Remove HotBar Adware, Delete hbinst.exe, hotbar.exe, Removing Tool for weatherontray


Home	Articles	File Center	Privacy	Contact us	Links

Now Position: Home>Tech Articles>How to Remove Annoying Spyware and Adware

How to Remove HotBar Adware?

HotBar Description:

Marketed as a program to add graphical skins to IE toolbars, it also adds its own toolbar. It monitors all URLs you visit to add link buttons to its toolbar dependent on the site you are visiting.

HotBar Automatic Removal:

Using Spyware Doctor to detect and remove HotBar AUTOMATICALLY!

HotBar Manual Removal:

Removable from "Add/Remove Programs" on the Control Panel under the name 'HotBar' or 'Web Tools by Hotbar'. However it leaves two copies of its installer and other files and a number of registry entries.

Kill these running processes with Task Manager:
c:\program files\hotbar\bin\4.2.6.0\hbinst.exe
c:\program files\hotbar\bin\hbinst.exe
c:\windows\system32\hbinst.exe
hotbar.exe
profilepath+\local settings\temp\hbinst.exe
programfilesdir+\hbinst\hbinst.exe
programfilesdir+\hotbar\bin\4.1.8.0\hbinst.exe
programfilesdir+\hotbar\bin\4.2.6.0\hbinst.exe
programfilesdir+\hotbar\bin\4.2.8.0\hbinst.exe
programfilesdir+\hotbar\bin\4.3.1.0\hbinst.exe
programfilesdir+\hotbar\bin\4.3.1.0\hbsrv.exe
programfilesdir+\hotbar\bin\4.3.8.0\hbinst.exe
programfilesdir+\hotbar\bin\4.3.8.0\hbsrv.exe
programfilesdir+\hotbar\bin\4.4.6.0\weatherontray.exe
programfilesdir+\hotbar\bin\4.4.9.0\
programfilesdir+\hotbar\bin\4.5.0.0\hbinst.exe
programfilesdir+\hotbar\bin\4.5.0.0\hbsrv.exe
programfilesdir+\hotbar\bin\4.5.0.0\weatherontray.exe
programfilesdir+\hotbar\bin\451~1.0\sbinst.exe
programfilesdir+\hotbar\bin\hbinst.exe
systemroot+\system\hbinst.exe
systemroot+\system32\hbinst.exe
systemroot+\temp\hbinst.exe
Go to the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run.
If you find the value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\hotbar, delete it and reboot the machine immediately.
If you find the value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\spam blocker for outlook express, delete it and reboot the machine immediately.
If you find the value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\weatherontray, delete it and reboot the machine immediately.
Unregister these DLLs with Regsvr32, then reboot:
c:\program files\hotbar\bin\4.2.6.0\hbinstie.dll
c:\program files\hotbar\bin\hbinstie.dll
googletoolbar_en_2.0.94-big.dll
nphotbar.dll
programfilesdir+\hotbar\bin\4.1.8.0\hbcoresrv.dll
programfilesdir+\hotbar\bin\4.1.8.0\hbhostie.dll
programfilesdir+\hotbar\bin\4.1.8.0\hbhostoe.dll
programfilesdir+\hotbar\bin\4.1.8.0\hbhostol.dll
programfilesdir+\hotbar\bin\4.1.8.0\hbinstie.dll
programfilesdir+\hotbar\bin\4.1.8.0\hbtoolbar.dll
programfilesdir+\hotbar\bin\4.2.6.0\hbinstie.dll
programfilesdir+\hotbar\bin\4.2.8.0\hbinstie.dll
programfilesdir+\hotbar\bin\4.3.1.0\dbenderc.dll
programfilesdir+\hotbar\bin\4.3.6.0\
programfilesdir+\hotbar\bin\4.3.8.0\
programfilesdir+\hotbar\bin\4.4.9.0\contact.dll
