann Struthers Sometimes I think that people are at their happiest when they're... American Life in Poetry #170: Night Dive by Sam Green ...some really deep, dark water. American Life in Poetry #169: Heart by Rick Campbell Seeing one's self as a skeleton, or receiving any kind of medical report, even when the news is good, can be unsettling. American Life in Poetry #168: The Laughter of Women by Mary-Sherman Willis So often, reading a poem can in itself feel like a thing overheard. American Life in Poetry #167: For the Tattooed Man by Sharmila Voorakkara Among young people, tattoos are all the rage and, someday,... American Life in Poetry #166: Fried Beauty by R. S. Gwynn ...a picnic instead of a sermon. American Life in Poetry #165: Seeing the Eclipse in Maine by Robert Bly Notice how the experience happens to "we," the group,... American Life in Poetry #164: Dead Butterfly by Ellen Bass How often have you wondered what might be going on inside a child's head? American Life in Poetry #163: Ode to Marbles by Max Mendelsohn I have always enjoyed poems that celebrate the small pleasures of life. American Life in Poetry #162: Summer Job by Richard Hoffman Though at the time it may not occur to us to call it "mentoring,"... American Life in Poetry #161: Car Showroom by Jonathan Holden ...a young car salesman, who is trying hard, perhaps too hard. American Life in Poetry #160: Three Teenage Girls: 1956 by Steve Orlen ...the details not only help us to see the girls clearly, but the last detail... American Life in Poetry #159: The Inevitable by Allan Peterson ...gets at the feelings of receiving bad news by letter... American Life in Poetry #158: Part of a Legacy by Frank Steele Putting bed pillows onto the grass to freshen, it's a pretty humble subject for a poem,... American Life in Poetry #157: In Your Absence by Judith Harris ...you may remember A. E. Housman's poem that begins, "Loveliest of trees, the cherry now/ Is hung with bloom along the bough." American Life in Poetry #156: Today's News by David Tucker ...deputy managing editor of the New Jersey "Star-Ledger" and has been a reporter and editor at the "Toronto Star" and the "Philadelphia Inquirer." He was on the "Star-Ledger" team that won the 2005 Pulitzer Prize for breaking news. American Life in Poetry #155: Hospital by Marianne Boruch ...a space familiar to us all but made new... American Life in Poetry #154: Yellowjackets by Yusef Komunyakaa ...a fine portrait of the hard life of a worker--in this case, a horse... American Life in Poetry #153: Spare Parts by Trish Dugger ...Poet Laureate of the City of Encinitas, makes fine use of the one patched but good heart she has. American Life in Poetry #152: Medical History by Carrie Shipers ...how she once wished for a dramatic rescue by screaming ambulance, only to find... American Life in Poetry #151: Safe by Steven Huff Thirty, forty years ago, there were lots of hitchhikers... American Life in Poetry #150: What the Frost Casts Up by Ed Ochester There's a world of great interest and significance right under our feet, but most of us don't think to look down. American Life in Poetry #149: The Quarrel by Linda Pastan Elsewhere in this newspaper you may find some advice for maintaining and repairing troubled relationships. American Life in Poetry #148: Santa Paula by Lee McCarthy The poet can steer us a little by the selection of details, but a lot of the effect of the poem is in what is not said, in what we deduce. American Life in Poetry #147: [Untitled] by William Kloefkorn ...a late confession... American Life in Poetry #146: Veterans of the Seventies by Marvin Bell ...a group of these emotionally damaged soldiers, gathered together for breakfast. American Life in Poetry #145: Insomnia by Rynn Williams ...a suitable remedy. American Life in Poetry #144: How Good Fortune Surprises Us by Jackson Wheeler ...we're happy that it didn't happen to us. American Life in Poetry #143: In the House of the Voice of Maria Callas by Steve Orlen ...many of us listened to her on the radio or on our parents' record players... American Life in Poetry #142: Elegance by Linda Gregg ...that old business about the tree falling in the middle of the forest... American Life in Poetry #141: Trust by Thomas R. Smith ...some practical advice. American Life in Poetry #140: Chanukah Lights Tonight by Steven Schneider Isn't this a party to which you'd like to be invited? American Life in Poetry #139: The Lady and the Tramp by Bruce Guernsey ...a domestic communion. American Life in Poetry #138: At a Certain Age by Deborah Cummins
...in the best of all possible worlds, people who love their work should be able to do it as long as they wish.
American Life in Poetry #137: Superhero Pregnant Woman by Jessy Randall
...the senses can go haywire.
American Life in Poetry #136: Sleep by Todd Davis
...a fine seasonal poem...
American Life in Poetry #135: The Crossing by Ruth Moose
What motivates us to keep moving forward...
American Life in Poetry #134: Old Woman With Protea Flowers, Kahalui Airport by Kathleen Flenniken
Those were among our first stories, and we still venture into the world and return to tell others what happened.
American Life in Poetry #133: Afterwards by David Baker
By alone I mean that even among throngs of mourners we pull back within ourselves and peer out at life as if through a window.
American Life in Poetry #132: The Garden Buddha by Peter Pereira
Poets are good at discerning life within what otherwise might seem lifeless.
American Life in Poetry #131: A Dandelion for My Mother by Jean Nordhaus
...every experience, however commonplace, is unique to he or she who seizes it.
American Life in Poetry #130: Columbus Park by Anne Pierson Wiese
...winner of the Walt Whitman Award from the Academy of American Poets...
American Life in Poetry #129: Louisiana Line by Betty Adcock
Betty Adcock, has written scores of beautiful poems, almost all of them too long for this space.
American Life in Poetry #128: Snip Your Hair by Devon Regina DeSalva
...she wrote this poem to get back at her mother, only to find that her mother loved the poem.
American Life in Poetry #127: Nest by Marianne Boruch
It is the simplest of discoveries, yet she uses it to remind us that what at first seems ordinary,...
American Life in Poetry #126: The Raspberry Room by Karin Gottshall
...her own sort of private place.
American Life in Poetry #125: Subway by Barry Goldensohn
...a contemporary subway station.
American Life in Poetry #124: Matinee by Patrick Phillips
Here is a lovely poem about survival...
American Life in Poetry #123: Found Letter by Joshua Weiner
Such a poem might be words scrawled on a wadded scrap of paper, or buried in the classified ads, or on a billboard by the road.
American Life in Poetry #122: Hymn to the Comb-Over by Wesley McNair
...these valorous attempts to disguise hair loss.
American Life in Poetry #121: Wind by Mike White
A large white umbrella blown into the street, and an aproned waiter rushing to the rescue.
American Life in Poertry #120: Heaven, 1963 by Kim Noriega
The loss of youth and innocence...
American Life in Poetry #119: Banana Trees by Joseph Stanton
I'm a dedicated stay-at-home and much prefer to read something fascinating about a place than visit it myself.
American Life in Poetry #118: Alberto by Warren Woessner
And weather stories? We tell them in the same way our ancestors related encounters with fearsome dragons.
American Life in Poetry #117: Geometry by Nancy Botkin
...the parents downstairs in their stultifying dailiness, the children enjoying their youth under the eaves...
American Life in Poetry #116: Safari, Rift Valley by Roy Jacobstein
...experience on a safari to the place believed by archaeologists to be the original site of human life.
American Life in Poetry #115: Visitation by Jeffrey Harrison
...bittersweet poem...
American Life in Poetry #114: Echo by Robert West
...successful poems not only make use of the meanings and sounds of words, as well as the images those words conjure up, but may also take advantage of the arrangement of type on a page.
American Life in Poetry #113: Swimming With A Hundred Year Old Snapping Turtle by Freya Manfred
...most of the world's species look upon us with justifiable wariness, for we're among the most dangerous critters on the planet.
American Life in Poetry #112: Slow Dancing on the Highway: the Trip North by Elizabeth Hobbs
Not only do we have road rage, but it seems we have road love, too.
American Life in Poetry #111: Drought by Felecia Caton Garcia
...there are times when parents feel helpless and hopeless. But the human heart is remarkable and, like a dry creek bed, somehow fills again, is renewed and restored.
American Life in Poetry #110: Summer Downpour on Campus by Juliana Gray
Here's the celebration of a moment on a campus somewhere, anywhere.
American Life in Poetry #109: Wallpapering by Sue Ellen Thompson
One big test of the endurance of any relationship is taking on a joint improvement project.
American Life in Poetry #108: Houdini by Kay Ryan
American Life in Poetry #107: Supple Cord by Naomi Shihab Nye
...a lovely moment from her childhood.
American Life in Poetry #106: Catching the Moles by Judith Kitchen
...an experience that resonates beyond the simple details...
American Life in Poetry #105: Laundry by Ruth Moose
...poetry can hold a mirror up to life, and I'm especially fond of poems that hold those mirrors up to our most ordinary activities, showing them at their best and brightest.
American Life in Poetry #104: Where They Lived by Marge Saiser
...a house where aged parents lived out their days.
American Life in Poetry #103: How Are You Doing? by Rick Snyder
It's not just baseball caps, it's Tasmanian Devil caps; it's not just music on the intercom, it's James Taylor.
American Life in Poetry #102: Morel Mushrooms by Jane Whitledge
The morel is among nature's most elusive species.
American Life in Poetry #101: Wax Lips by Cynthia Rylant
Those big cherry flavored wax lips that my friends and I used to buy when I was a boy, well, how could I resist this poem...
Labels: American Life in Poetry, Poetry, Poetry Foundation
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
 Giacomo Talegardo Francesco di Sales Saverio Pietro Leopardi, Conte, was born on the 29th of June, 1798, and died on the 14th of June, 1837. Essays/Saggi in English:Essays/Saggi in Italiano:
Poems/Poeme in English Translation:
Poems/Poeme in Italiano: - I Canti (Leopardi.it, testo intiero in Italiano);
- I Canti (Progetto Giacomo Leopardi, testo intiero in Italiano);
Prose/prosa in English Translation:Prose/prosa in Italiano:Book Reviews:- "A complete history of astronomy" by Giovanni F. Bignami. A review of Storia dell'astronomia: dalle origini al duemila e oltre by Giacomo Leopardi & Margherita Hack. Edizioni dell'Altana: 2002. (pdf format)(Nature, June 2002);
Correspondence/Corrispondenza:Manuscripts/Manoscritti:
Images:- The Apostle of the Infinite. A nice biography, in English, with many images including a post-mortem photo (?), holographic manuscript copies, and title page of Poesies et ouevres morales de Leopardi Premiere traduction complete precedee d'un essai sur Leopardi per F.A.AulardParis, Librairie Alphonse Lemerre, 1880 (Quilldrivers);
- Complete holographic copy of "Letteratura ed Arti Liberali: on the Work of Madame De Stael", by Giacomo Leopardi, as it appeared in the Bibliotecha Italiana, April 1816 (Dibattito sulla utilita delle traduzioni, Zacinto.it);
News Stories/Articles:
Miscellaneous / Miscellaneo:
Other VGS Author Pages / Altri Pagini di Autori VGS: Labels: Author Pages
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
Pablo Neruda was born Ricardo Reyes Basoalto, on July 12th, 1904, in Parral, Chile. Chile is a land with a diversity of climates, and Parral is in the temperate-zone. His mother died of tuberculosis a month after he was born. His father moved the family to Temuco, a frontier outpost in the far south of the country, where the young Richardo grew up among half finished houses and torrents of rain. [To read the complete biography click >>> here] Interviews/Entrevistas: - Entrevista conr Carlos Wilson, 9 de junio de 1965 (Revista Universitaria, en Espanol);
- Entrevista con Rita Guibert, Siete voces (Mexico: Editorial Novaro, S.A., 1974) (Literatura.us, in Espanol);
- Interview with Rita Guibert and Ronald Christ, pdf format (Paris Review, Spring 1971);
- Entrevista con la BBC de Londres, 21 octubre 1971, Real Audio file, (BBC Mundo, in Espanol);
- "The Greatest Poet of the 20th Century In Any Language" - Celebrating Chilean Poet Pablo Neruda. Amy Goodman interviews Martin Espada about the poetry of Neruda. Includes an extended audio clip of Neruda reading "Alturas del Maccu Picchu". (Real Audio) (Real Video 128k or 256k or MP3) (Democracy Now, July 2004);
- Neruda Viaja a Inglaterra o entrevista con terremoto por Sara Vial, La Nacion, 28 marzo 1965 (Atenea 2004, Universidad de Concepcion, en Espanol);
Essays in English:Essays in Espanol: Poems/Poemas in Translation: Poems/Poemas in Espanol:
Prose in English:
Prose en Espanol: Photos / Images: Reviews/Revistas:
Articles/Articulos:
- As Pablo Neruda centennial approaches, projects take shape by John Sanford (Stanford University, March 2003, in English);
- Celebrating the Pablo Neruda Centennial (Real Audio) (National Public Radio, July 2004);
- Poetry, Politics And Pablo Neruda by Vibha Maurya (People's Democracy, August 2004, in English);
- La Poeta Malu Urriola es Galardonada con el Premio Pablo Neruda 2006 (Fundacion Pablo Neruda, en Espanol);
- A Mystery That Ends In Poetry: After 40 Years, A Tape of Pablo Neruda Is Finally Played Again by Darragh Johnson (Washington Post, June 2006, in English);
- Pablo Neruda at 100 by Edward Hirsch (Washington Post, July 2004, in English);
Miscellaneous: Other VGS Author Pages: Labels: Author Pages
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
Naomi Shihab Nye was born on March 12, 1952, in St. Louis, Missouri, to a Palestinian father and an American mother. She has lived for periods of time in Ramallah, Jerusalem, and San Antonio, Texas. She has received a B.A. in English and World Religions from Trinity University. and has since become a poet, essayist, author of children's books, and a songwriter. She has been a recipient of writing fellowships from the Lannan Foundation, the Guggenheim Foundation and the Witter Bynner Foundation. Readings: - Meet the Poet: Naomi Shihab Nye (Real Audio)(Real Video)(WGBH Boston);
- Women Poets from the Middle East (MP3) (PEN American Center);
Interviews: Essays:
Poems: Prose: Photos / Images: Reviews/Revistas: - "Warm Baths" by Phil West. A review of Never In A Hurry by Naomi Shihab Nye (Austin Chronicle);
Articles/Articulos:
- "Many Voices: Poet/Essayist Naomi Shihab Nye" by Phil West (Austin Chronicle);
Miscellaneous: Other VGS Author Pages: Labels: Author Pages
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
Lisel Mueller (February 8, 1924 - ), nee Neumann, was born in Hamburg, Germany. Her family emigrated to the United States when she was 15 years old, where her father was a professor at Evansville College. She married Paul Mueller and the two built a home in Lake Forest, Illinois, where they settled for many years. Readings: Interviews: Essays:Poems: Prose: Photos / Images:
Reviews/Revistas: Articles/Articulos:Miscellaneous: Other VGS Author Pages:Labels: Author Pages
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
 The Palanca Food Pantry is a ministry of Holy Redeemer Episcopal Church, a member of the Diocese of Southeast Florida. The Pantry is located at 3730 Kirk Road, Lake Worth, FL ( map). It serves the homeless, working poor, disabled and retired populations in its community and throughout Palm Beach County. The Pantry proper opens its doors every Tuesday from 10:00 AM to 11:00 AM. A box of food is provided to take home. Second hand clothing and household items are available, as well. The Pantry also partners with churches, and other organizations, located throughout Palm Beach County, to provide sit-down meals Monday through Friday as follows: Mail service is available to the homeless, and those without a fixed abode, every Tuesday and Friday during the program times. Should you have any questions concerning the Palanca Food Pantry please feel free to contact Gilbert Purdy. Your correspondence should be addressed to:
Gilbert Purdy
Program Coordinator
Palanca Food Pantry
Holy Redeemer Episcopal Church
3730 Kirk Road
Lake Worth, FL 33461. Should you wish to donate to the Palanca Food Pantry please send your check to the same address. Checks should be made out to "Holy Redeemer Episcopal Church". The "memo" line should read "for Palanca Food Pantry". Checks can also simply be made out to "Palanca Food Pantry". Please do not send cash or checks made out to the addressee personally. Donations are fully tax deductable. Should you live in the area served by the Palanca Pantry and wish to donate used clothing, household items, holiday packages, etc., there is generally someone on-site throughout the day. Should you arrive with the items at a time when the church is unattended, feel free to leave the items outside of a door. Someone will soon arrive and bring them inside. Please do not leave large items as storage space is not available in which to accomodate them. Please do not leave dirty items as sufficient staff is not available to clean them. Please do not leave food items unless you have contacted Holy Redeemer Episcopal Church beforehand and made the necessary arrangements. Se Habla Espanol y Lenguaje por Señas Americanas.We speak Spanish and American Sign Language.
