I just purchased a used PC that has a program ELF_1.12.exe on it. It says it is suppose to be some sort of toolbar. I couldn't find any information using Norton Search but Google did direct me to BleepingComputers. I found where a poster questioned the same file, but didn't see a response from BleepingComputers. Google also listed a few sites where I could download an uninstaller. Would the add/remove program safely get rid of this Elf program, what ever it is?
NIS 2011, Malwarebytes and SuperAntiSpyware scans don't show any problems, so I don't know what the ELF program does.
I would suggest using add/remove first. It looks like one of those free nuisance toolbars. You may have to also delete it from searches via tools>add ons in IE8.
delphinium - After reading your post, I was going to go ahead and try clicking on add/remove and see if that program would go away. I then read floplot's post and I think I better do a little more investigating, before I try deleting that program which may just cause it to appear with a new name.
floplot - Thank you for the link. I went to the Symantec site, entered that name in the search block, but my search didn't return any information. Now it looks like Yaso found a whole lot of information, at the same site. I guess I'm going to have to improve my searching methods.
This afternoon I'll do some more investigating and look through the registry for more examples of that ELF file. So far I've just found it in the add/remove feature and there is also a folder called EFL. I guess I won't be putting that PC on my network, until I make sure it's clean. Like I said earlier, after scanning with NIS 2011, Malwarebytes' and SuperAntiSpyware, all scans came up clean. If Norton had all that information, from Yaso's link, a scan with 2011 should have showed ELF as malware.
The link I provided to Symantec was for you to send the file which you think is infected so that they can analyze it and add it to their definitions. Symantec doesn't know about this malware yet and I was hoping that you could send them that infected file and so they could add it to their product. The link provided is to send the possible infected files. Thanks
Malwarebytes and SAS do show adware whereas Norton does not so long as it is not infected. If all scans are coming up clean, and the ELF toolbar is now up to version 1.15, it would indicate to me that it is most likely a legitimate toolbar, albeit a nuisance toolbar as so many of them are. Some of them are quite sticky like the Kiwee toolbar from IM. I would still suggest removing it through add/remove.
delphinium - I used the add/remove option, to remove the elf_1.12 program. All traces of it seem to be gone, using the search feature didn't find any traces and the three scans are still clean. Even the browser option under VIEW and TOOLBARS, has removed the Elf_1.12 Toolbar option. Looks like your idea worked, thanks for the suggestion.
floplot - I went through a lot of those registry items and only found two entries under the local machine software. I hope my elf toolbar assistant program was different from the elf_1.12 malware data you found. Thanks for doing the search and finding that ThreatExpert information. Did that information come from the Symantec Web Site?
Conduit.com provides the basis and tools for users to make their own community toolbar with choices for assorted apps. You will note at the bottom of the page linked above, "Powered by Conduit" Both, the ourtoolbar site and Conduit test safe by Norton safe web.
January 1, 2011 Conduit entered into a partnership with Microsoft to enhance Bing.
Conduit is most popular community toolbar making site,people create own toolbar their, and also i check virustotal report with version 1.12 & 1.15.both are clean
I too have the Elf 1.15 Toolbar and cannot get rid of it on the uninstall programmes. Worried that it is a malicious programme!
I am a relative newbie to PCs so any simple information to get rid of it on Vista would be helpful? I have Norton 360 Version 4 and constantly scan to make sure that all is OK. Please help.
MadHatter56 - I don't have Vista so I can't help you exactly. I am running Windows XP and all I did was to go to the "Control Panel" and opened an option "Add or Remove Programs". I then clicked on "Change or Remove Programs" and scrolled down the list. I found a listing for Elf_1.12 (maybe Elf_1.15 is different) and clicked on the remove option. It removed the program and I then ran scans with NIS 2011, Malwarebytes' and SuperAntiSpyware (Free editions of MWB and SAS) and everything came up clean. I don't know how different Vista works.
