Spyware: WebBar - htwtb.bin and bar.dll

This section provides a tutorial example on remove spyware 'WebBar' and related files htwtb.bin and bar.dll.

Symptom: When ran Internet Explorer, I got the following JavaScript error:

   Object doesn't support this property or method
   File: c:\windows\htwtb.bin

HijackThis Report: I ran HijackThis on my friend's system and saw this line:

O2 - BHO: WebBar Class - {EE392A64-F30B-47C8-A363-CDA1CEC7DC1B} 
   - C:\PROGRA~1\APPLIE~1\BAR.DLL

Quick Research: I did a Google search on "htwtb.bin" and located the following related message:

I did a rescan using hijackthis and removed the line below. I had 
removed the other backup files in hijackthis to another location so 
I knew that the backup file from this rescan and fix would be the 
only one there in case I needed to do a restore. The web search tool 
is gone AND the IE Scripting Error message no longer appears on any 
site.

O2 - BHO: WebBar Class - {EE392A64-F30B-47C8-A363-CDA1CEC7DC1B} 
   - C:\PROGRA~1\APPLIE~1\BAR.DLL

What I Did:

1. Looked at c:\windows\htwtb.bin, found the file, and deleted it:

>dir c:\windows\htwtb.bin
07/29/2005  08:51 PM               196 htwtb.bin

>del c:\windows\htwtb.bin

2. Looked at IE > Internet Options > Programs > Manage Addon, found the entry, and disabled it.

   WebBar class, published by http://www.hexatech.com

3. Looked at bar.dll, found the directory, and deleted it:

> dir c:\program files\Appliedsearch_AutoInstall
   bar.dll
   ...
   
> rmdir c:\program files\Appliedsearch_AutoInstall

Result: The JavaScript error is gone.

Table of Contents

 About This Book

 Introduction to Microsoft Windows

 Introduction to Windows Explorer

 Introduction to Internet Explorer

 "Paint" Program and Computer Graphics

 GIMP - GNU Image Manipulation Program

 JPEG Image File Format Quality and Size

 GIF Image File Format and Transparent Background

 "WinZip" - ZIP File Compression Tool

 "WinRAR" - RAR and ZIP File Compression Tool

 FTP Server, Client and Commands

 "FileZilla" - Free FTP Client and Server

 Web Server Log Files and Analysis Tool - "Analog"

Spyware Adware Detection and Removal

 What Is Spyware?

 "HijackThis" - Spyware and Browser Hijacker Detector

 "HijackThis" Report Entry Types

Spyware: WebBar - htwtb.bin and bar.dll

 Spyware: SurfBuddy - sbuddy.dll

 Spyware: WebSpecials - webspec.dll

 Spyware: DSSAgent - DSSAgent.exe

 Transponder: Best Offer - farmmext.exe

 Spyware: dinst.exe - dsr.dll

 IE Addon Program Listing and Removal

 Vundo (VirtuMonde/VirtuMundo) - vtsts.dll Removal

 Trojan and Malware "Puper" Description and Removal

 VSToolbar (VSAdd-in.dll) - Description and Removal

 Spybot - Spyware Blocker, Detection and Removal

 Setting Up and Using Crossover Cable Network

 Home Network Gateway - DSL Modem/Wireless Router

 Windows Task Manager - The System Performance Tool

 "tasklist" Command Line Tool to List Process Information

 "msconfig" - System Configuration Tool

 Configuring and Managing System Services

 Windows Registry Key and Value Management Tools

 Startup Programs Removal for Better System Performance

 Winsock - Windows Sockets API

 Java on Windows

 Glossary of Terms

 Outdated Tutorials

 References

 PDF Printing Version