More About the Palanca Pantry:
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
Jared Carter has published four books of poetry: Work, for the Night Is Coming (Macmillan, 1981), which received the Walt Whitman Award of the Academy of American Poets; After the Rain (Cleveland State University Poetry Center), which received the 1994 Poets’ Prize; Les Barricades Mystérieuses (Cleveland State, 1999); and Cross this Bridge at a Walk (Wind Publications, 2006). He has received a Guggenheim fellowship, two creative-writing fellowships from the National Endowment for the Arts, and the Indiana Governor’s Arts Award. He lives in Indianapolis, where he worked for many years as an editor and designer of textbooks and scholarly works, first with the Bobbs-Merrill Company, and later in association with Hackett Publishing Company. He maintains a web site at http://www.jaredcarter.com/. Items at Virtual Grub Street by/about Jared Carter:Labels: Contributor Information
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
PUT ON THAT PARTY-CRASHING DRESS. A review of Lilies Without, by Laura Kasischke. Ausable Press. Laura Kasischke's latest poetry collection, Lilies Without, offers unsettling charms. [ Go to the Review>>>] ARMED WITH VERSE. Reviews of The Baghdad Blues, Sinan Antoon (Harbor Mountain Press), The War Works Hard, Dunya Mikhail. trans. by Elizabeth Winslow (New Directions Publishing) and Here, Bullet, Brian Turner (Alice James Books). With recent collections of war poetry in his bag, an ex-soldier returns to Afghanistan. [ Go to the Review>>>] THEY TELL THE TRUTH, BUT TELL IT SLANT. Reviews of Decreation: Poetry, Essays, Opera, by Anne Carson (Alfred A. Knopf) and Scar Tissue, by Charles Wright (Farrar, Straus and Giroux). Poets Anne Carson and Charles Wright revise and refresh the usual ways of seeing the world. [ Go to the Review>>>] GHOSTS, SEX, AND PHYSICS: Devin Johnston & Pattiann Rogers. Reviews of Aversions, by Devin Johnston (Omnidawn) and Firekeeper: Selected Poems, by Pattiann Rogers (Milkweed Editions).In poem after poem Johnston turns away from the world at hand and moves into a kind of hushed borderland, even as he redirects our attention to the here and now. Like the filmmaker Stan Brakhage, to whom he pays homage, this poet can't get enough of those seemingly mundane spots in time when some subtle presence arrives, thrumming in over the wires. [ Go to the Review>>>] GHOSTS, SEX, PHYSICS: J.D. McClatchy & Anne Stevenson. Reviews of Poets of the Civil War, ed. by J.D. McClatchy (The Library of America) and Poems 1955-2005, by Anne Stevenson (Dufour Editions).What makes this collection of Civil War poets so valuable is the power with which it disrupts that trend, corroborating William Faulkner's claim that "The past is not dead. It is not even past." [Go the the review>>>]Moxie and Dreams by D. H. Tracy. Feminine Gospels, by Carol Ann Duffy. Faber and Faber, 2005, and Burnt Island, by D. Nurkse, Alfred A. Knopf, 2006.I gather Carol Ann Duffy is the most popular poet in the UK, and the American publication of her seventh (adult) collection may be an opportunity to extend her empire. It could happen: Duffy's work is so rich that it can't help but be thoroughly of the place it was written in, but her consistent moxie, her affable rambunctiousness,... [Go to the Review>>>] The Cosmic I
Present Company by W. S. Merwin
Port Townsend, WA: Copper Canyon Press, 2005.
140 Pages. $22.00 cloth. ISBN 1556592272.
Mere months after Copper Canyon Press has released Migration, W. S. Merwin's selected poems (and recent winner of the 2005 National Book Award for Poetry), the volume is incomplete.... [Go to Review>>>]
 True Stone and Epitaph: the Poetry of Pablo Neruda.
by Gilbert Wesley Purdy.
The Essential Neruda: Selected Poems, Mark Eisner, Ed.
San Francisco: City Lights Publishers, 2004. 222 pages
ISBN 0-87286-428-6
The year 2004 is the centennial of the birth of the poet Pablo Neruda. As a result, the already considerable amount of work published annually by and about the poet has increased exponentially. City Lights' 100th birthday gift is The Essential Neruda, a selection of poems, edited by Mark Eisner, a visiting scholar at Stanford University's Center for Latin American Studies. [Go to the review>>>]
 Pierce Butler, Fanny Kemble, et al.
by Gilbert Wesley Purdy.
The Weeping Time: Elegy in Three Voices by Christopher Conlon.
Washington, D.C.: Argonne House Press, 2004.
138 pp. $19.95 paper. ISBN 1-887641-18-1.
In March of 1859, Pierce Butler, a Philadelphian, wealthy by virtue of two plantations in Georgia, auctioned some 430 of his slaves in one of the largest such sales in American history. That auction became known as 'The Weeping Time'. The poet Christopher Conlon memorializes that day with a book of poems bearing the same name. Butler is of further historical interest by virtue of his rocky marriage to the famous English actress, Fanny Kemble,... [Go to the Review>>>]
 A Word Association Test
by Gilbert Wesley Purdy.
Words Brushed by Music ed. by John T. Irwin.
Baltimore, MD: Johns Hopkins University Press, 2004.
200 pp. $12.95 paper. ISBN 0-8018-8029-7. $27.50
hardcover. ISBN 0-8018-8028-9.
In 1979, while the poetry world as a whole was marching with ever greater determination towards quote-unquote free verse and one or another variation of anti-poetry, Johns Hopkins University Press staked out its own territory. Its new Poetry Series would provide a haven for poets who had chosen to write the only truly alternative poetry that remained: a poetry which stayed connected to the tradition of the craft.... [Go to the Review>>>]
The Way of Mrs. Wei.
The Tao of Mrs. Wei by Hilary Tham
Washington, D.C.: The Bunny and Crocodile Press, 2003
...how different the world has become.
Mortal Arguments by Sue Sinclair.
London, Ontario: Brick Books, 2003.
-and- Secrets of Weather and Hope by Sue Sinclair
London, Ontario: Brick Books, 2001.
Prima Materia.
The Feast: Prose Poem Sequences by Walter Bargen.
Kansas City: BkMk Press, 2004.The Eye of the Beholder.eye: poems and retina prints by Elizabeth Goldring.
Kansas City: BkMk Press, 2002.
The Vulgar Tongue.Churlsgrace by William Hathaway.Gainsville: University of Florida Press, 1992.
Off-Site Reviews: Fruitful Clutter
by Gilbert Wesley Purdy.
In the Dark by Ruth Stone.
Port Townsend, WA: Copper Canyon Press, 2004.
128 pages pp. $22.00 paper. ISBN 1-55659-210-8.
