Home > Archive > General Discussion > April 2004 > Spyware!!!





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Spyware!!!
Factor>G<

2004-04-04, 3:50 pm

...Ok this is as good a place as any for the nature of this posting.

Has anybody come across an instant and possibly free quick-fix for removing the dreaded "HuntBar search-hijacker?"

I have tried many alternative ways, however a folder called "BTIEIN" cannot be deleted from my Windows XP registry!

I have removed all other file and associations...however it still manages to reinstall the software automatically next time around.

Any help in the form of good solid advice...would be much appreciated.

-G
enforcer

2004-04-04, 3:59 pm

Hijackthis
Factor>G<

2004-04-04, 4:11 pm

LoL,

How ya doing enforcer me old (smile).

Great result for LFC earlier today.

Now hurry up and finish ya Guinness...and get to work.
enforcer

2004-04-05, 6:05 am

I'm doing fine.
Yeah great result

and the above was a serious suggestion, do a search for a prog called hijackthis
jkhnwspec

2004-04-05, 6:20 am

Try looking here for the HiJackThis software. While you are there, look around a bit. There are many other neat things available too.
Factor>G<

2004-04-05, 4:39 pm

Cheers jkhnwspec, and enforcer...don't start getting serious on me.

I will check the site(s) out!
jkhnwspec

2004-04-06, 6:14 am

quote:
Originally posted by Factor>G<
Cheers jkhnwspec, and enforcer...don't start getting serious on me.

I will check the site(s) out!



Let us know what you find out. Also, here is yet another site to check out.
Factor>G<

2004-04-06, 11:07 am

...jkhnwspec thanx a bunch, I will endeavor to check your latest link out this coming weekend.
enforcer

2004-04-06, 5:53 pm

quote:
Originally posted by Factor>G<
, and enforcer...don't start getting serious on me.






Oiiiiiiii! I'll have you know inside this great humorous outside there is a helpful technician trying to get out.
Factor>G<

2004-04-07, 12:50 am

...Yeah no kidding?

The world awaits with baited breath, and a pint of Guinness of course (pre-celebration drink).

P.S. Poor old Arsenal...once again they let the titles slip, slip away!!
JohnDeere

2004-04-07, 2:54 am

Come on the Blues.


Betcha never thought Elvis would support Millwall.
enforcer

2004-04-07, 5:28 am

Yeah real shame 'bout Arsenal and an arse shame 'bout Real.


Yeah, suddenly I am one of Millwalls biggest fans.

Lets see Millwall v Galatasary in Europe next season.
Factor>G<

2004-04-07, 11:50 am

LoL,

Millwall ya say...yup I can just see it now - F-Troop fans cause English clubs to be banned from Europe once again.

JohnDeere one consolation for the Chelsea faithful...if they don't win the cup outright, at least they can afford to buy a replica.

Enforcer and jkhnwspec - I will hopefully have time to fully check those links out this coming weekend.

I will keep you posted...
jhinckley

2004-04-13, 6:39 pm

Try SpyBot S&D. It works like a champ for me. Google it and you will find the download link.
Factor>G<

2004-04-18, 1:37 pm

...Thanx for the input, and I apologize for the delay.

Allow me to explain what this nasty bit of spyware does:

Privacy violation
HuntBar/TS sends the domain name of the site being viewed, the domain name of any site previously being viewed and the title and any keywords in the current page to its controlling servers whenever a new site is viewed. It does this even if the toolbar is not turned on.

HuntBar/Side, MSLink, BTLink and SToolbar send URLs and search terms used to its controlling servers with a unique ID allowing your search engine usage to be tracked.

Security issues
Yes. HuntBar/TS, MSIn and BTIn can silently download and execute arbitrary code, as an update feature.

Stability problems
HuntBar/BTLink and SToolbar seems to cause IE to crash often on some setups with an 'Exception E Access Violation'.

...I have so far found out that Ad-Aware reffile and Spybot S&D can remove HuntBar variants other than BTLink, BTIn and SToolbar. Thus with the latter files still intact it allows the software to reinstall itself automatically in the future.

I'm looking for a way to completely wipe this sucker out, and if possible with zero costs?

I have tried manually uninstalling all the files in question; however I cannot uninstall a folder in the registry called "BTIEIN".
jkhnwspec

2004-04-18, 2:09 pm

quote:
Originally posted by Factor>G<
...Thanx for the input, and I apologize for the delay.

Allow me to explain what this nasty bit of spyware does:

Privacy violation
HuntBar/TS sends the domain name of the site being viewed, the domain name of any site previously being viewed and the title and any keywords in the current page to its controlling servers whenever a new site is viewed. It does this even if the toolbar is not turned on.

HuntBar/Side, MSLink, BTLink and SToolbar send URLs and search terms used to its controlling servers with a unique ID allowing your search engine usage to be tracked.

Security issues
Yes. HuntBar/TS, MSIn and BTIn can silently download and execute arbitrary code, as an update feature.

Stability problems
HuntBar/BTLink and SToolbar seems to cause IE to crash often on some setups with an 'Exception E Access Violation'.

...I have so far found out that Ad-Aware reffile and Spybot S&D can remove HuntBar variants other than BTLink, BTIn and SToolbar. Thus with the latter files still intact it allows the software to reinstall itself automatically in the future.

I'm looking for a way to completely wipe this sucker out, and if possible with zero costs?

I have tried manually uninstalling all the files in question; however I cannot uninstall a folder in the registry called "BTIEIN".



Where is this at in the registry?
jkhnwspec

2004-04-18, 2:15 pm

Factor >G<

Take a look here.

See if that helps.

Ignore my reply asking about where it is in the registry. I should have checked before asking.
Factor>G<

2004-04-18, 6:00 pm

jkhnwspec thanx for all your help...I can safely say I have now removed that dreaded "BTIEIN" entry in the registry.

It was all due to XP Permissions (grrr!) I was able to delete it through the other users profile...That would be the user who originally picked up the variant in the first place!

...That just leaves me to get rid of the dreaded pop-ups, with each and every IE Window I open!!
jkhnwspec

2004-04-18, 9:42 pm

quote:
Originally posted by Factor>G<
jkhnwspec thanx for all your help...I can safely say I have now removed that dreaded "BTIEIN" entry in the registry.

It was all due to XP Permissions (grrr!) I was able to delete it through the other users profile...That would be the user who originally picked up the variant in the first place!

...That just leaves me to get rid of the dreaded pop-ups, with each and every IE Window I open!!



Bravo!
Sponsored Links





Free Braindumps | MCSE braindumps software forum

Copyright 2003 - 2008 examnotes.net