Hi There
IBIS Means you have a variant of Huntbar installed,With
the scanner having problems its probably Wintools as this
cannot be deleted in normal mode due to 3 Wintool files
which interact to stop each other being killed.It will be
installed as a BHO and a Windows Service so going for
this in safe mode is the only way .
Download Ccleaner to remove all temp & unused files
http://download.ccleaner.com/download120bin.asp
Download the fixtool by symantec for this
http://securityresponse.symantec.com/avcenter/FxWebsch.exe
Save to desktop. Reboot into safe mode and double click
the fix tool to start the remover.Also run MS Antispy in
safe mode and it should clear Ibis after using the
symantec fix tool ,Remove anything found with MS Antispy
Check Add/remove screen for these and remove if found:
Toolbar
WinTools
WebOffer
Web Search Toolbar
Win-Tools Easy Installer
Manual Removal : (If you need to remove the manually copy
this to notepad and save it so you can still use it in
safe mode)
WinTools cannot be removed in normal mode because of each
of the three processes, plus a BHO, keep each other alive
when you try to stop them. So you will need to use Safe
Mode.
To get to Safe Mode, press the F8 key just as Windows is
about to boot. keep tapping F8 as the machine boots until
the menu appears.
Open the registry
click Start, choose Run, enter
regedit
and find the key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on.
Select the subkey 'Run' and delete the
WinTools
TB_setup
TBPS
entries if any exist
To Make searching the registry faster use the find
feature.Open "regedit" goto "Edit" on the top bar then
goto "Find" .
Next, select the subkey 'Explorer\Browser Helper
Objects', delete the whole subkey with the name
{87766247-311C-43B4-8499-3D5FEC94A183}
find the key
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services and
delete the WinToolsSvc subkey.
To clean up, delete
WinTools
in the Software subkey of both HKEY_LOCAL_MACHINE and
HKEY_CURRENT_USER.
Reboot normally.
Open a DOS command prompt window
(from Start->Run then type cmd ), and enter the
following commands.
First Copy & Paste the first line in and press enter
then copy and paste the other lines in pressing enter
after each one the second part is one command from regsvr
to .dll"
1st.
cd "%WinDir%\System"
2nd.
regsvr32 /u "\Program Files\Common
Files\WinTools\WToolsB.dll"
3rd.
regsvr32 /u "\Program Files\Common
Files\WinTools\btiein.dll"
4th.
regsvr32 /u "\Program Files\Toolbar\toolbar.dll"
Having done this you can reboot the machine and delete
the HuntBar files. Open the 'Common Files' folder inside
Program Files. delete 'WinTools'.
Go back to the Program Files folder and delete
Toolbar
Finally reset your search and home pages back to normal
(Tools->Internet Options->Programs->Reset Web Settings).
Run Ccleaner and clear anything found ,also click issues
and press 'scan for issues' and fix anything found.
That will remove wintools but use the fix from Symantec
in safe mode as you should not need to remove anything
manually if the fixtool works, if it finds alot of IBIS
files then run the remover twice to make sure it shows
clear the second time.
Regards Andy Manc