After her husband committed suicide in 1959, Ruth Stone moved into the house they had just purchased in Goshen, Vermont. It had been intended as a sanctuary in which the two would find the peace and serenity to write, a place to get away from the New York literary scene. She brought up their three daughters there. Some 46 years later she remains in the house, nearly deaf and all but blind. [Read entire review>>>]
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
X. THE SONG OF AN ODD BIRDWhy Stevie Smith is the right poet for our times. 30. Desire to Burn.Did his misreading of a poem contribute to Kurt Cobain's demise? 29. Put On That Party-Crashing Dress. 28. Armed with Verse. 27. Fables and Foibles.Reviews of Dear Ghosts, by Tess Gallagher (Graywolf Press) and Swithering, by Robin Robertson (Harcourt). 26. Seriously Playful.A review of Notes from the Air: Selected Later Poems, by John Ashbery (Ecco Press). 25. Over the Moon.A review of Sleeping With the Moon, Colleen J. McElroy (University of Illinois Press). 24. The War of Art.A review of War and the Iliad, by Simone Weil and Rachel Bespaloff with an essay by Hermann Broch. Tr. by Mary McCarthy. Introd. by Christopher Benfey (New York Review Books). 23. Close -- But Not Too Close -- Observation.Reviews of Burn the Field, by Amy Beeder (Carnegie Mellon University Press) and Riding Westward, by Carl Phillips (Farrar, Straus and Giroux). 22. They Tell the Truth But Tell It Slant. 21. Translating Poetry Into Poetry. (Interview) C. K. Williams on becoming a poet, and how he creates English versions of ancient Greek dramas--without knowing any Greek. 20. Thrills and Chills and Home Movies.Reviews of Strong Is Your Hold, by Galway Kinnell (Houghton Mifflin) and Interrogation Palace, by David Wojahn (University of Pittsburgh Press). 19. Never Far from a Breakdown.A Review of Collected Poems: With Notes Toward the Memoirs, by Djuna Barnes. Ed. by Phillip Herring and Osias Stutman (University of Wisconsin Press). 18. A Psalm? How So?"The tension between the attempt to mean and the routine failure to entirely mean": the limits of human language and worship in George Oppen's "Psalm." 17. Nature Poems in a Post-Natural Age. (Interview) Poet Gary Snyder thinks the landscape of contemporary poetry should include wildflowers . . . and highway fast food joints. 16. Herbert Sucks. Donne is a Pimp.Why high school students make great poetry critics. 15. Writing on the Wall.Scholars and poets around the world consider dissident poet Huang Xiang the Whitman of China, but his work is still banned there. 14. No Personal History Here.Eleanor Wilner "gets out of the way" of her poetry. 13. John Donne is Hot."The Sun Rising" is so romantic it will burn your eyes. 12. Barnes on Fire.Hilarious and pious, Dick Barnes is essential to poetry's future. 11. The Inner Life and the Inner City.The kaleidoscopic poetry of Kay Ryan and Major Jackson. 10. The Poet of Green Bananas and Bacalao. (Interview) How a plate of food reminds Victor Hernández Cruz of history. 9. The Poet and the Rock Band.John Berryman's ghost makes cameo appearances on the Hold Steady's new album. 8. GHOSTS, SEX, AND PHYSICS: Devin Johnston & Pattiann Rogers. Reviews of Aversions, by Devin Johnston (Omnidawn) and Firekeeper: Selected Poems, by Pattiann Rogers (Milkweed Editions). 7. THE GARDEN OF MEMORYPulitzer-prize winning poet Lisel Mueller's gentle, steady voice was shaped by a harsh history. 6. GHOSTS, SEX, PHYSICS: J.D. McClatchy & Anne Stevenson. Reviews of Poets of the Civil War, ed. by J.D. McClatchy (The Library of America) and Poems 1955-2005, by Anne Stevenson (Dufour Editions). 5. In Praise of Rareness. 4. HE'S OUR SHAKESPEARESo why is America ambivalent about Whitman? 3. MOXIE AND DREAMS: Carol Ann Duffy and D. Nurkse. Reviews of Feminine Gospels, by Carol Ann Duffy (Faber and Faber) and Burnt Island, by D. Nurkse (Alfred A. Knopf). 2. Plath at 75. The legacy of the poet who died at 30. 1. The Essential Gwendolyn Brooks Essential Enough?Review of The Essential Gwendolyn Brooks. Ed. by Elizabeth Alexander (Library of America). Labels: Poetry Foundation
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
 Thomas Gray (December 26, 1716 - July 30, 1771) Poetry:Prose:Letters:- From letter of October 31, 1734, to Horace Walpole (The Independent, October 2006, Find Articles);
- From letter of August 12, 1760, to John Clarke (The Independent, August 2005, Find Articles);
- From letters of October 3rd and 8th, 1769, to Dr. Thomas Warton (Norton Anthology);
Biographical:- The Life of Gray by Samuel Johnson (Jack Lynch, Rutgers University);
- The Life of Thomas Gray by Rev. John Mitford. Facsimile of The Poetical Works of Thomas Gray, Little Brown and Company, 1862 (Making of America Books);
Essays:Reviews: Images:Articles: Miscellaneous:
Other VGS Author Pages: Labels: Author Pages
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
The following is an in-progress index of some of the more common adware & malware toolbars/browser helper objects, and associated files, at large on the Internet. It links, when possible, to detail pages including vendor uninstall pages and freeware or trialware removal tools. No commercial removal software is cited. Only auxiliary information for manual removal is provided. It will be regularly updated with new information as it comes available. The information in the Adware & Malware Indentifier Index is the result of thousands of web searches. It can not, however, possibly be complete. The subject is vast and constantly changing. Moreover, vendor uninstall tools and other freeware removal tools do not necessarily remove all of an infection from your computer. Vendor uninstall tools, for instance, may silently leave cookies or other tracking software installed. It is suggestible to follow up a removal with one or more adware scans and/or to do an inspection using a HijackThis log. The information on the page is not guaranteed correct and any use you may choose to make of it is entirely at your own risk. Indexed by Common Infection Name: -[A]- -[B]- -[C]- -[D]- -[E]- -[F]- -[G]- -[H]- -[I]- -[J]- -[K]- -[L]- -[M]- -[N]- -[O]- -[P]- -[Q]- -[R]- -[S]- -[T]- -[U]- -[V]- -[W]- -[X]- -[Y]- -[Z]- ABetterInternet, Aurora, Nail.exe.
- Associated Worms/Trojans: Trojan.Win32.Stervis.b.
- Executable Files: adbltzun.exe; aurareco.exe; aurora.exe; aurora-wise1.exe; nail.exe; poller.exe; svcproc.exe; thnall~1.exe; uacupg.exe.
- Dynamic Link Libraries: aurorahandler.dll; bolger.dll; drpmon.dll.
- Directory/Search Page: www.abetterinternet.com
- Uninstall Page URL:
- Related Articles:
- Notes: See "How to Remove Nail.exe."
AproposMedia, PeopleOnPage, POP
- Associated Worms/Trojans:
- Executable Files: 9yxuen.exe; addit.exe; all_files10.exe; aprload.exe; apropos.exe; apropos_client_loader.exe; apropos_uninstaller.exe; aufo.exe; autoupdate.exe; auto_update_install.exe; cxtpls.exe; dx8iext.exe; load.exe; magicinlayinstall.exe; midaddle.exe; monpop.exe; mv7dizbww.exe; mw.exe; mw_4s_stub.exe; notify.exe; ororoxid.exe; phomac.exe; popsrv225.exe; _ps_inst.exe; qnqyiee.exe; rcisp.exe; sepinst.exe; sfl.exe; shmhupnp.exe; sm1ay.exe; sysai.exe; update_1.exe; updater.exe; vmpremov.exe; wrifo.exe; z.exe; zga.exe.
- Dynamic Link Libraries: 199e866.dll; 6ktkk.dll; 7ggoo.dll; acsdir.dll; activeinstall2.dll; aproposplugin.dll; atla.dll; atlw.dll; cxtpls.dll; directxvercheck.dll; dsetup.dll; dsetup16.dll; dsetup32.dll; pop225.dll; pophook4.dll; proxystub.dll; qnqyiee.dll; qtinstallerhelper.dll; sidesearch.dll; toolbar.dll; truetypefontinfo.dll; wingenerics.dll; write_ph.dll; z.dll; zga.dll.
- Directory/Search Page:
- Uninstall page URL:
- Related Articles: Important Removal Tool Note.
- Notes: According to the Spyware Information Center, this infection is also known as Adware/Apropos [Panda], Adware/SideSearch [Panda], Adware/WinTools [Panda], Backdoor.Agent.ag [Kaspersky], Trj/Upseter.A [Panda], TrojanDownloader.Win32.Apropo.b [Kaspersky], TrojanDownloader.Win32.Apropo.g [Kaspersky], Win32/Agent.AG trojan [Eset], Win32/TrojanDownloader.Apropo.B trojan [Eset], Win32/TrojanDownloader.Apropo.G trojan [Eset]. See: How to Remove AproposMedia.
C2, Lop
- Associated Worms/Trojans:
- Executable Files: asshuktr.exe; bilyooas.exe; byb_save.exe; crgbeaoa.exe; dmvcrthl.exe; eaymulyl.exe; eeublidc.exe; glxshmcr.exe; ijlysseb.exe; jqumysto.exe; kfriegbs.exe; llfggrdr.exe; lltckiey.exe; lopsearc.exe; meemnckyqbr.exe; meepajlr.exe; mprcouie.exe; oofrkxpe.exe; peebqusz.exe; quveioot.exe; shoucrck.exe; ssmeeibl.exe; tchpeatr.exe; tglblrll.exe; trdzhtxf.exe; trstdris.exe; ulyuiexeechp.exe; vestufck.exe; vfthrcbr.exe; xogyfhp.exe; ykphmbre.exe; ylynfste.exe; yxogltoo.exe.
- Dynamic Link Libraries: blztstulla.dll; blztstullc.dll; blztstullj.dll; blztstullp.dll; blztstulls.dll; blztstullt.dll; blztstully.dll; blztstullpr.dll; blztstulltr.dll; blztstulloo.dll; chksbdrlya.dll; eaeeishllblc.dll; eelykofrllfrpr.dll; eelykofrllfrj.dll; ealymfrprwch.dll; epllkeeoopr.dll; freabrlaouw.dll; gldqumssfrie.dll; hglllyxrxw.dll; icdrhwno.dll; heeachmstll.dll; meepajlr.dll; ousszidrta.dll; plg_ie*.dll; prxzoustustgr.dll; prnouestssstx.dll; quizbt*.dll; quglwachfs.dll; sstroallhqch.dll; tblchepruprgr.dll; trstshcrscksr.dll; ukfroigl.dll; upckeetoutw.dll; veaeyglckr.dll; woafrquzn.dll; yeecrsoustoull.dll; ziebaeeoaeepr.dll.
- Directory/Search Page: http://lop.com/ and many others.
- Uninstall page URL: See: How to Remove Lop.
- Related Articles: Important Removal Tool Note.
- Notes: Lop has utilized stealth downloads and has downloaded via bundling in the past. Some variants of this infection can also effect the Mozilla and Netscape browsers. See: How to Remove Lop.
CashToolBar Claria, Gain, Gator
- Associated Worms/Trojans:
- Executable Files: cmessys.exe; fsg.exe; fsg-ag.exe; fsg*.exe; gain_trickler_*.exe.
- Dynamic Link Libraries:
- Directory/Search Page:
- Uninstall page URL: See: How to Remove Claria, Gain, Gator.
- Related Articles: Important Removal Tool Note.
- Notes: This infection generally downloads bundled with other software which the user has voluntarilty accepted. It utilizes a "trickler" technology designed to limit its use of processor time. It claims to be entirely removable via the Windows "Add/Remove Programs" utility. It provides uninstall instructions at the above URLs. See: How to Remove Claria, Gain, Gator.
ConfuSearch downloader.bjg
- Associated Worms/Trojans:
- Executable Files: A0034787.exe; EDow_AS2.exe; installer_MARKETING18.exe; SSK3_B5 Seedcorn 4.exe; VB3.exe ; wrapperouter.exe
- Dynamic Link Libraries:
- Directory/Search Page:
- Uninstall page URL:
- Related Articles: Important Removal Tool Note.
- Notes: See "How to Remove downloader.bjg."
DyFuCa
- Associated Worms/Trojans:
- Executable Files: actalert.exe; goldentiger.exe; idctup20.exe; optimize.exe; thi6026.tmp\preinstt.exe; ssupdate.exe; view-m~1.exe.
- Dynamic Link Libraries: iopti130.dll; nem207.dll; nem211.dll; nem214.dll; nem219.dll; nem220.dll; wsem210.dll; wsem216.dll; wsem218.dll; wsem302.dll; wsem303.dll.
- Directory/Search Page:
- Uninstall page URL:
- Related Articles: Important Removal Tool Note.
- Notes: DyFuCa is a porn dialer trojan. When downloaded as part of InternetOptimizer, it is also a 404 page ("Page Not Found") hijacker. The Spyware Information Center lists the following aliases: Spyware/Dyfuca [Panda], Spyware/SafeSurf [Panda], TrojanDownloader.Win32.Dyfuca.bw [Kaspersky], TrojanDownloader.Win32.Dyfuca.cn [Kaspersky], TrojanDownloader.Win32.Dyfuca.dc [Kaspersky], Trojan-Downloader.Win32.Dyfuca.dp [Kaspersky], TrojanDownloader.Win32.Dyfuca.gen [Kaspersky], Win32/TrojanDownloader.Dyfica.NAB trojan [Eset], Win32/TrojanDownloader.Dyfica.NAC trojan [Eset]. See: How to Remove DyFuCa.
EasyBar, HotOffers
- Associated Worms/Trojans:
- Executable Files: dwvem.exe; file_0.exe; iau.exe; lssas.exe ; mservice.exe; msqdevl.exe; runwin32.exe; stisvsq.exe; svshost.exe; tibs3.exe [a.k.a. Troj/HideDial-A]; wininet32.exe.
- Dynamic Link Libraries: csrss.dll.
- Directory/Search Page: http://www.easy-search.biz.
- Uninstall page URL:
- Related Articles: Important Removal Tool Note.
- Notes: The url http://www.easy-search.biz/ is no longer an active search engine. More recent versions of this infection appear to involve single ad pages, pop-ups and pop-unders, and redirects to hard porn sites. They utilize a CHM exploit to execute through an unpatched Microsoft hole. If you have "iau.exe" on your machine without "runwin32.exe" you have the far more virulent, newer, heavily bundled CHM exploit version. This version somehow hides in the Windows text files areas, if removed, and reinstalls on the next reboot. See: How to Remove EasySearch, HotOffers.
EliteBar Toolbar, EliteSideBar, Elitum, EM Toolbar, Enternet Media Toolbar; ETBRUN, LQ, PokaPoka, SearchMiracle, YupSearch
- Associated Worms/Trojans: Trojan.EliteBar.a [Ewido] (a.k.a. PokaPoka76.exe); small.gz; startpage.fk (a.k.a. startpage.nk, temperror32.dat); startpage.sj.
- Executable Files: O4 - HKLM\..\Run: [etbrun] c:\windows\system32\elite***32.exe; eliteabu32.exe; elitebhi32.exe; elitebyj32.exe; elitecfh32.exe; eliteckj32.exe; elitecla32.exe; elitecxw32.exe; elitedbt32.exe; elitedph32.exe; elitednv32.exe; eliteetx32.exe; eliteeys32.exe; elitefmj32.exe; elitefyb32.exe; elitegdp32.exe; elitehaf32.exe; elitehln32.exe; elitehxt32.exe; eliteine32.exe; eliteizj32.exe; elitejhs32.exe; elitejko32.exe; elitekck32.exe; elitekpi32.exe; elitekyk32.exe; elitelaj32.exe; elitelfv32.exe; elitelgy32.exe; elitelhg32.exe; elitemoa32.exe; elitemol32.exe; elitemuc32.exe; elitenii32.exe; elitenne32.exe; elitenrz32.exe; eliteoey32.exe; eliteosm32.exe; eliteoxx32.exe; eliteozz32.exe; elitepam32.exe; elitepdt32.exe; eliteptl32.exe; elitepye32.exe; elitepys32.exe; elitervh32.exe; eliterwr32.exe; eliteuej32.exe; eliteutt32.exe; eliteuzz32.exe; elitevaj32.exe; elitewfu32.exe; elitewjf32.exe; elitewug32.exe; elitewvn32.exe; elitevba32.exe; elitevji32.exe; elitexdk32.exe; elitexiy32.exe; elitexlp32.exe; elitexxe32.exe; elitexyi32.exe; eliteyif32.exe; elitezgx32.exe; elitezvo32.exe; elitezwk32.exe; etc. C:\windows\system32\kalv***32.exe; pokapoka**.exe; pokapoka62.exe; pokapoka65.exe; pokapoka66.exe; pokapoka67.exe; pokapoka68.exe; pokapoka70.exe; pokapoka75.exe; pokapoka76.exe; sideb.exe.
