Description

ILookup is an IE toolbar providing a search box and link buttons. It also adds bookmarks to the Favorites menu (mostly affiliate links) and hijacks the homepage, address bar search and sidebar search.

Variants

  • ILookup/Ineb is implemented by the file ineb.dll and connects to the site i-lookup.com.
  • ILookup/Gws is implemented by the file gws.dll and connects to the site globalwebsearch.com.
  • ILookup/Chgrgs is implemented by the file chgrgs.dll.
  • ILookup/Abeb is implemented by the file abeb.dll and connects to the site superwebsearch.com.
  • ILookup/Bmeb is implemented by the file bmeb.dll and connects to the site traffichog.com.
  • ILookup/Sbus is implemented by the file sbus.dll and connects to the site searchbus.com.
  • ILookup/Drbr is implemented by the file drbr.dll and connects to the site globaltoolbar.com.

Distribution

Installed by ActiveX drive-by-download, thought to be used on pop-ups.

What it does

Advertising

Yes. Periodically connects to its controlling server, which may direct it to open pop-up advertising, often porn-related.

Privacy violation

No.

Security issues

None known.

Stability problems

At least the Ineb and Drbr variants (possibly the others too) can cause error messages of the type "Explorer has caused an error in ineb.dll...", when using both Internet Explorer and the Windows Explorer.

Removal

Open the 'Downloaded Program Files' folder in the Windows folder. Right-click the object called 'I-Lookup.

com Bar' (Ineb and Abeb variants), 'GlobalWebSearch.com Bar' (Gws and Chgrgs variants), 'SearchBus.com Bar' (Sbus variant), 'GlobalToolbar.com Bar' (Drbr variant) or 'Search Bar' (Bmeb variant). Click 'Remove'.

Next, open a DOS command prompt window (Start->Programs->Accessories) and enter the following commands. For the Ineb variant:

cd "%WinDir%\System"
regsvr32 /u Ineb.dll

Or for Gws:

cd "%WinDir%\System"
regsvr32 /u GWS.dll

Or for Chgrgs:

cd "%WinDir%\System"
regsvr32 /u Chgrgs.dll

Or for Abeb:

cd "%WinDir%\System"
regsvr32 /u abeb.dll

Or for Bmeb:

cd "%WinDir%\System"
regsvr32 /u bmeb.dll

Or for Sbus:

cd "%WinDir%\System"
regsvr32 /u sbus.dll

Or for Drbr:

cd "%WinDir%\System"
regsvr32 /u drbr.dll

Finally use Internet Options->Programs->Reset Web Settings to get the normal search sidebar back, reset your homepage, and delete the extra bookmarks added to the Favorites menu. If you like, you can also open the registry (Start->Run->regedit) and delete the key HKEY_CURRENT_USER\Software\ineb to clean up.