What's new

what is huntbar and why cant spybot or adaware get rid of it. (1 Viewer)

TonyD

Who do we think I am?
Ambassador
Senior HTF Member
Joined
Dec 1, 1999
Messages
24,329
Location
Gulf Coast
Real Name
Tony D.
adawre doesn't see it and spybot s&d cant get rid of it.
there is no huntbar.com/

so anyone know what this is and how do i remove it.
 

TonyD

Who do we think I am?
Ambassador
Senior HTF Member
Joined
Dec 1, 1999
Messages
24,329
Location
Gulf Coast
Real Name
Tony D.
i tried that.
but every link that has a removal function on the web site doesnt link to an active website.

the last thing i want to do is go into the reg to remove anything.
 

John Watson

Screenwriter
Joined
Jul 14, 2002
Messages
1,936
Why are so many of these "protection" programs so useless?

I think Jack Bauer should be sent to take care of Huntbar, Searchtheweb.com etc :D
 

Michael Harris

Screenwriter
Joined
Jun 4, 2001
Messages
1,344
If you are using XP you may want to go to a restore point before Huntbar appeared. That's what I had to do in order to get rid the nasty that hijacked my homepage.
 

DaveGTP

Senior HTF Member
Joined
Jul 24, 2002
Messages
2,096
I had luck with Spysweeper getting some stuff that Spybot and Adaware missed. If this is one of those toolbar type programs, you might also have luck this way:

Try going to Tools, Internet Options, under Temporary files go to Settings, View Objects. You'll see stuff like Quicktime, Shockwave, etc. Delete whatever you don't recognize. Some of the crappy searchbar programs install here as plug-ins. I've had luck getting rid of some plugins that way (although the files are still lurking on the PC somewhere, but at least the plugin isn't active!).
 

Greg*go

Supporting Actor
Joined
Jun 14, 2002
Messages
941
Have you tried using cwshredder? If this huntbar takes over your homepage, that niffty little program should do the job. Luckily, I've never experienced this huntbar, so I have no idea what it is. The most updated version I see is here at majorgeeks.com
 

JohanD

Stunt Coordinator
Joined
May 22, 2003
Messages
180
I recently (about a week ago) ran into this same problem.

What I ended up doing was taking the hard drive out of the infected PC, and put it as the slave drive (IE don't boot from the infected drive) on a second PC. Ran ad-aware/mcafee on the infected drive and it cleaned right up. It is very difficult to remove files that insist on being run.

Then when you boot up, the files will be gone and you will need to run ad-aware one more time to clean up the registry.

Best way to do it if you have access to another PC.
 

Joseph DeMartino

Senior HTF Member
Joined
Jun 30, 1997
Messages
8,311
Location
Florida
Real Name
Joseph DeMartino
I run Ad Aware, Spybot AND Microsoft's anti-spyware beta (which has a nifty feature that automatically prevents most home page hijack attempts and restores the home page to a URL you pre-set if a hijack attempt succeeds.) I find that each of them will find things the others won't.

Probably also a good idea to boot to safe mode with no networking, then stop any processes you don't recognize and finally run several anti-spyware and anit-virus scans. Also go to add remove programs and delete anything you don't want that's foolish enough to make itself accessible there.

Regards,

Joe
 

Jay H

Senior HTF Member
Joined
Mar 22, 1999
Messages
5,654
Location
Pittsfield, MA
Real Name
Jay
RUN AD-Aware, Spybot S&D, and Hijackthis IN SAFE MODE

I suspect that some spyware that is loaded in Normal mode can unload itself and modify the registry, etc. etc. than then simply run itself in memory until shutdown. Therefore the next time you start up, it'll repeat the process such that Hijackthis would be able to see it and remove it but next time it would return. Ad-aware/Spybot would do the same thing, it may remove the registry entry but because it was resident in memory and the actual file itself wasn't detected or couldn't be removed cause it was running, it would simply load itself again the next time you turned your PC on. I had to help a friend get something off called Neededware that was like that. I would have her remove the registry stuff (O15 trusted zone as well as a XP Service (under name NDWSERV). However, it would come back the next time. No trace that I could see in the processes (easily hidden anyway) or file that was obvious.

I had her boot up in safe mode, ran all the above and it removed it. Then I had a program called CleanUp or something like that remove every stinkin temp file in %TEMP%, any suspicious file/directory in %APPDATA% and all the LOCAL DATA in her document and settings for all registered users.

Then you can run cleanmgr and delete all your system restore points in XP and also use that to remove all temp and internet cache files...

Jay

P.S. JohanD has the right idea but obviously a little work. The most important thing is to remove the file and remove it from registry second. The registry cannot start a file that doesn't exist so the first target is to kill any processes that you can confirm as being suspicious, Be careful of things in the above directory and %WINDOWS%system32. I can't tell you how many bad files I found in there, DLLs, EXES, all suspicious!

Jay
 

Don Giro

Supporting Actor
Joined
Jan 22, 2004
Messages
862
Location
New Jersey
Real Name
Don


Make sure you know what you're doing when you run Hijackthis!

Your best bet is to send a Hijackthis log to a site like the forums at SpywareInfo.com and let one of their experts analyze it and show you what to remove!

I've been using the program for months now (spyware removal has developed into a new hobby for me), and I know it's WAY too easy to screw up your PC if you don't know what you're doing!
 

spicy14lingo

Auditioning
Joined
Dec 17, 2008
Messages
13
Real Name
Gerns
Delete the whole thing off your pc then get Cyberdefender and you will see it's so easy to use and it actually blocks those things from your computer!
 

Users who are viewing this thread

Sign up for our newsletter

and receive essential news, curated deals, and much more







You will only receive emails from us. We will never sell or distribute your email address to third party companies at any time.

Forum statistics

Threads
357,037
Messages
5,129,395
Members
144,285
Latest member
Larsenv
Recent bookmarks
0
Top