- Dynamic Link Libraries:EliteBar version 50.dll; Elites~1.dll; EliteSideBar 07.dll; EliteSideBar 08.dll (a.k.a. EliteBar.b); EliteToolBar version 53.dll; etc.
- Directory/Search Page: http://www.24-7searching-and-more.com/sp2.php; http://www.the818search-co.com/; http://www.audioseek.net/; http://www.myseachexplorer.com/; http://ad1.searchmiracle.com/; http://searchmiracle.com/; http://www.searchmiracle.com/; http://www.xosearchox.com/; http://www.yupsearch.com/search.php; http://yupsearch.com/sb.php; etc.
- Uninstall Page URL: Direct download link/file from search directory pages. An uninstall file is also downloaded along with the infection but is reputed to be ineffective.
- Related Articles: EliteBarfix.bat Information Page (October 20, 2005); PokaPoka.exe + Nothing = YupSearch (October 19, 2005); Elite Toolbar Remover Information Page (October 17, 2005); LQfix Information Page (October 15, 2005); EliteBar Removal Tool Updates to 2.0.1 (September 21, 2005); SearchMiracle.EliteBar Then and Now (September 20, 2005); More on Variant ADW_ELITEBAR.D.(May 27, 2005); Diabolical New EliteBar Variant Strikes the Web!!!! (May 22, 2005); EliteBar Removal Tool Updates to 1.3.0!!!!! (May 20, 2005); HijackThis vs. the Elitebar Removal Tool (April 23, 2005); EliteBar Removal Tool Alert: Update V.1.2.2.!!! (April 18, 2005); HijackThis vs. SearchMiracle/EliteBar (April 11, 2005); How to Remove SearchMiracle/ EliteBar (February 27, 2005, historical version); Important Removal Tool Note.
- Notes: Automatically reinstalls upon removal. The EliteBar Removal Tool can not remove the variant adw_elitebar.d. See Diabolical New EliteBar Variant Strikes the Web!!!! and More on Variant ADW_ELITEBAR.D for further details. If the file PokaPoka**.exe is present, see "How to Remove PokaPoka". Otherwise, see "How to Remove SearchMiracle.EliteBar".
FastWebSearch, FreshBar GlobalWebSearch, ISearch HotWebSearch HuntBar
- Associated Worms/Trojans:
- Executable Files: wtoolss.exe.
- Dynamic Link Libraries: ...btiein.dll; ...msielink.dll; ...msiein.dll; ...qdow.dll; ...SToolbar.dll; ...toolbar.dll; ...WToolsB.dll.
- Directory/Search Page:
- Uninstall page URL:
- Related Articles: Important Removal Tool Note.
- Notes: "Toolbar.dll" is a name widely used for legitimate and malware BHOs. It is not necessarily indicative of a particular BHO. See: How to Remove HuntBar.
Ibis Toolbar
- Associated Worms/Trojans:
- Executable Files: wintools.exe; wsup.exe; wtoolsa.exe.
- Dynamic Link Libraries: common.dll; toolbar.dll.
- Directory/Search Page: http://www.websearch.com/.
- Uninstall page URL:
- Related Articles: Important Removal Tool Note.
- Notes: This malware is related to HuntBar and WinTools. "toolbar.dll" and "common.dll" are names used for legitimate and malware BHOs. They are not necessarily indicative of a particular BHO. See: How to Remove Ibis Toolbar.
IELoader:
- Associated Worms/Trojans:
- Executable Files: aaa.exe; bbb.exe; iagold.exe; msudpb.exe ; py.exe; zzb.exe.
- Dynamic Link Libraries: ieloader.dll; msudpb.dll.
- Directory/Search Page:
- Uninstall page URL:
- Related Articles: Important Removal Tool Note.
- Notes: Added by TrojanDownloader.Small.RR. Installs TrojanDialer.Freeload, which, according to Symantec, "is an ActiveX component that can be used by Web pages to download dialer programs. The dialer program may be used to access premium-rate services including pornographic and astrological services." See: How to Remove IELoader.
ILookUp ISearchTech.SideFind ISearchTech.YSB, YourSiteBar ISTBar, SideFind.
- Associated Worms/Trojans:
- Executable Files: gjefpet.exe; istdownload.exe; istrecover.exe; istsvc.exe; juhpad.exe; sfsetup.exe; sidefind.exe; srchupdt.exe.
- Dynamic Link Libraries: cmctl.dll; istactivex.dll; istbar.dll; istbarcm.dll; istbar_dh.dll; mscache.dll; sfbho.dll; sidefind.dll; sidefind13.dll; srchfst.dll; ysb.dll; ysbactivex.dll.
- Directory/Search Page:
- Uninstall page URL:
- Related Articles: How to Remove the ISearchTech Family; How to Remove YourSiteBar; How to Remove ISearchTech.SideFind; ISearchTech.SideFind Update (08-27-05); Important Removal Tool Note.
- Notes: According to the Spyware Information Center, this infection is also known as: Adware/SearchFast [Panda], Adware/SideFind [Panda], Spyware/ISTbar [Panda], Trojan Horse [Panda], TrojanDownloader.Win32.Istbar.eo, TrojanDownloader.Win32.IstBar.gen [Kaspersky]. This infection is spread by stealth downloads, generally from game and porn sites. Numerous variants are at large and some may not be removable by the removal tool referenced on this page. All variants use a corresponding variant of the TrojanDownloader.Win32.IstBar. ISTBar may download various other parasites while installed. These items may have to be removed separately. See: How to Remove the ISearchTech Family.
KeenValue, SearchUpgrader Toolbar
- Associated Worms/Trojans:
- Executable Files: SearchUpgrader.exe.
- Dynamic Link Libraries: bho.dll; pwrs0rbi.dll; IncFindBHO.dll.
- Directory/Search Page: http://www.searchupgrader.com/.
- Uninstall Page URL:
- Related Articles: Important Removal Tool Note.
- Notes: Some versions of these infections are also known as eUniverse (Ad-Aware), KeenValue (Mcafee), Euniverse (PestPatrol), PowerSearch (PestPatrol), eUniverse.IncrediFind (Spybot), KeenValue.PerfectNav (Spybot), Adware.Keenval (Symantec), SPYW_KEENVAL.A (Trend Micro). See: How to Remove KeenValue.
Mirar Toolbar
MySearchBar, MyWay Speed Bar, MyWebSearch
- Associated Worms/Trojans:
- Executable Files: hbinst.exe; s4bareq.exe; s42ns.exe; mwsoemon.exe; my2ns.exe; mysetp.exe; mysetup1.exe; websearch1.exe.
- Dynamic Link Libraries: f3htmlmu.dll; hbhostie.dll; msiehobj.dll; mybar.dll; mypopswt.dll; mysrchas.dll; mwsbar.dll; mwsoestb.dll; mwssrcas.dll; npmyway.dll; s4bar.dll; w6bar.dll.
- Directory/Search Page: http://www.mysearch.com/jsp/home.jsp; http://bar.mywebsearch.com/menusearch.
- Uninstall Page URL:
- Related Articles: None.
- Notes:
NavExcell Toolbar
- Associated Worms/Trojans:
- Executable Files:
- Dynamic Link Libraries:
- Directory/Search Page:
- Uninstall page URL:
- Related Articles:
- Notes:
NaviSearchnCase, Zango
- Associated Worms/Trojans:
- Executable Files: 180adsolution.exe; 180ax.exe; msbb.exe; saap.exe; saie.exe; sain.exe; sais.exe; salm.exe; zango.exe.
- Dynamic Link Libraries: 180adsolutionhook.dll ; 180axhook.dll; atpartners.dll; msbbhook.dll; ncmyb.dll; saaphook.dll; saiehook.dll; sainhook.dll; saishook.dll; zangohook.dll.
- Directory/Search Page:
- Uninstall page URL:
- Related Articles: Important Removal Tool Note.
- Notes: These items stealth install. See Spyware Information Center on Zango variant: "Based on eTrust PestPatrol Spyware Scorecard v2.05.03 Zango violates the following criteria: First, Installs itself or any other item without user permission or knowledge at time of installation...." See: How to Remove nCase, Zango.
Network Essentials, SmartPops
- Associated Worms/Trojans:
- Executable Files: launcher.exe; ne.exe; networkessentials.exe; rh.exe.
- Dynamic Link Libraries: me1.dll; ne.dll; networkessentials.dll.
- Directory/Search Page:
- Uninstall Page URL: http://www.smartpops.com/customersvc.html (vendor's manual removal instructions only).
- Related Articles: None.
- Notes: Uses trojan downloader. According to Spyware Information Center: "Gathers info on your browsing habits to display popup ads targeted at your interests. Info gathered includes: Username, Zip, Gender, Age, Country, Address, Email, LastName, FirstName, CPU Speed, OS Version, Memory, SubProvider, Provider, Providers, Download."
SearchBus
- Associated Worms/Trojans:
- Executable Files:
- Dynamic Link Libraries: sbus.dll.
- Directory/Search Page: http://www.searchbus.com/
- Uninstall page URL:
- Related Articles:
- Notes:
SearchForFree
- Associated Worms/Trojans:
- Executable Files: htmlsync.exe; icasserv.exe; isystem.exe; ldriver.exe; zlibc.exe.
- Dynamic Link Libraries: k6c40rvk.dll; rcj.dll.
- Directory/Search Page: http://www.searchforfree.info/.
- Uninstall page URL:
- Related Articles: HijackThis vs. SearchForFree (June 15, 2005); Important Removal Tool Note.
- Notes: The file "icasserv.exe" is the downloader for this infection and is a also known as the "icasserv-a trojan" (a.k.a. AdClicker-CM , TROJ_ICASERV.A, and Trojan-Clicker.Win32.Small.fd) . The file "nvdsvc32.exe" is associated with "icasserv.exe" and may be present. The most recent variant of this infection downloads the file "zlibc.exe" instead of "icasserv.exe". The file zlibc.exe indicates that the infection is being downloaded by the Troj/Chorus-A (a.k.a. AdClicker-CM and Trojan-Clicker.Win32.Small.ft ) as of late June 2005. As of early July 2005, it is not clear whether fixes for the "fd" version of the infection work for the "ft" version. See: How to Remove SearchForFree.
SearchHH, SearchMeUp, UmaxSearch, WhitePages SearchRelevancy
- Associated Worms/Trojans:
- Executable Files: ...searchrelevancy\uninstall.exe.
- Dynamic Link Libraries: searchrelevancy.dll.
- Directory/Search Page: None.
- Uninstall page URL:
- Related Articles: Important Removal Tool Note.
- Notes: According to DoxDesk, "SearchRelevancy is an Internet Explorer Browser Helper Object (BHO) that adds advertising links to search engine results pages as fake results. Clicking the links sends the browser to the listed site via a hidden redirect through searchbrowser.com which adds affiliate codes to the URL. " See: How to Remove SearchRelevancy.
small.gz
- Associated Worms/Trojans:
- Executable Files: desktopdancer[1].exe; setup.exe.
- Dynamic Link Libraries:
- Directory/Search Page:
- Uninstall page URL:
- Related Articles: Important Removal Tool Note.
- Notes: This trojan has recently been used to download SearchMiracle.EliteBar. See "How to Remove small.gz."
Sweetbar
- Associated Worms/Trojans:
- Executable Files: C:\Windows\System32\web.exe.
- Dynamic Link Libraries:
- Directory/Search Page: http://www.sweetbar.com/
- Uninstall page URL:
- Related Articles: None.
- Notes: Downloaded by Trojan.Anicmoo which utilizes Windows vulnerability described in Microsoft Security Bulletin MS05-002: "Cursor and Icon Format Handling Vulnerability - CAN-2004-1049: A remote code execution vulnerability exists in the way that cursor, animated cursor, and icon formats are handled. An attacker could try to exploit the vulnerability by constructing a malicious cursor or icon file that could potentially allow remote code execution if a user visited a malicious Web site or viewed a malicious e-mail message. An attacker who successfully exploited this vulnerability could take complete control of an affected system. " The trojan downloads the file "SecurityRisk.Downldr" which downloads "update.txt" which in turn downloads the Browser Helper Object (BHO) to connect to www.sweetbar.com.
VX2
- Associated Worms/Trojans:
- Executable Files: bios32.exe; boot.exe; f0e66c68.exe; hjfp.exe; infwin.exe.
- Dynamic Link Libraries: ablui.dll; akledit.dll; blowfish.dll; iehelper.dll; ktp6177s1.dll; multimpp.dll; rdfsaps.dll; vx2.dll.
