Windows Security Tutorials - Herong's Tutorial Examples - v3.01, by Dr. Herong Yang
Removing "WebBar" - htwtb.bin and bar.dll
This section provides a tutorial example on remove spyware 'WebBar' and related files htwtb.bin and bar.dll.
Symptom: When ran Internet Explorer, the following JavaScript error is displayed:
Object doesn't support this property or method File: c:\windows\htwtb.bin
HijackThis Report:
O2 - BHO: WebBar Class - {EE392A64-F30B-47C8-A363-CDA1CEC7DC1B}
- C:\PROGRA~1\APPLIE~1\BAR.DLL
Quick Research: I did a Google search on "htwtb.bin" and located the following related message:
I did a rescan using hijackthis and removed the line below. I had
removed the other backup files in hijackthis to another location so
I knew that the backup file from this rescan and fix would be the
only one there in case I needed to do a restore. The web search tool
is gone AND the IE Scripting Error message no longer appears on any
site.
O2 - BHO: WebBar Class - {EE392A64-F30B-47C8-A363-CDA1CEC7DC1B}
- C:\PROGRA~1\APPLIE~1\BAR.DLL
What I Did:
1. Looked at c:\windows\htwtb.bin, found the file, and deleted it:
>dir c:\windows\htwtb.bin 07/29/2005 08:51 PM 196 htwtb.bin >del c:\windows\htwtb.bin
2. Looked at IE > Internet Options > Programs > Manage Addon, found the entry, and disabled it.
WebBar class, published by http://www.hexatech.com
3. Looked at bar.dll, found the directory, and deleted it:
> dir c:\program files\Appliedsearch_AutoInstall bar.dll ... > rmdir c:\program files\Appliedsearch_AutoInstall
Result: The JavaScript error is gone.
Table of Contents
About This Windows Security Book
Windows 8: System Security Review
Windows 8: System Security Protection
Windows 8 Defender for Real-Time Protection
Windows 7: System Security Review
Windows 7: System Security Protection
Windows 7 Forefront Client Security
Norton Power Eraser - Anti-Virus Scan Tool
McAfee Virus and Malware Protection Tools
Spybot - Spyware Blocker, Detection and Removal
Keeping IE (Internet Explorer) Secure
Malware (Adware, Spyware, Trojan, Worm, and Virus)
HijackThis - Browser Hijacker Diagnosis Tool
IE Add-on Program Listing and Removal
"Conduit Search" - Malware Detection and Removal
"Tube Dimmer", "Scorpion Saver" or "Adpeak" Malware
►Malware Manual Removal Experience
Removing Malware "Social Privacy DNS"
►Removing "WebBar" - htwtb.bin and bar.dll
Removing "SurfBuddy" - sbuddy.dll
Removing "WebSpecials" - webspec.dll
Removing "DSSAgent" - DSSAgent.exe
Removing "Best Offer" - farmmext.exe
Removing "dinst.exe" - dsr.dll
Removing "deSrcAs.dll" - MyWay Search Assistant
WinAntiVirusPRO 2006 Faked Security Popup
WinFixer 2006 Faked Security Popup
Removing "WinFixer" - Rogue Security Popups
Vundo (VirtuMonde/VirtuMundo) - vtsts.dll Removal
Trojan and Malware "Puper" Description and Removal
VSToolbar (VSAdd-in.dll) - Description and Removal
PWS (Password Stealer) Trojan Infection Removal