Huntbar Key Registry not removed by MS Antispyware

[PG]

Has anyone had a similar problem with this spyware?

If so, what was the solution to remove it from CPU?

Thanks,

PG

 

[Andre Da Costa]

From Plun:
Have you done any scans in safe mode ? Do that,
choose fullscan with all options checked.

Also fill your "toolbox" with these tools to make this cleaning
better.

- Download/Install CCleaner, www.ccleaner.com, remove all
temporarily junk

- Download/Install Lavasofts Adaware

http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022-10319876.html?tag=list


All scans then in safe mode, press F8 during reboot.

 

[JohnF.]

If you are under attack and MSAS does not seem to help:

*Submit suspected spyware report in the tools menu of MSAS*

1. Download lspfix.exe and ccleaner.exe

2. Reboot into safe mode - http://tinyurl.com/pfca

3. Clean out all temp file locations - ccleaner.exe

4. Run MSAS at least twice in full/Deep mode

5. Run a robust, updated antivirus software scan

6. Reboot into normal mode,see if problem has been corrected

Battle Notes:
- If you have trojans (files that won't go away),
you may have to disable System Restore on XP:
http://tinyurl.com/movy

- If your Internet connectivity quits:
http://support.microsoft.com/kb/892350
LSP-Fix - http://www.cexx.org/lspfix.htm

- This program will not detect or remove viruses
http://www.microsoft.com/athome/security/viruses/default.mspx

** For a more detailed attack plan **
http://spywarewarrior.com/sww-help.htm

Application Notes:
Registering a VB6 dll seems to fix missing agents:
1) Open up a command prompt (start -> run -> cmd)
2) Type in the following "regsvr32 msvbvm60.dll" (without the quotes).
3) Close and re-open Windows AntiSpyware

- Several issues are addressed by Microsoft -
Cookies, supported OS, and cost.
http://www.microsoft.com/athome/security/spyware/software/faq.mspx

- This program will not work with Windows 98 or ME.
If you need a tool for 9X/ME, go here:
http://www.majorgeeks.com/downloads31.html

- If your taskbar is on the side of your screen, the alerts
scroll off the screen. Move the taskbar back to the
bottom or top to stop the scroll, then revert back.

- Mark Ferguson maintains an FAQ:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.txt

 

[plun]

3. Clean out all temp file locations - ccleaner.exe

Hi John and other Ccleaner fans.

About Ccleaner
I have been cleaning several PC,s lately and Ccleaner
have indeed some unwished functions when you cleaning spyware.

- Default this app only removes files older then 48 hour. (This can be
unchecked
within settings".

- If some files cant be removed you dont see it, you must press analyze
again
and then you will see files which cant be removed or beeing recreated.

This was the situation for me with a partially removed Hotbar and LOP
infection
(messageplus). (I hate Shoppingreports after this cleaning )

Maybe it is best practise to also "show hidden files" for all users and
manually check
these temporarily folders ?

 

[JohnF.]

I have found that I have to run the registry part of the tool 2 or 3 times
to remove all the "bad" entries it finds.

Are you running ccleaner in SAFE MODE?

Show Hidden Files is something a forgot to list - thanks, I'll have to
modify my uber-signature file/recommended attack list!

 

[plun]

I have found that I have to run the registry part of the tool 2 or 3 times
to remove all the "bad" entries it finds.

Are you running ccleaner in SAFE MODE?

Show Hidden Files is something a forgot to list - thanks, I'll have to
modify my uber-signature file/recommended attack list!

Well, I always run these programs in safe mode if something
fails
in normal mode.

But this 48 hours quarantine and unremovable/recreated files is
a problem when you use CCleaner as a newbie/normal user.

For myself I always have a HijackThis analyze as complement for
MSAS, CCleaner and Adware (sometimes also Spybot)

 

[D@annyBoy {4XX961}]

I had to edit my registry once to get rid of one :-(
using regseeker