- Directory/Search Page:
- Uninstall page URL:
- Related Articles: Important Removal Tool Note.
- Notes: The following aliases are listed at the Spyware Information Center page for this malware: Adware/MSView [Panda], Application/HideWindow.A [Panda], Application/Psexec.A [Panda], Application/ToolWget.A [Panda], Backdoor Program [Panda], Backdoor.Bionet.405 [Kaspersky], Backdoor.IRC.Zapchast [Kaspersky], Backdoor.IRC.Zcrew [Kaspersky], Backdoor/Bionet.405!Server [Computer Associates], Backdoor/IRC.Zcrew [Computer Associates], Backdoor/ZCrew.B [Computer Associates], Backdoor/ZCrew.B.IRC [Computer Associates], Backdoor/Zcrew.G [Computer Associates], BAT.IRCFlood [Computer Associates], BAT.Noshare.B [Computer Associates], Bat/Flood.C!Trojan [Computer Associates], Bck/IRC.Mirc.Based [Panda], Bck/Multi.I [Panda], Bck/Zcrew.B [Panda], Bck/Zcrew.G [Panda], Blackstone Data Transponder. Was also distributed under the name NetPal by netpalnow.com, but the software now available there is the newer NetPal parasite which isn't the same code., DoS.Win32.Nenet [Kaspersky], Flooder.Win32.WarPing [Kaspersky], Flooder/Nenet. A [Panda], IRC.Flood [Computer Associates], mIRC/Flood.I!Trojan [Computer Associates], mIRC/Flood.RmtCfg!Trojan [Computer Associates], NetPal, RemoteProcessLaunch [McAfee], Sputnik (name used by VX2), Spyware/BetterInet [Panda], Trj/Femad.A [Panda], Trj/Flood.BI [Panda], Trj/Passer.C [Panda], Trojan [Name used by Ad-aware], Trojan Horse [Panda], TrojanDownloader.Win32.Femad.b [Kaspersky], VX2 RespondMiter., VX2.Clean Get-Away, VX2.MSView, VX2.My PanicButton, VX2.Respondmiter, VX2.SiteHelper, VX2.Transponder, Win32.BettInet.C [Computer Associates], Win32.Bionet.405 [Computer Associates], Win32.Femad.A [Computer Associates], Win32.IRCFlood [Computer Associates], Win32.Startpage.KF!downloader [Computer Associates], Win32/Femad.B trojan [Eset], Win32/Rslocal.B!Downloader [Computer Associates], Win32/SillyDL.70656!Trojan [Computer Associates], Win32/Spybot.FR!Worm [Computer Associates], Win32/Startpage.KF!Downloader [Computer Associates]. See: How to Remove VX2.
VGS is in the process of compiling a Trojan and Worm Appendix to the Malware Identifier Index. At present the following trojans/worms (listed by one or more popular name or by key file shown in parentheses) are being investigated and a freeware or trialware removal tool has been found:
Trojans: AdClicker-H; Win32.Backdoor.AfCore; Win32.Agent.Trojan; TrojanDownloader.Win32.Agent.al; TrojanDownloader.Win32.Agent.an; TrojanDownloader.Win32.Agent.z; Trojan/Backdoor-BDD; Win32.TrojanSpy.Banker; Win32.Dasmin.B; Trojan/Dasmin-F; Win32.Delf.Trojan.A; Trojan/Dloader-AB; Trojan/Downloader-LO; Win32.Trojan.IEStartpage; Win32.Trojan.Krepper; Win32.TrojanDownloader.Lemmy; Win32.Mitglieder Trojan; Trojan.Poldo.B; Win32.Trojan.Post; Win32.Backdoor.RBot; Win32.Dialer.Saristar; Win32.Sced.Trojan; Win32.Small.Trojan; Win32.TrojanDownloader.Small; Win32.TrojanProxy.Small; Win32.Backdoor.Spyboter; Win32.TrojanDownloader.Swizzor.br.
Worms: Win32.Padobot; Win32.Sasser; Win32.Spybot.worm.
- The above malware items can be removed by Lavasoft's Ad-Aware freeware.
Trojans: Win32.Bagle.AV; Win32.Bagle.B; Win32.Bagle.C; Win32.Bagle.E; Win32.Bagle.F; Win32.Bagle.G; Win32.Bagle.H; Win32.Bagle.I; Win32.Bagle.J; Win32.Bagle.N; Win32/Crowt-A; Trojan/Win32.Hwbot-A; Trojan/Haxdoor-H; Trojan/Peper; Trojan/RS-Local-A; Win32.R-Bot; Trojan/Startpage-EH; Backdoor.VB.nb; TrojanDownloader.Win32.VB.q; Trojan/Webus-D; Trojan/Winser-A; Trojan/Zwax.
- The above malware items can be removed by SpyBot S&D.
Trojans: (installer_MEDIAWHIZ3.exe; installer_MARKETING10.exe; installer_MARKETING11.exe ) TrojanDownloader.Adload.a; (A0000090.exe ) TrojanDownloader.Apropo.r; (GLF6EGLF6E.EXE ) TrojanDownloader.TSUpdate.f; (61[1].bin ) TrojanDropper.Small.ul.
Trojans: Backdoor.Win32.Wootbot; Backdoor.Win32.Agobot; Backdoor.Win32.Forbot; Backdoor.Win32.Rbot; Worm.P2P.Spybot; Backdoor.Win32.IRCBot; Backdoor.Win32.SdBot; Backdoor.Win32.Poebot; Backdoor.Win32.Codbot.
Worms: I-Worm.BadtransII; Badtrans.B@mm; W32/Badtrans.B ; WORM_BADTRANS.B; W32/Badtrans-B; W32/Badtrans.B@mm; W32/BadTrans@MM; Win32.Badtrans.29020; Worm/Badtrans.B.
Worms: W32/Bagle.A@mm W32/Bagle.B@mm W32/Bagle.C@mm W32/Bagle.D@mm W32/Bagle.E@mm W32/Bagle.F@mm W32/Bagle.G@mm W32/Bagle.H@mm W32/Bagle.I@mm W32/Bagle.J@mm W32/Bagle.K@mm W32/Bagle.L@mm W32/Bagle.M@mm W32/Bagle.O@mm W32/Bagle.U@mm W32/Bagle.V@mm W32/Bagle.W@mm W32/Bagle.X@mm W32/Bagle.Y@mm W32/Bagle.Z@mm W32/Bagle.AL@mm W32/Bagle.AC W32/Bagle.AF@mm W32/Bagle.AH@mm W32/Bagle.AI@mm W32/Bagle.AN@mm W32/Bagle.AO@mm W32/Bagle.AT@mm W32/Bagle.AU@mm W32/Bagle.AV@mm ("test version") W32/Bagle.AX@mm W32/Bagle.AY@mm Email-Worm.Win32.Bagle.ba Email-Worm.Win32.Bagle.bb Email-Worm.Win32.Bagle.bc Email-Worm.Win32.Bagle.pac (1 variant).
Trojans: W32/Mitglieder.S W32/Mitglieder.T W32/Mitglieder.AA W32/Mitglieder.AJ W32/Mitglieder.AG W32/Mitglieder.AV.
Worms: W32/Bugbear.A; W32/Bugbear.B; (I-Worm.Tanatos.A); (I-Worm.Tanatos.B).
Trojans: Trojan.Win32.Killav.q.
Worms: Win32.Deborm.R; Backdoor.Litmus.203; W32/Litmus.C; Backdoor.SDbot.gen; W32/SDBot.J.
Labels: Adware/Malware
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
The following is a detail page of Virtual Grub Street's Adware & Malware Identifier Index: The information in the Adware & Malware Identifier Index is the result of thousands of web searches. It can not, however, possibly be complete. The subject is vast and constantly changing. Moreover, vendor uninstall tools and other removal tools do not necessarily remove all of an infection from your computer. Vendor uninstall tools, for instance, may silently leave cookies or other tracking software installed. It is suggestible to follow up a removal with one or more adware scans and/or to do an inspection using a HijackThis log. The information on the page is not guaranteed correct and any use you may choose to make of it is entirely at your own risk. ISTBar, SideFind
- Associated Worms/Trojans: W32.IST [Panda]; Win32.IstBar.ap; Win32.IstBar.bp; Win32.IstBar.bm; Win32.Istbar.bo; Win32.Istbar.bu; Win32.Istbar.bx; Win32/IstBar.ce [Computer Associates]; W32/Istbar.CK@dl [F-Prot]; Win32.Istbar.cl; Win32.Istbar.dh; Win32.Istbar.dr; Win32.IstBar.e [Kaspersky]; Win32.Istbar.eo; Win32.IstBar.gen [Kaspersky]; Win32.IstBar.gu [Kaspersky]; Win32.IstBar.i; W32/Istbar.MY [NORMAN]; Win32.IstBar.p[Kaspersky]; Win32.Istbar.u; Win32/PMagic.A [Computer Associates].
- Executable Files: l9lecc.exe; istsvc[1].exe; bb.exe; bundlernetscape.exe; crack.exe; dust.exe; games.exe; iinstall.exe; iinstall19866.exe; installs.exe; ist.exe; ist1.exe; istdownload.exe; istinstall_154074.exe; istinstall_netscape.exe; optimize.exe; scan.exe; penmzp.exe; sidefind.exe; srcle32.exe; ssdbkup.exe; start.exe; uveu42at.exe; ymhfvu.exe.
- Dynamic Link Libraries: acsproxy.dll; cmctl.dll; flashplayer.dll; fwntoolbar.dll; gzlib.dll; istbar.dll; imgconv.dll; intrigue.dll; istactivex.dll; istbar_mainstream[1].dll; istbarcm.dll; lhqibp.dll; mediaaccc.dll; nem218.dll; sfbho.dll; sidefind.dll; srchbar.dll; vic32.dll; ysbactivex.dll.
- Directory/Search Page:
- Uninstall page URL:
- Related Articles: Fighting Malware with Standard Windows Tools (February 25, 2007). You may have more in your bag of tricks than you realize. How to Remove ISearchTech.SideFind; ISearchTech.SideFind Update (08-27-05); How to Remove YourSiteBar; Important Removal Tool Note.
- Notes: According to the Spyware Information Center, this infection is also known as: "DownloadPlus and SearchBarCash-Hijacker. ISTbar/MSCache is also known as MSUpdates\MSCache., Trj/W32.IST[Panda], TrojanDownloader.Win32.IstBar.e[Kaspersky], Spyware/ISTbar[Panda], TrojanDownloader.Win32.IstBar.p[Kaspersky], Trojan Horse[Panda], Adware/nCase[Panda], Win32/IstBar.ce!Downloader[Computer Associates], TrojanDownloader.Win32.IstBar.t[Kaspersky], Win32/PMagic.A!Trojan[Computer Associates], TrojanDownloader.Win32.IstBar.p, actalert.exe, W32/Istbar.CK@dl [F-Prot], Trojan-Downloader.Win32.IstBar.gu [Kaspersky], Adware-ISTbar [McAfee], W32/Istbar.MY [NORMAN]". All variants use a corresponding variant of the TrojanDownloader.Win32.IstBar. ISTBar may download various other parasites while installed. These items may have to be removed separately.
- Most versions of this infection can now be removed by using Spybot S&D.
VGS encourages you to post comments about the service it offers, and, in particular, about your experiences with the removal tools suggested in its pages. Removal tool comments will be most effective in helping those who come after you if you post them to the individual detail page for the malware item you used the tool to remove. Please be as clear and as detailed as possible. The most effective comments might include such information as: 1) What browser and operating system you are are running on your computer (i.e. Windows 98, NT, XP, Linux, Internet Explorer 6.0, Firefox); 2) What updates are installed (i.e. SP1, SP2); 3) What anti-virus/malware package(s) are resident in your computer; and 4) the actions you took in the order you took them. Labels: Adware/Malware, ISearchTech
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
or How to Remove SearchMiracle/EliteBar (Alt. 1, Rev. 3) Giancarlo Calo, over at SimplyTech.it, remains aggressive with his freeware Elite Toolbar Remover. Among the infections it claims its version V.2.0.0 can remove "every trace" of are the following. The items highlighted in red are linked to Virtual Grub Streets's "How to Remove/Detailed Information" pages: EliteBar; EliteToolbar; EliteSidebar; BargainBuddy; Browser Aid; CashToolbar; FreshBar; GameSpy; MoneyTree; Nail.exe; NaviSearch; navpsrvc.exe (also known as: W32/Forbot-EF, worm); SearchMeUp; SideStep; Spybot - Randex; SupportSoft; SurfSideKick; Win32.RBot; Winmon.exe (also known as: W32/Agobot-KA, trojan); WinMoviePlugIn; and [InternetExplorer Plugin].
The "How to Remove" detail pages for SearchMiracle/EliteBar consist of the articles regularly posted at VGS. The file information for EliteBar is located on the Adware & Malware Indentifier Index itself. Further detail pages will be added on a continuing basis.
Simply Tech's description of the reason why SearchMiracle/EliteBar is so difficult to remove verifies the information in the various Virtual Grub Street articles over the past months:
Actually some software like [SpyBot S&D] v.1.3, CWShredder v.2.12, Noadware, [Ad-Aware] v.6, SpyNuker 2004 and SBC Yahoo! Anti-spy have no success in deleting this very frustrating malware. These programs find and delete it, but it keeps coming back since this new variant is very difficult to remove from the operating system.
