Windows Tutorials - Herong's Tutorial Examples - v5.62, by Dr. Herong Yang
Spyware: WebBar - htwtb.bin and bar.dll
This section provides a tutorial example on remove spyware 'WebBar' and related files htwtb.bin and bar.dll.
Symptom: When ran Internet Explorer, I got the following JavaScript error:
Object doesn't support this property or method File: c:\windows\htwtb.bin
HijackThis Report: I ran HijackThis on my friend's system and saw this line:
O2 - BHO: WebBar Class - {EE392A64-F30B-47C8-A363-CDA1CEC7DC1B}
- C:\PROGRA~1\APPLIE~1\BAR.DLL
Quick Research: I did a Google search on "htwtb.bin" and located the following related message:
I did a rescan using hijackthis and removed the line below. I had
removed the other backup files in hijackthis to another location so
I knew that the backup file from this rescan and fix would be the
only one there in case I needed to do a restore. The web search tool
is gone AND the IE Scripting Error message no longer appears on any
site.
O2 - BHO: WebBar Class - {EE392A64-F30B-47C8-A363-CDA1CEC7DC1B}
- C:\PROGRA~1\APPLIE~1\BAR.DLL
What I Did:
1. Looked at c:\windows\htwtb.bin, found the file, and deleted it:
>dir c:\windows\htwtb.bin 07/29/2005 08:51 PM 196 htwtb.bin >del c:\windows\htwtb.bin
2. Looked at IE > Internet Options > Programs > Manage Addon, found the entry, and disabled it.
WebBar class, published by http://www.hexatech.com
3. Looked at bar.dll, found the directory, and deleted it:
> dir c:\program files\Appliedsearch_AutoInstall bar.dll ... > rmdir c:\program files\Appliedsearch_AutoInstall
Result: The JavaScript error is gone.
Table of Contents
Introduction to Microsoft Windows
Introduction to Windows Explorer
Introduction to Internet Explorer
"Paint" Program and Computer Graphics
GIMP - GNU Image Manipulation Program
JPEG Image File Format Quality and Size
GIF Image File Format and Transparent Background
"WinZip" - ZIP File Compression Tool
"WinRAR" - RAR and ZIP File Compression Tool
FTP Server, Client and Commands
"FileZilla" - Free FTP Client and Server
Web Server Log Files and Analysis Tool - "Analog"
►Spyware Adware Detection and Removal
"HijackThis" - Spyware and Browser Hijacker Detector
"HijackThis" Report Entry Types
►Spyware: WebBar - htwtb.bin and bar.dll
Spyware: SurfBuddy - sbuddy.dll
Spyware: WebSpecials - webspec.dll
Spyware: DSSAgent - DSSAgent.exe
Transponder: Best Offer - farmmext.exe
IE Addon Program Listing and Removal
Vundo (VirtuMonde/VirtuMundo) - vtsts.dll Removal
Trojan and Malware "Puper" Description and Removal
VSToolbar (VSAdd-in.dll) - Description and Removal
Spybot - Spyware Blocker, Detection and Removal
Setting Up and Using Crossover Cable Network
Home Network Gateway - DSL Modem/Wireless Router
Windows Task Manager - The System Performance Tool
"tasklist" Command Line Tool to List Process Information
"msconfig" - System Configuration Tool
Configuring and Managing System Services
Windows Registry Key and Value Management Tools