OT Mal Aware

"Enrique Bustos" escribio en mensaje
:

Pues ya le he pasado Spyboot y el Ad-aware a mi máquina y siempre me sigue
saliendo el IBIS Toolbar, alguien sabe como quitarlo para siempre?

Saludos al grupo.

http://spywareguide.com/product_show.php?idB6

Full Name: Huntbar Websearch
Type: Browser Plugin
Also Known as: IBIS Toolbar MSIETS BTIEIN btlink Wintools wtoolsa
Created by: IBIS, LLC
Danger Level: 5 [Explain]
Official Description: HuntBar is a toolbar providing searching
features, which is added to every new Internet Explorer and Windows
Explorer window.

It also changes your home page and search bar settings to point to
HuntBar's servers, and automatically opens this search bar when it
detects you using any other search engine.

Comment: TrafficSyndicate, the makers of HuntBar,
offer 'co-branded' versions of HuntBar which may be installed by other
sites under a different name.

HuntBar sends the domain name of the site being viewed, the domain
name of any site previously being viewed and the title and any
keywords in the current page to its controlling servers whenever a new
site is viewed. It does this even if the toolbar is not turned on.

However, it does not (currently) use a cookie or unique ID to track
visits across sites.

HuntBar can silently download and execute arbitrary code, as an update
feature.

Pay Load Consideration:
This program loads three core files into memory creating a fairly
large drain on resources. The payload is very high as each file takes
up 3 to 5 megs of ram on our test machines at an idle state. When
surfing these processes can jump as high as 10 to 11 megs of memory
and the cpu usage is nearly an increase of 15% when the product is
installed.

Information URL: http://www.websearch.com/

# Properties: Shows ads
# Changes browser
# Stays Resident
# Connects to the internet
Manual removal: Unregister the files:
regsvr32 /u "C:\Program Files\Common Files\MSIETS\msiets.dll"
regsvr32 /u "C:\Program Files\Common Files\MSIETS\mslink.dll"
You also want to unregister all the dll's in the folder:
c:\program files\common files\wintools\

Look for a directory/folder at this location:
c:\program files\common files\wintools\
There will be three main file all running in memory. You'll need to
end process on each of them before you can delete the folder.
The file names are
WSUP.exe
WToolsA.exe
Then delete them manually
Removal tools: List of products that detect/remove/protect against
Huntbar:
# X-Cleaner
# RegBlock


Filtrado (Kill-File Global):
tella llop, jm (Desde 2003.10.25)