The main problem is that the malware creates a lot of registry entries and executes at PC startup, winding itself into RAM and deletes its own *.exe from the C:\Windows\System32 directory.
When ordinary tools try to remove it, they only clean the registry calls, the C:\Windows\EliteToolbar directory and the cabinets files where it originated from, but they don't take any action against the malware itself that is currently running in RAM and waiting for the PC OS to be shut down only to repeat the infestation once again! This is now well known to be a trick that the newer adware and malware products are widely copying. Perhaps this is the reason that the Elitebar Removal Tool has added so many products to the list of infections it removes. It is certainly the reason that most HijackThis and manual removal instructions direct the user to do file deletions while in Safe Mode. Giancarlo describes the new feature specific to Version 2.0.0 as follows:
An [h]euristhic search done with commercial antivirus programs (like Norton AntiVirus and McAfee Virus Scan) gave some FALSE POSITIVE messages when they opened the ETRemover_V130.exe and ETRemover_V131.exe files....
The new version 2.0.1 (and the previous beta V.2.0.0) overcomes to this problem by using an external ETRDEF.DAT file wich contains the definitions of all the malwares, virus, trojans and the Registry keys scanned by the program to clean the infected pc.
The new version has also added InternetExplorer Plugin to the list of infections it claims to remove. Otherwise, the removal tool would seem to be unchanged. Also see:
- LQfix Information Page (October 15, 2005) There's a new tool in town!
- How to Remove PokaPoka. (October 12, 2005) Does your EliteBar variant include PokaPoka.exe?
- EliteBar Removal Tool Updates to 2.0.1. (September 21, 2005) The EliteBar Removal Tool now comes in two flavors and two generations!
- SearchMiracle.EliteBar Then and Now (September 20, 2005).
- More on Variant ADW_ELITEBAR.D. (May 27, 2005). "It is a standard XP with two top-end commercial anti-virus programs. Moreover, one of the anti-virus programs -- Trend Micro's PC-Cillin -- we already know..."
- Diabolical new EliteBar variant Strikes the Web!!!! or the one the EliteBar Removal Tool can't remove (May 22, 2005).
- EliteBar Removal Tool Updates to 1.3.0!!!!!or How to Remove SearchMiracle/EliteBar (Alt. 1, Rev. 2)
- Key File Index (May 18, 2005).
- Adware & Malware Identifier Index (May 9, 2005). "The following is an in-progress index of some of the more common malware toolbars/browser helper objects at large on the Internet."
- Is Google Associated with a SearchMiracle Knock-Off? (April 27, 2005). "A question begs the asking: How does NetNucleus generate revenue from its Mirar Toolbar search directory if it enters search terms in the Google Search Engine?"
- HijackThis vs. the Elitebar Removal Tool (April 23, 2005). "While this approach may provide some limited, and temporary, relief, SearchMiracle will soon be back in full force."
- EliteBar Removal Tool Alert: Update V.1.2.2.!!! (April 18, 2005). "The new variants of the malware also completely conceal the presence of the EliteToolbarRemoverV10.exe, so that if you are opening the archive you can only see the readme.doc file that is attached to that and you cannot see the *.exe even if though it is really there!"
- HijackThis vs. SearchMiracle/EliteBar (April 11, 2005).
- How to Remove SearchMiracle/ EliteBar (February 27, 2005).
- Online Bibliography (Regularly updated). A bibliography of Gilbert Wesley Purdy's work on the Web and elsewhere including computer topics.
[re: SearchMiracle.EliteBar Search Miracle Elite Bar EliteToolBar Elitum Elite Toolbar Elite Tool Bar ETBrun YupSearch Yup Search.] Labels: Freeware/Trialware
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
The following is a detail page of Virtual Grub Street's Adware & Malware Identifier Index:
The information in the Adware & Malware Identifier Index is the result of thousands of web searches. It can not, however, possibly be complete. The subject is vast and constantly changing. Moreover, vendor uninstall tools and other removal tools do not necessarily remove all of an infection from your computer. Vendor uninstall tools, for instance, may silently leave cookies or other tracking software installed. It is suggestible to follow up a removal with one or more adware scans and/or to do an inspection using a HijackThis log. The information on the page is not guaranteed correct and any use you may choose to make of it is entirely at your own risk. small.gz
- Executable Files: desktopdancer[1].exe; setup.exe.
- Dynamic Link Libraries:
- Directory/Search Page:
- Uninstall page URL:
- Related Articles: Fighting Malware with Standard Windows Tools (February 25, 2007). You may have more in your bag of tricks than you realize. Important Removal Tool Note.
- Notes: This trojan has recently been used to download SearchMiracle.EliteBar. I have personally found, on one occasion, that Panda detected but did not remove the small.gz trojan but there are reports that this infection can now be removed using Panda's Free Online Scan.
VGS encourages you to post comments about the service it offers, and, in particular, about your experiences with the free removal tools suggested in its pages. Removal tool comments will be most effective in helping those who come after you if you post them to the individual detail page for the malware item you used the tool to remove. Please be as clear and as detailed as possible. The most effective comments might include such information as: 1) What browser and operating system you are are running on your computer (i.e. Windows 98, NT, XP, Linux, Internet Explorer 6.0, Firefox); 2) What updates are installed (i.e. SP1, SP2); 3) What anti-virus/malware package(s) are resident in your computer; and 4) the actions you took in the order you took them. Labels: Adware/Malware
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
The following is a detail page of Virtual Grub Street's Adware & Malware Identifier Index:
The information in the Adware & Malware Identifier Index is the result of thousands of web searches. It can not, however, possibly be complete. The subject is vast and constantly changing. Moreover, vendor uninstall tools and other removal tools do not necessarily remove all of an infection from your computer. Vendor uninstall tools, for instance, may silently leave cookies or other tracking software installed. It is suggestible to follow up a removal with one or more adware scans and/or to do an inspection using a HijackThis log. The information on the page is not guaranteed correct and any use you may choose to make of it is entirely at your own risk.
downloader.bjg
VGS encourages you to post comments about the service it offers, and, in particular, about your experiences with the free removal tools suggested in its pages. Removal tool comments will be most effective in helping those who come after you if you post them to the individual detail page for the malware item you used the tool to remove. Please be as clear and as detailed as possible. The most effective comments might include such information as: 1) What browser and operating system you are are running on your computer (i.e. Windows 98, NT, XP, Linux, Internet Explorer 6.0, Firefox); 2) What updates are installed (i.e. SP1, SP2); 3) What anti-virus/malware package(s) are resident in your computer; and 4) the actions you took in the order you took them.
Labels: Adware/Malware
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
The following is a detail page of Virtual Grub Street's Adware & Malware Identifier Index: The information in the Adware & Malware Identifier Index is the result of thousands of web searches. It can not, however, possibly be complete. The subject is vast and constantly changing. Moreover, vendor uninstall tools and other removal tools do not necessarily remove all of an infection from your computer. Vendor uninstall tools, for instance, may silently leave cookies or other tracking software installed. It is suggestible to follow up a removal with one or more adware scans and/or to do an inspection using a HijackThis log. The information on the page is not guaranteed correct and any use you may choose to make of it is entirely at your own risk.
ISearchTech.YSB, YourSiteBar VGS encourages you to post comments about the service it offers, and, in particular, about your experiences with the removal tools suggested in its pages. Removal tool comments will be most effective in helping those who come after you if you post them to the individual detail page for the malware item you used the tool to remove. Please be as clear and as detailed as possible. The most effective comments might include such information as: 1) What browser and operating system you are are running on your computer (i.e. Windows 98, NT, XP, Linux, Internet Explorer 6.0, Firefox); 2) What updates are installed (i.e. SP1, SP2); 3) What anti-virus/malware package(s) are resident in your computer Labels: Adware/Malware, ISearchTech
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
Some few of readers may recall the article YupSearch Addendum posted in VGS's pages this past March 18th. Of course, seven months ago is ancient history on the Internet (and especially ancient in matters of adware and malware). I had since noticed, in passing, that there seemed to have been some changes in how that search engine front-page was being employed. I promised myself to set aside some time, eventually, in order to check out the new version and have discovered a few items to pass along. To recap, very briefly, a key point from the Addendum:
YupSearch... detects when "404" pages ("page not found") load up into the browser and redirects the browser to the base search engine in their place.
The original YupSearch was a redirect target only. It had no toolbar of its own. That ended with the EliteSideBar version of the EliteBar infection (a.k.a. adw_elitebar.b). The EliteSideBar opens on left side of screen with numerous entries from the YupSearch front-page rather than from Searchmiracle. Or at least at first, for the EliteSideBar is programmed to download the full-bore Elite ToolBar after the SideBar is installed. If the download is successful, an Elite***32.exe or Kalv***32.exe file is installed and the file InprocServer32 and the YupSearch hijack target are deleted. Thus:
EliteSideBar 08dll + InprocServer32 = the adw_elitebar.b version of YupSearch
or perhaps better put:
EliteSideBar 08dll + Nothing = YupSearch (EliteBar.b version).
Correspondingly:
EliteSideBar 08dll + elite***32.exe (or kalv***32.exe) = EliteSideBar with a YupSearch redirect
and the user (or technician) will find a HijackThis (or other) entry for the SearchMiracle front-page as hijacker target. The EliteSideBar, however, with its EliteSideBar 08dll and InprocServer32, seems not to have been a very effective variant of EliteBar. It has been all but abandoned for another trojan downloader the name of which has since become infamous: PokaPoka**.exe. The scheme is the same:
PokaPoka + Nothing = YupSearch
Correspondingly:
PokaPoka.exe + Elite***32.exe = EliteBar with a YupSearch redirect..
Once Elite***.exe is downloaded, the YupSearch hijacker target is deleted and the SearchMiracle hijacker installed. The YupSearch front-page target now only appears, if it appears at all, on special redirects, the most common being redirects away from 404 ("page not found") pages. The reason I refer to SearchMiracle and YupSearch "front-pages" rather than "search engines" is explained in YupSearch Addendum. Also See:
- Elite Toolbar Remover Information Page (October 17, 2005).
- LQfix Information Page (October 15, 2005) There's a new tool in town!
- How to Remove PokaPoka. (October 12, 2005) Does your EliteBar variant include PokaPoka.exe?
- EliteBar Removal Tool Updates to 2.0.1. (September 21, 2005) The EliteBar Removal Tool now comes in two flavors and two generations!
- SearchMiracle.EliteBar Then and Now (September 21, 2005). Hijacks, heroes, updates and links.
- EliteBar Removal Tool Updates to 2.0.0!!!!! (September 15, 2005). Includes expanded list of infections removed by the removal tool.
- More on Variant ADW_ELITEBAR.D. (May 27, 2005). "It is a standard XP with two top-end commercial anti-virus programs. Moreover, one of the anti-virus programs -- Trend Micro's PC-Cillin -- we already know..."
- Diabolical new EliteBar variant Strikes the Web!!!! or the one the EliteBar Removal Tool can't remove (May 22, 2005).
- EliteBar Removal Tool Updates to 1.3.0!!!!! (May 20, 2005). Includes expanded list of infections removed by the removal tool.
- Adware & Malware Identifier Index (updated regularly). "The following is an in-progress index of some of the more common malware toolbars/browser helper objects at large on the Internet."
- Is Google Associated with a SearchMiracle Knock-Off? (April 27, 2005) "A question begs the asking: How does NetNucleus generate revenue from its Mirar Toolbar search directory if it enters search terms in the Google Search Engine?"
- EliteBar Removal Tool Alert: Update V.1.2.2.!!! (April 18, 2005). "The new variants of the malware also completely conceal the presence of the EliteToolbarRemoverV10.exe, so that if you are opening the archive you can only see the readme.doc file that is attached to that and you cannot see the *.exe even if though it is really there!"
- HijackThis vs. SearchMiracle/EliteBar (April 11, 2005).
- YupSearch Addendum (March 18, 2005).
- Audio Seek Alert (March 18, 2005).
- How to Remove SearchMiracle/ EliteBar (February 27, 2005).
- Online Bibliography (Regularly updated). A bibliography of Gilbert Wesley Purdy's work on the Web and elsewhere including computer topics.
[re: SearchMiracle.EliteBar Search Miracle Elite Bar EliteToolBar Elite Toolbar Elite Tool Bar Elitum ETBrun YupSearch Yup Search.] Labels: Adware/Malware, SearchMiracle/EliteBar
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
The following is a detail page of Virtual Grub Street's Adware & Malware Identifier Index:
The information in the Adware & Malware Identifier Index is the result of thousands of web searches. It can not, however, possibly be complete. The subject is vast and constantly changing. Moreover, vendor uninstall tools and other removal tools do not necessarily remove all of an infection from your computer. Vendor uninstall tools, for instance, may silently leave cookies or other tracking software installed. It is suggestible to follow up a removal with one or more adware scans and/or to do an inspection using a HijackThis log. The information on the page is not guaranteed correct and any use you may choose to make of it is entirely at your own risk. EliteBar Toolbar, EliteSideBar, Elitum, EM Toolbar, Enternet Media Toolbar; ETBRUN, LQ, PokaPoka, SearchMiracle, YupSearch
- Associated Worms/Trojans: Trojan.EliteBar.a [Ewido] (a.k.a. PokaPoka76.exe); small.gz; startpage.fk (a.k.a. startpage.nk, temperror32.dat); startpage.sj.
