I've picked up hunt bar (spyward)

[larrylook]

I'm bringing in the Special Forces Unit here, LL, so hold you horses for a
bit.

Thanks much. Appears I've gotten rid to the
hkey_local_machine\software\btiein that I wanted to get rid of by using
system restore and going back a month in time. Nothing else seemed to do
the job. Spybot doesn't detect it anymore and I don't find the listing in
registry.

Still not sure why Spybot couldn't get rid of it and I couldn't delete it
from registry. May have something to do with permissions? My daughter has
a password protected profile and she may have been the one that contracted
it. Could that be the reason? Anyway it appears to be gone.




anwhile, if you used HijackThis you'd be able to delete the keys in

 

[siljaline]

<G>

~Silj

--
siljaline

MS - MVP Windows IE/OE
______________________

(Reply to group, as return address
is invalid - that we may all benefit)

 

[larrylook]

http://www.lavahelp.com/articles/v6/04/02/0302.html

Very interesting, I do think it had something to do with permissions as I
couldn't delete the stupid btiein key. I tried earlier changing permissions
to allow all, but still couldn't delete it. As posted above about system
restore, going back 1 month, seems to have gotten rid of it. I'm not sure
MS has perfected this profile thing. For example I cannot use explore to
see my son's my documents folder even though I'm the administrator. It says
access is denied. I guess this is because he goes into his profile with a
password (which I don't know). Shouldn't I be able to get there? Any way
to do this (he's a minor)? I think the owner of the computer should be able
to get to all "my documents" folders.

 

[siljaline]

Very interesting, I do think it had something to do with permissions as I
couldn't delete the stupid btiein key. I tried earlier changing permissions
to allow all, but still couldn't delete it. As posted above about system
restore, going back 1 month, seems to have gotten rid of it. I'm not sure
MS has perfected this profile thing. For example I cannot use explore to
see my son's my documents folder even though I'm the administrator. It says
access is denied. I guess this is because he goes into his profile with a
password (which I don't know). Shouldn't I be able to get there? Any way
to do this (he's a minor)? I think the owner of the computer should be able
to get to all "my documents" folders.

**As already posted**, >>de-register<< the DLL's from a DOS Prompt as
mentioned in this article: http://www.doxdesk.com/parasite/HuntBar.html

Run HijackThis - post your log here: http://forum.mvps.org/viewforum.php?f=30
Get HijackThis here: http://mvps.org/winhelp2002/unwanted.htm
HJT FAQ: http://www.spywareinfo.com/~merijn/htlogtutorial.html

HTH & good luck.

~Silj

--
siljaline

MS - MVP Windows IE/OE
______________________

(Reply to group, as return address
is invalid - that we may all benefit)

 

[Ramesh [MVP]]

Good catch!

--
Ramesh - Microsoft MVP
Windows XP - Shell/User
www.mvps.org/sramesh2k

Free Online Virus Scanners and Security Tests:
http://www.mvps.org/sramesh2k/Scanners.htm

I have obviously picked up hunt bar. Spybot detects it, it says I have
hkey_local_machine\software\btien. It cannot get rid of it. I ask it to
run upon reboot and still it cannot get rid of this. I also tried in safe
mode but no luck. Adaware doesn't detect it. Any ideas would be
appreciated. I hate these spyware programs.

I'd rather not fool around with the registry as I'm not an advanced user.
I'd rather find something that can remove it automatically. Thanks in
advance.

http://www.lavahelp.com/articles/v6/04/02/0302.html

HTH

~Silj

--
siljaline

MS - MVP Windows IE/OE
______________________

(Reply to group, as return address
is invalid - that we may all benefit)