Removing "WebBar" - htwtb.bin and bar.dll

This section provides a tutorial example on remove spyware 'WebBar' and related files htwtb.bin and bar.dll.

Symptom: When ran Internet Explorer, the following JavaScript error is displayed:

   Object doesn't support this property or method
   File: c:\windows\htwtb.bin

HijackThis Report:

O2 - BHO: WebBar Class - {EE392A64-F30B-47C8-A363-CDA1CEC7DC1B} 
   - C:\PROGRA~1\APPLIE~1\BAR.DLL

Quick Research: I did a Google search on "htwtb.bin" and located the following related message:

I did a rescan using hijackthis and removed the line below. I had 
removed the other backup files in hijackthis to another location so 
I knew that the backup file from this rescan and fix would be the 
only one there in case I needed to do a restore. The web search tool 
is gone AND the IE Scripting Error message no longer appears on any 
site.

O2 - BHO: WebBar Class - {EE392A64-F30B-47C8-A363-CDA1CEC7DC1B} 
   - C:\PROGRA~1\APPLIE~1\BAR.DLL

What I Did:

1. Looked at c:\windows\htwtb.bin, found the file, and deleted it:

>dir c:\windows\htwtb.bin
07/29/2005  08:51 PM               196 htwtb.bin

>del c:\windows\htwtb.bin

2. Looked at IE > Internet Options > Programs > Manage Addon, found the entry, and disabled it.

   WebBar class, published by http://www.hexatech.com

3. Looked at bar.dll, found the directory, and deleted it:

> dir c:\program files\Appliedsearch_AutoInstall
   bar.dll
   ...
   
> rmdir c:\program files\Appliedsearch_AutoInstall

Result: The JavaScript error is gone.

Last update: 2006.

Table of Contents

 About This Windows Security Book

 Windows 8: System Security Review

 Windows 8: System Security Protection

 Windows 8 System Recovery

 Windows 8 Defender for Real-Time Protection

 Windows 7: System Security Review

 Windows 7: System Security Protection

 Windows 7 System Recovery

 Windows 7 Forefront Client Security

 Norton Power Eraser - Anti-Virus Scan Tool

 McAfee Virus and Malware Protection Tools

 Spybot - Spyware Blocker, Detection and Removal

 Keeping Firefox Secure

 Keeping IE (Internet Explorer) Secure

 Malware (Adware, Spyware, Trojan, Worm, and Virus)

 HijackThis - Browser Hijacker Diagnosis Tool

 IE Add-on Program Listing and Removal

 "Conduit Search" - Malware Detection and Removal

 "Tube Dimmer", "Scorpion Saver" or "Adpeak" Malware

Malware Manual Removal Experience

 Removing Malware "Social Privacy DNS"

Removing "WebBar" - htwtb.bin and bar.dll

 Removing "SurfBuddy" - sbuddy.dll

 Removing "WebSpecials" - webspec.dll

 Removing "DSSAgent" - DSSAgent.exe

 Removing "Best Offer" - farmmext.exe

 Removing "dinst.exe" - dsr.dll

 Removing "deSrcAs.dll" - MyWay Search Assistant

 WinAntiVirusPRO 2006 Faked Security Popup

 WinFixer 2006 Faked Security Popup

 Removing "WinFixer" - Rogue Security Popups

 Vundo (VirtuMonde/VirtuMundo) - vtsts.dll Removal

 Trojan and Malware "Puper" Description and Removal

 VSToolbar (VSAdd-in.dll) - Description and Removal

 PWS (Password Stealer) Trojan Infection Removal

 MS08-001 Vulnerability on Windows Systems

 Antivirus System PRO

 References

 PDF Printing Version