- Executable Files: O4 - HKLM\..\Run: [etbrun] c:\windows\system32\elite***32.exe; eliteabu32.exe; elitebhi32.exe; elitebyj32.exe; elitecfh32.exe; eliteckj32.exe; elitecla32.exe; elitecxw32.exe; elitedbt32.exe; elitedph32.exe; elitednv32.exe; eliteetx32.exe; eliteeys32.exe; elitefmj32.exe; elitefyb32.exe; elitegdp32.exe; elitehaf32.exe; elitehln32.exe; elitehxt32.exe; eliteine32.exe; eliteizj32.exe; elitejhs32.exe; elitejko32.exe; elitekck32.exe; elitekpi32.exe; elitekyk32.exe; elitelaj32.exe; elitelfv32.exe; elitelgy32.exe; elitelhg32.exe; elitemoa32.exe; elitemol32.exe; elitemuc32.exe; elitenii32.exe; elitenne32.exe; elitenrz32.exe; eliteoey32.exe; eliteosm32.exe; eliteoxx32.exe; eliteozz32.exe; elitepam32.exe; elitepdt32.exe; eliteptl32.exe; elitepye32.exe; elitepys32.exe; elitervh32.exe; eliterwr32.exe; eliteuej32.exe; eliteutt32.exe; eliteuzz32.exe; elitevaj32.exe; elitewfu32.exe; elitewjf32.exe; elitewug32.exe; elitewvn32.exe; elitevba32.exe; elitevji32.exe; elitexdk32.exe; elitexiy32.exe; elitexlp32.exe; elitexxe32.exe; elitexyi32.exe; eliteyif32.exe; elitezgx32.exe; elitezvo32.exe; elitezwk32.exe; etc. C:\windows\system32\kalv***32.exe; pokapoka**.exe; pokapoka62.exe; pokapoka65.exe; pokapoka66.exe; pokapoka67.exe; pokapoka68.exe; pokapoka70.exe; pokapoka75.exe; pokapoka76.exe; sideb.exe.
- Dynamic Link Libraries:EliteBar version 50.dll; Elites~1.dll; EliteSideBar 07.dll; EliteSideBar 08.dll (a.k.a. EliteBar.b); EliteToolBar version 53.dll; nt_hide76.dll; etc.
- Directory/Search Page: http://www.24-7searching-and-more.com/sp2.php; http://www.the818search-co.com/; http://www.audioseek.net/; http://www.myseachexplorer.com/; http://ad1.searchmiracle.com/; http://searchmiracle.com/; http://www.searchmiracle.com/; http://www.xosearchox.com/; http://www.yupsearch.com/search.php; http://yupsearch.com/sb.php, etc..
- Uninstall Page URL: Direct download link/file from search directory pages. An uninstall file is also downloaded along with the infection but is reputed to be ineffective.
- Related Articles: Fighting Malware with Standard Windows Tools (February 25, 2007). You may have more in your bag of tricks than you realize. EliteBarfix.bat Information Page (October 20, 2005); PokaPoka.exe + Nothing = YupSearch (October 19, 2005); Elite Toolbar Remover Information Page (October 17, 2005); LQfix Information Page (October 15, 2005); EliteBar Removal Tool Updates to 2.0.1 (September 21, 2005); SearchMiracle.EliteBar Then and Now (September 20, 2005); More on Variant ADW_ELITEBAR.D.(May 27, 2005); Diabolical New EliteBar Variant Strikes the Web!!!! (May 22, 2005); EliteBar Removal Tool Updates to 1.3.0!!!!! (May 20, 2005); HijackThis vs. the Elitebar Removal Tool (April 23, 2005); EliteBar Removal Tool Alert: Update V.1.2.2.!!! (April 18, 2005); HijackThis vs. SearchMiracle/EliteBar (April 11, 2005); How to Remove SearchMiracle/ EliteBar (February 27, 2005, historical version); Important Removal Tool Note.
- Notes: Automatically reinstalls upon removal. The EliteBar Removal Tool can not remove the variant adw_elitebar.d. See Diabolical New EliteBar Variant Strikes the Web!!!! and More on Variant ADW_ELITEBAR.D for further details.
- SearchMiracle.EliteBar can be removed by SimplyTech's Elite Toolbar Remover and Miekiemoes's LQfix. Not all PokaPoka trojan files can be removed by these tools.
- Associated trojan files (including PokaPoka76.exe) can be removed by the Ewido Security Suite trialware. It is suggested that the user follow up the Security Suite with either the Elite Toolbar Remover or LQfix in order to remove remaining files of the infection.
- Some key files can be removed in Safe Mode with Tech Support Guy's EliteBarfix.bat.
VGS encourages you to post comments about the service it offers, and, in particular, about your experiences with the removal tools suggested in its pages. Removal tool comments will be most effective in helping those who come after you if you post them to the individual detail page for the malware item you used the tool to remove. Please be as clear and as detailed as possible. The most effective comments might include such information as: 1) What browser and operating system you are are running on your computer (i.e. Windows 98, NT, XP, Linux, Internet Explorer 6.0, Firefox); 2) What updates are installed (i.e. SP1, SP2); 3) What anti-virus/malware package(s) are resident in your computer; and 4) the actions you took in the order you took them.
Labels: Adware/Malware, SearchMiracle/EliteBar
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
The following articles on SearchMiracle.EliteBar [Search Miracle Elite Bar] are presently in Virtual Grub Street's archives. They form one of the better "libraries" on the subject on the net. How to Remove SearchMiracle.EliteBar SearchMiracle's regularly updated "How to Remove..." detail page. EliteBarfix.bat Information Page. Yet another new removal tool, sort of. PokaPoka.exe + Nothing = YupSearch (October 19, 2005) What do people mean when they say they have "YupSearch" instead of "EliteBar"? LQfix Information Page. There's a new tool in town! Miekiemoes seems to be everywhere on the tech web these days and now she has created a tool to remove the dreaded SearchMiracle.EliteBar. Elite Toolbar Remover Information Page. An dependable old friend still going strong. But does it remove PokaPoka76.exe? How to Remove PokaPoka. Does your EliteBar variant include PokaPoka.exe? EliteBar Removal Tool Updates to 2.0.1 In addition to the removal tool update VGS announced in the recent article EliteBar Removal Tool Updates to V.2.0.0!!!!!, SimplyTech.it has added yet another feature.... EliteBar Removal Tool Updates to V.2.0.0!!!!! Giancarlo Calo, over at SimplyTech.it, remains aggressive with his freeware EliteBar Removal Tool. Among the infections it claims its version V.2.0.0 can remove "every trace" of are... More on Variant ADW_ELITEBAR.D A March 2005 forum thread at Midtown Computer Systems Enterprise provides more detail on ADW_ELITEBAR.D . It's a bit garbled, though: intertwined with discussions about how malware gets installed on computers and about the relative merits of Firefox compared to Internet Explorer. But some things are clarified... Diabolical new EliteBar Variant Strikes the Web!!!! Giancarlo Calo, of SimplyTech.it, freeware Baron of the Internet, by virtue of his EliteBar Removal Tool, reports that a new malware variant has appeared on the net that Trend Micro has designated... EliteBar Removal Tool Updates to 1.3.0!!!!! According to Calo, Trend Micro seems to have felt, at one point, that its commercial software could remove the infection but Simply Tech still found the malware intact ... HijackThis vs. the Elitebar Removal Tool While this approach may provide some limited, and temporary, relief, SearchMiracle will soon be back in full force. As [HijackThis] experts have generally discovered, the downloader for the infection detects, and, if necessary, reinstalls itself from RAM as Windows is closed. EliteBar Removal Tool Alert: Update V.1.2.2.!!! The thousands of people who are still flocking to the O.D. article How to Remove SearchMiracle/ EliteBar (also known as ETBRUN), and the scores of links to the various O.D. articles on SearchMiracle/EliteBar and related adware/spyware, make it clear... HijackThis vs. SearchMiracle/EliteBar Since the Enternet Media adware program SearchMiracle/EliteBar (also known as ETBRUN) has been at large on the net, logs of infected computers have begun to appear in profusion. Early on, the HijackThis faithful showed every confidence that their anti-spy program was up to the task of removing the pest. In the meantime, it has become clear that there are few HijackThis forum threads that end with the adware and its associated StartPage.sj trojan having been successfully removed. EliteBar By Any Other Name ...the variety of names under which one or another variation of tool bar is offered by Enternet Media, Inc. or its affiliates. AudioSeek Alert! The YupSearch front page now appears at a new url: http://www.audioseek.net/. That is to say,... YupSearch Addendum The search entries that generally bring people to O.D. would seem to make it clear that many fail to understand that YupSearch connects to the same adverstising search engine as SearchMiracle. It is merely SearchMiracle by another name. Both are front-pages for the base search engine which,... More "Elite Bar Adventures" Links and Info Popdex has just listed "Elite Bar Adventures" as their third most linked-to posting. I provide the short list:...
Who's keeping score? Well, the Arts/Litblog Obiter Dicta is ten days old now. Who would have thought it would already have had its first 550+ hit day and been listed in Blogdex as tied for 51st place, among all Internet blogs,... How to Remove SearchMiracle/ EliteBar (Alt. 1) The flag ship article of Virtual Grub Street's early fleet. Brief and to the points. More from the Mailbag: re StartPage.sj Next, many thanks to Timothy Klein for doing a bit of research of his own that I was not able to do. According to Timothy:
from looking at the source for the web-page in question, and downloading the Javascripts it downloads with wget and reading them, this is both specific to Windows AND Internet Explorer.
Unfortunately, Internet Explorer...
Elite Bar Adventures The next day again, I decided that the Norton/Symantec data file corruption was something I had to get around somehow. I decided to try another Free Virus Scan site and to see how the results compared. As luck would have it,... After "EliteBar Adventures" was linked-to by Metafilter and MSNBC, a quick succession of blogs and sites followed: MT Law; IT-Biztonzag; And I Am Not Lying, for Real; Legal Line; Look at this...; New Links; Privacy Digest; Blog Herald; La Coctelera; News Burst; and many more including one in Turkish and another in Japanese. In existence for less than a month, Virtual Grub Street (then called "Obiter Dicta") was an international pheeee-nom-men-ah. [re: SearchMiracle.EliteBar Search Miracle Elite Bar EliteToolBar Elitum Elite Toolbar Elite Tool Bar ETBrun YupSearch Yup Search.] Labels: Adware/Malware, SearchMiracle/EliteBar
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
Hurricane Wilma having passed, and electricity having returned, there should be time, here and there, to update VGS's pages on the ISearchTech family of software / adware / malware (the reader is invited to choose his or her own descriptive term). It has become clear, as the result of recent researches, that the subject is massive and a tangled mess. Even seperating the various s/a/m by name and key files presents nearly intractable problems. To make matters worse, VGS has just launched a new blog section for housekeeping and traffic-control purposes and the construction process must continue in parallel with the ISearchTech research.. This page is in-progess. Rather than link directly to individual ISearchTech product removal pages, I will link from the appropriate Adware & Malware Identifier Index entries to this step-off page where I wll attempt to clarify which files and chacteristics belong to which ISearchTech variant and to describe what freeware / trialware removal options may be available. The list of variants below indentifies the variants I have pursued to date or intend to pursue. Others may be added. The following is a detail page of Virtual Grub Street's Adware & Malware Identifier Index: The information in the Adware & Malware Identifier Index is the result of thousands of web searches. It can not, however, possibly be complete. The subject is vast and constantly changing. Moreover, vendor uninstall tools and other removal tools do not necessarily remove all of an infection from your computer. Vendor uninstall tools, for instance, may silently leave cookies or other tracking software installed. It is suggestible to follow up a removal with one or more adware scans and/or to do an inspection using a HijackThis log. The information on the page is not guaranteed correct and any use you may choose to make of it is entirely at your own risk. Those of the following ISearchTech family "How to Remove" pages that are actively linked, below, are presently available at Virtual Grub Street. Those pages without links are pending: Labels: Adware/Malware, ISearchTech
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
The following is a detail page of Virtual Grub Street's Adware & Malware Identifier Index: The information in the Adware & Malware Identifier Index is the result of thousands of web searches. It can not, however, possibly be complete. The subject is vast and constantly changing. Moreover, vendor uninstall tools and other removal tools do not necessarily remove all of an infection from your computer. Vendor uninstall tools, for instance, may silently leave cookies or other tracking software installed. It is suggestible to follow up a removal with one or more adware scans and/or to do an inspection using a HijackThis log. The information on the page is not guaranteed correct and any use you may choose to make of it is entirely at your own risk. ISTBar, SideFind
- Associated Worms/Trojans: W32.IST [Panda]; Win32.IstBar.ap; Win32.IstBar.bp; Win32.IstBar.bm; Win32.Istbar.bo; Win32.Istbar.bu; Win32.Istbar.bx; Win32/IstBar.ce [Computer Associates]; W32/Istbar.CK@dl [F-Prot]; Win32.Istbar.cl; Win32.Istbar.dh; Win32.Istbar.dr; Win32.IstBar.e [Kaspersky]; Win32.Istbar.eo; Win32.IstBar.gen [Kaspersky]; Win32.IstBar.gu [Kaspersky]; Win32.IstBar.i; W32/Istbar.MY [NORMAN]; Win32.IstBar.p[Kaspersky]; Win32.Istbar.u; Win32/PMagic.A [Computer Associates].
