Hunt and IBIS Toolbar Malware

[kenshireen]

I run adaware and come up with 25 Hunt and IBIS toolbar files. I delete them and the next day I run adaware and there are a bunch of NEW Hunt and IBIS toolbar files. Why doesn't adaware remove the program generating all these files. I have to run every day since there are always new files. Also, why does it have a TAC of 9... It's only data mining?

I need to permanently remove the program generating these hunt and IBIS Toolbar data mining spyware

thanks, ken

[mitch]

after you remove them with aaw have you powered off and then run a new scan to see if they are really gone?

ok
post your aaw log here ( don't forget to click "check for updates" above the start button)

and then we can see what is happening ok?


print out this link to make sure you have the settings right ok?

http://www.landzdown.com/index.php?topic=425.0

[kenshireen]

thanks Mitch for your reply.  I do not shut down my system after I run AAW but I do a second scan right after the first and it comes out clean.... Next day though there are a bunch of new Hunt/IBIS files.
I will post the log tomorrow after I check the settings to make sure they are correct.

Thanks, Ken

[GR@PH;<'S]

kenshireen,
make sure that you are using
Ad-aware SE Build 106 (Free/Personal)
[if not Uninstall your old Ad-aware first then install SE]
Then use the WebUpDate
to get the latest Definition file
(SE1R.90.03.02.2006)
then scan  doing a  "Full Scan" and then post your logfile here by using the Add-Reply Feature .

GR@PH;<'S   :breakkie:

[CalamityJane]

Hi Ken,  You've moved!  Remember me?  :D

I had asked for a scan log in your topic at another forum.
http://www.dslreports.com/forum/remark,15380932

Which forum are you going to stick with so we aren't duplicating our efforts?  If you are abandoning the other one, I could have it closed so we are not running in circles.  Thanks for your consideration

[winchester73]

Remember me?  :D

I believe I've seen you somewhere before ...  :hug:

Some don't realize how close-knit the spyware hunter/killer community is, and how we spend time at multiple forums ...   :soapboax:

Rather than speed up the resolution, it just slows things down, and needlessly duplicates the efforts of both the infected user and the person(s) helping.

[kenshireen]

Hi Ken,  You've moved!  Remember me?  :D

I had asked for a scan log in your topic at another forum.
http://www.dslreports.com/forum/remark,15380932

Which forum are you going to stick with so we aren't duplicating our efforts?  If you are abandoning the other one, I could have it closed so we are not running in circles.  Thanks for your consideration

How could I ever forget you...Tremendous knowledge... The reason I posted in two forums was that I was hoping to get an answer as to why the program didn't disappear after running AAW...  I agree that for people like yourself who are trying to help others it does waste your time to reply to the same type post in different forums... I will defer to your judgment....which forum am I better off staying with..  I am determined to get my PC clean and protected for my  11 YO daugter who now has a PC in her room :flowers: (i hope you are really a jane and not a john)

[kenshireen]

[GR@PH;<'S   :breakkie:

Do you have to shut your pc down after the first scan or just rerun the scan.
Maybe this is where I was going wrong.

thanks again, ken

[GR@PH;<'S]

kenshireen,

Do you have to shut your pc down after the first scan or just rerun the scan.

I always Reboot (ie: Re-start your PC) only when I have removed items
other wise no just scan
GR@PH;<'S  :breakkie:

[Corrine]

Hi, Ken.  Just so you know, your two topics at Castle Cops has been closed.  Please continue here in t his thread.

The best way for us to help is to see a logfile.  It may also be necessary for you to scan in safe mode.  In addition, by reviewing a log, we may see something else that is preventing the removal of these objects.  For example, if you have a "real time monitoring" software, these need to be disabled.

[lsstoffe]

IBIS Toolbar has been updated but are still in the beta that has been released today. If you want you can sign up as beta tester, on your own risk of course :muahaha: and download that "ref-file".
Otherwise there will be one release at the end of this week that would remove it completely - I hope :tease:

[Corrine]

Thanks, lsstoffe.  Depending on the variant Ken has on his PC.  It would help to see a logfile.  That should show us if there are any running processes not being tagged by the current Def Files.

[Ripley]

Hey kenshireen,
Curious to watch this play out and get you some answers.  Looking forward to some more info from you.

And lsstoffe...wow, it's nice to have your input.  8)