Microsoft AntiSpyware Beta 1 stops responding

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I just downloaded the Microsoft AntiSpyware Beta 1 version. I have tried to
run it several times with no success. I run the regular smart scan and as
soon as it hits the Reg key "HKEY_LOCAL_MACHINE\software\btiein" the MS
AntiSpyware brings up a window that states that the virtual memory is to low
and needs to increase the virtual memory. I can click on the ok button or
not, either way the program freezes and then says that the program is not
responding. I have tried the deep scan too. MS AntiSpyware will just freeze
and states that the program is not responding. How can I get over this hurdle?
 
The reg key is related to IBIS Websearch (Wintools) and it is difficult to
remove in normal mode due to 3 .exe files protecting each other and one part
running as a windows service, If you have Wintools installed then remove it
using the Add/Remove screen and scan in safe mode using Microsoft's scanner
and a fixtool from Symantec.

Download the Websearch fixtool here:

http://securityresponse.symantec.com/avcenter/FxWebsch.exe

Reboot into safe mode (Reboot and tap the F8 key then choose safe mode from
the advanced menu screen)

Goto the Add/Remove screen (Start Menu > Control Panel > Add/Remove
Programs) and remove these if found:

Search Toolbar
TS Toolbar
WebSearch Toolbar
Wintools
Wintools Easy Installer

In Safe Mode run the fixtool by double clicking FxWebsch.exe then run
Microsoft Antispyware on a full system scan and remove anything found.

Reboot back to Normal Mode

That should remove Websearch if it exists but if Microsoft's scanner still
detects btiein in the registry after you reboot there may be a permissions
problem on that registry key. To check that log in from the Admin account,
goto start menu > run > type regedit and press ok

click the plus (+) next to HKEY_LOCAL_MACHINE then find SOFTWARE and click
the plus (+) , right click btiein and choose 'Permissions' . If the field
under 'Group or user names' is empty or doesnt contain Administrators click
Add, In the box titled 'Enter the object names to select' type
Administrators, click OK.

With Administrators highlighted in the top part of the window check the
Allow box next to 'Full Control', click Apply and OK. Finally Right click the
btiein folder and choose 'Delete'

Let us know if you have any problems

Andy
 
The FxWebsch.exe found some items but it did not remove the btiein. I changed
the permissions like you said but the a new file opened also called btiein. I
was able to change the permission on that folder. I tried to delete the
folders, however, a new folder opened call taskcache. I tried to change the
permissions on the folder, however, I am told that I can not change the
permission on that folder. Do you have any other suggestions I can try?

Pete
 
Hi Pete

Can you export the registry keys and post back the results. Goto Start Menu
then Run and type (or copy and paste)

regedit /e c:\look.txt "HKEY_LOCAL_MACHINE\software\btiein"

This will export the contents of the registry key and save the details to a
text file on c:\drive called look.txt. With the export details I can create a
similar reg key on my pc and see if I can re-create the problem.

You could try reglite and see if you can take ownership of the keys.

http://www.resplendence.com/download/reglite.exe

Install and run then navigate to the btiein keys, right click again and
choose Properties then click Take Ownership on each key then attempt to
remove them, Another option is to goto User Accounts (Start Menu > Control
Panel > User Accounts) and create a new Admin account then reboot and log
into the new account and attempt to remove the keys. If you can then remove
them and reboot back to your account then go back to user accounts and delete
the new account you created.

When you say you cannot change the permissions whats the exact message you
receive and what is listed on the permissions page under group and usernames,
did you find any of the names for websearch in Add/Remove screen ?

Andy
 
Hi,
That worked. I was able to take ownership and then delete btiein. MS
AntiSpyware has started working. Thank you for all of your help.

I appreciate it!!!

Pete
 
sounds like you may need more ram..how much do you have now? if your running
xp..you should have AT LEAST 256 . I would try this. clean your cache.then
unload and reload beta..wish i could be more help.
 
Back
Top