- Executable Files: l9lecc.exe; istsvc[1].exe; bb.exe; bundlernetscape.exe; crack.exe; dust.exe; games.exe; iinstall.exe; iinstall19866.exe; installs.exe; ist.exe; ist1.exe; istdownload.exe; istinstall_154074.exe; istinstall_netscape.exe; optimize.exe; scan.exe; penmzp.exe; sidefind.exe; srcle32.exe; ssdbkup.exe; start.exe; uveu42at.exe; ymhfvu.exe.
- Dynamic Link Libraries: acsproxy.dll; cmctl.dll; flashplayer.dll; fwntoolbar.dll; gzlib.dll; istbar.dll; imgconv.dll; intrigue.dll; istactivex.dll; istbar_mainstream[1].dll; istbarcm.dll; lhqibp.dll; mediaaccc.dll; nem218.dll; sfbho.dll; sidefind.dll; srchbar.dll; vic32.dll; ysbactivex.dll.
- Directory/Search Page:
- Uninstall page URL:
- Related Articles: Fighting Malware with Standard Windows Tools (February 25, 2007). You may have more in your bag of tricks than you realize. How to Remove ISearchTech.SideFind; ISearchTech.SideFind Update (08-27-05); How to Remove YourSiteBar; Important Removal Tool Note.
- Notes: According to the Spyware Information Center, this infection is also known as: "DownloadPlus and SearchBarCash-Hijacker. ISTbar/MSCache is also known as MSUpdates\MSCache., Trj/W32.IST[Panda], TrojanDownloader.Win32.IstBar.e[Kaspersky], Spyware/ISTbar[Panda], TrojanDownloader.Win32.IstBar.p[Kaspersky], Trojan Horse[Panda], Adware/nCase[Panda], Win32/IstBar.ce!Downloader[Computer Associates], TrojanDownloader.Win32.IstBar.t[Kaspersky], Win32/PMagic.A!Trojan[Computer Associates], TrojanDownloader.Win32.IstBar.p, actalert.exe, W32/Istbar.CK@dl [F-Prot], Trojan-Downloader.Win32.IstBar.gu [Kaspersky], Adware-ISTbar [McAfee], W32/Istbar.MY [NORMAN]". All variants use a corresponding variant of the TrojanDownloader.Win32.IstBar. ISTBar may download various other parasites while installed. These items may have to be removed separately.
- This infection can be removed by Ewido Security Suite.
- Early versions of this infection can be removed by Lavasoft's Ad-Aware freeware.
VGS encourages you to post comments about the service it offers, and, in particular, about your experiences with the removal tools suggested in its pages. Removal tool comments will be most effective in helping those who come after you if you post them to the individual detail page for the malware item you used the tool to remove. Please be as clear and as detailed as possible. The most effective comments might include such information as: 1) What browser and operating system you are are running on your computer (i.e. Windows 98, NT, XP, Linux, Internet Explorer 6.0, Firefox); 2) What updates are installed (i.e. SP1, SP2); 3) What anti-virus/malware package(s) are resident in your computer; and 4) the actions you took in the order you took them. Labels: Adware/Malware, ISearchTech
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
The information in Virtual Grub Street's computer postings is the result of thousands of web searches. It can not, however, possibly be complete. The subject is vast and constantly changing. Moreover, vendor uninstall tools and other freeware removal tools do not necessarily remove all of an infection from your computer. Vendor uninstall tools, for instance, may silently leave cookies or other tracking software installed. It is suggestible to follow up a removal with one or more adware scans and/or to do an inspection using a HijackThis log. The information on the page is not guaranteed correct and any use you may choose to make of it is entirely at your own risk.*
Intro: Ewido Security Suite is a trialware product to detect and remove trojans, worms, dialers, keyloggers, hijackers, spyware and other malware items. It is a product of GmbH & Co./Network Solutions. The company was recently formed by three German programmers in their early 20s. The user is provided "a free 14-day test version containing all the extensions of the plus-version will be activated. At the end of the test phase, the extensions of the plus version are deactivated and the freeware version can be used unlimited times."
Latest Version covered. 3.5. File Size. 6.32 MB. File Type. -- Most recent update. 3.5 (July 10, 2005). Compatible Operating Systems: Ewido Security Suite is compatible with Windows 2000 and XP operating systems only. vs. PokaPoka76.exe. Ewido Security Suite trialware can remove Trojan.EliteBar.a (a.k.a. pokapoka76.exe). It will not necessarily remove all files that may have been downloaded by (or in association with) the trojan (i.e. PokaPoka, YupSearch, SearchMiracle.EliteBar). Malware Items Removed: The following is a (very) partial list of infections that can be detected and removed by this software: 1150_0.dat (WebRebates); 1150_1.dat (WebRebates); 1150_2.dat (WebRebates); 180Pack6480.exe (TrojanDownloader.Small.asf); 3z5fjog7.exe (Backdoor.Ruledor.g); 459766_3608_1648_3684_69.41.tmp (Trojan.EliteBar.c); 66726_3608_1648_3820_69.41.tmp (Trojan.EliteBar.c); 876029.exe (SaveNow); 9svjash4.exe (SAHA); A0557305.DLL (MyWebSearch); A0557308.DLL (MyWebSearch); A0557316.DLL (Wesbar); A0558199.DLL (MySearchbar); A0558209.dll (ClearSearch); A0558211.dll (ClearSearch); A0558222.dll (ClearSearch); A0558225.exe (ClearSearch); A0559222.dll (ClearSearch); A0559225.exe (ClearSearch); A0559238.exe (ClearSearch); A0560238.exe (ClearSearch); A0567589.dll (SurfSide); A0567590.dll (TotalVelocity); A0567591.exe (TotalVelocity); A0567595.exe (NewDotNet); A0569590.dll (EliteBar); A0572979.dll (EliteBar); A0573008.dll (EliteBar); A0573009.dll (EliteBar); A0573279.DLL (TrojanDownloader.FunWeb.a); A0573288.exe (eZula); A0574822.dll (EliteBar); A0574829.dll (EliteBar); A0576643.dll (EliteBar); A0576671.dll (EliteBar); A0576672.dll (EliteBar); bargains.exe (BargainBuddy); casclient.exe (CASClient); CHCON.dll (eZula); clientax.dll (180Solutions); Del12.tmp (TrojanDownloader.Small.asf); djtopr1150.exe (WebRebates); DrPMon.dll (BetterInternet, Trojan.Agent.iw); eabh.dll (eZula); all EliteBar***32.exe files; i5E.tmp (SurfSide); Trojan.Imiserv.c; jkill.exe (VX2); MediaAccC.dll (WinAD); MediaAccessInstPack.exe (WinAD); mmod.exe (eZula); msbb321.dll (180solutions); MTE2ODM6ODoxNg.exe (ISearch); Nail.exe; shawn_1.dll (EliteBar); newdotnet6_38(2).dll (NewDotNet); NN_111.tmp (NewDotNet); nsj2E.dll (HotSearchBar); oqo3v30p.dll (SAHA); pokapoka76.exe (Trojan.EliteBar.a); powerscan.exe (PowerScan); ptf_0006.exe (Pacer); qool3.exe (TrojanDropper.Agent.hl); rcverlib[3].exe (Trojan.Pakes); res6E.tmp (180Solutions); SAcc.prod.v1110.07sep2005.exe[1] (SurfAccuracy); sacc_remove[1].exe (SurfAccuracy); seng.dll (eZula); sfbho13[1].dll (SideFind); sideb[1].exe (EliteBar); sidefind13[1].dll (SideFind); sst.dll (TrojanDownloader.Agent.mh); sst2.tmp (BetterInternet); stubinstaller5041[1].ex_ (TrojanDownloader.Small.asf); svcproc.exe (Trojan.Stervis.h); tm47653.exe (Trojan.Pakes); tmp293906.tmp (EliteBar); tmp423171.tmp (EliteBar); tmp452468.tmp (Win32.Morphine); unimt.exe (Purityscan.B); uninstall.exe (EliteBar); UNWISE.EXE (eZula); vtleaev.exe (Trojan.Agent.cp); xlmeev.exe (Trojan.Agent.cp); ysb[1].dll (YourSiteBar); !update-2524[1].0000 (TrojanDownloader.PurityScan.an). Notes: Ewido also offers a free Online Malware Scan for machines Windows 2000, Windows XP and above running Internet Explorer 5.0 or later with ActiveX enabled. The scan is presently in beta. Ewido Security suite is often used in conjuncton with other adware & malware removal tools in order to completely remove all vestiges of an adware/malware infection. Caution: Ewido is reputed to occasionally give "false positives".
Downloads. Ewido Security Suite can be downloaded from the following locations: It is suggested that the user visit Ewido's download page prior to downloading the setup.exe file. The following example instructions for Ewido Security Suite 3.5 appear at the DaniWeb forum: Download and install Ewido. Then run, you will receive a warning message saying "Database not found", click "OK" for this. Next in the main screen, click "Update" and click "Start Update". After the update process, click on the "Scanner" button in the left menu, then click on the "Complete System Scan" button. If ewido finds anything, it will pop up a notification. [S]elect "Clean" and check the boxes "Perform action with all infections" and "Create encrypted backup" before clicking on "OK". When the scan finishes, click on "Save Report". This will create a text file.
Other VGS Freeware/Trialware Information Pages:
Labels: Freeware/Trialware
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
The information in Virtual Grub Street's computer postings is the result of thousands of web searches. It can not, however, possibly be complete. The subject is vast and constantly changing. Moreover, vendor uninstall tools and other freeware removal tools do not necessarily remove all of an infection from your computer. Vendor uninstall tools, for instance, may silently leave cookies or other tracking software installed. It is suggestible to follow up a removal with one or more adware scans and/or to do an inspection using a HijackThis log. The information on the page is not guaranteed correct and any use you may choose to make of it is entirely at your own risk.
*
 Intro. HijackThis is a freeware browser hijacker detector created by Merijn Bellekom. Bellekom is the creator of numerous freeware programs available on the Internet. He is best known for the tremendously popular CWShredder and HijackThis programs. HijackThis does not detect hijackers from a definition list but rather by detecting key file and registry changes. The resulting scan log will provide information in the following categories: R - Registry, StartPage/SearchPage changes - R0 - Changed registry value
- R1 - Created registry value
- R2 - Created registry key
- R3 - Created extra registry value where only one should be
F - IniFiles, autoloading entries - F0 - Changed inifile value
- F1 - Created inifile value
- F2 - Changed inifile value, mapped to Registry
- F3 - Created inifile value, mapped to Registry
N - Netscape/Mozilla StartPage/SearchPage changes - N1 - Change in prefs.js of Netscape 4.x
- N2 - Change in prefs.js of Netscape 6
- N3 - Change in prefs.js of Netscape 7
- N4 - Change in prefs.js of Mozilla
 O - Other, several sections which represent: - O1 - Hijack of auto.search.msn.com with Hosts file
- O2 - Enumeration of existing MSIE BHO's
- O3 - Enumeration of existing MSIE toolbars
- O4 - Enumeration of suspicious autoloading Registry entries
- O5 - Blocking of loading Internet Options in Control Panel
- O6 - Disabling of 'Internet Options' Main tab with Policies
- O7 - Disabling of Regedit with Policies
- O8 - Extra MSIE context menu items
- O9 - Extra 'Tools' menuitems and buttons
- O10 - Breaking of Internet access by New.Net or WebHancer
- O11 - Extra options in MSIE 'Advanced' settings tab
- O12 - MSIE plugins for file extensions or MIME types
- O13 - Hijack of default URL prefixes
- O14 - Changing of IERESET.INF
- O15 - Trusted Zone Autoadd
- O16 - Download Program Files item
- O17 - Domain hijack
- O18 - Enumeration of existing protocols and filters
- O19 - User stylesheet hijack
- O20 - AppInit_DLLs autorun Registry value, Winlogon Notify Registry keys
- O21 - ShellServiceObjectDelayLoad (SSODL) autorun Registry key
- O22 - SharedTaskScheduler autorun Registry key
- O23 - Enumeration of NT Services
Considerable knowledge of computer registries, files and start-up processes is necessary in order to use this product safely. Most users consult online "HijackThis Forum Experts" for instructions as to what files/entries to delete. Misuse or uninformed use of this product can adversely effect the functional capability of the subject computer. Versions. -- HijackThis.exe
Latest Version Covered: February 16, 2005. File Size. HijackThis.zip: 206KB; HijackThis.exe: 213KB.
File Type. --
Most recent update. HijackThis 1.99.1: February 16, 2005. Compatible Operating Systems: -- Windows 95/98/ME/2000/XP. Compatible Browsers: -- Internet Explorer, Mozilla, Netscape 4.x-7.
Downloads. HijackThis can be downloaded from the following locations: Direct downloads are available as follows: A HijackThis tutorial is available at Spyware Info.
Other VGS Freeware/Trialware Information Pages: Labels: Freeware/Trialware
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
|