programfilesdir+\hotbar\bin\4.5.0.0\wallpaper.dll
programfilesdir+\hotbar\bin\hbinstie.dll
programfilesdir+\hotbar\hotbar.dll
systemroot+\system\ctor.dll
systemroot+\system\hbhostie.dll
systemroot+\system32\ctor.dll
systemroot+\system32\hbhostie.dll
Remove these registry items (if present) with RegEdit:
HKEY_CLASSES_ROOT\{69fd62b1-0216-4c31-8d55-840ed86b7c8f}
HKEY_CLASSES_ROOT\appid\{b701a705-f828-11d4-a466-00508b5ba2df}
HKEY_CLASSES_ROOT\appid\hbsrv.exe
HKEY_CLASSES_ROOT\atlnet.hbwebmailsend
HKEY_CLASSES_ROOT\atlnet.hbwebmailsend.1
HKEY_CLASSES_ROOT\hbcoreservices.lfgax
HKEY_CLASSES_ROOT\hbcoreservices.lfgax.1
HKEY_CLASSES_ROOT\hbcoresrv.hbcoreservices
HKEY_CLASSES_ROOT\hbcoresrv.hbcoreservices.1
HKEY_CLASSES_ROOT\hbhostie.hbbho.1
HKEY_CLASSES_ROOT\hbhostol.
HKEY_CLASSES_ROOT\hbinstie.hbinstobj
HKEY_CLASSES_ROOT\hbinstie.hbinstobj.1
HKEY_CLASSES_ROOT\hbsrv.hbcoreservices
HKEY_CLASSES_ROOT\hbsrv.hbcoreservices.1
HKEY_CLASSES_ROOT\hbtoolbar.
HKEY_CLASSES_ROOT\hotbar.
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{204f937e-519e-4597-96fa-8f1f59f3cb6d}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{b195b3b3-8a05-11d3-97a4-0004aca6948e}
HKEY_CURRENT_USER\software\hotbar
HKEY_CURRENT_USER\software\microsoft\internet explorer\explorer bars\{becafc17-baf9-11d4-b492-00d0b77f0a6d}
HKEY_CURRENT_USER\software\microsoft\internet explorer\explorer bars\{ff6b2fd5-093c-4d4f-bb98-5641130a9de6}
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\shellbrowser\{b195b3b3-8a05-11d3-97a4-0004aca6948e}
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser\{b195b3b3-8a05-11d3-97a4-0004aca6948e}
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\internet settings\user agent\hotbar 3.0
HKEY_LOCAL_MACHINE\clsid\{204f937e-519e-4597-96fa-8f1f59f3cb6d}
HKEY_LOCAL_MACHINE\clsid\{954814c0-40f3-4249-8528-b4922cd2964e}
HKEY_LOCAL_MACHINE\clsid\{b195b3b3-8a05-11d3-97a4-0004aca6948e}
HKEY_LOCAL_MACHINE\hbhostol.hbcmndbaresink
HKEY_LOCAL_MACHINE\hbhostol.hbcmndbaresink.1
HKEY_LOCAL_MACHINE\hbhostol.hbwebmailsend
HKEY_LOCAL_MACHINE\hbhostol.hbwebmailsend.1
HKEY_LOCAL_MACHINE\software\classes\contact.
HKEY_LOCAL_MACHINE\software\classes\hbcoreservices.
HKEY_LOCAL_MACHINE\software\classes\hbcoresrv.
HKEY_LOCAL_MACHINE\software\classes\hbhostie.hbbho.1
HKEY_LOCAL_MACHINE\software\classes\hbhostol.
HKEY_LOCAL_MACHINE\software\classes\hbinstie.
HKEY_LOCAL_MACHINE\software\classes\hbsrv.
HKEY_LOCAL_MACHINE\software\classes\hbtoolbar.
HKEY_LOCAL_MACHINE\software\classes\hotbar.
HKEY_LOCAL_MACHINE\software\classes\wallpaper.
HKEY_LOCAL_MACHINE\software\hotbar
HKEY_LOCAL_MACHINE\software\hotbar\hotbar\
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{69fd62b1-0216-4c31-8d55-840ed86b7c8f}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{a80f2db2-80a9-4834-8f5a-4ab70f4ef4c3}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{b195b3b3-8a05-11d3-97a4-0004aca6948e}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{b195b3b3-8a05-11d3-97a4-0004aca6948e}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\b195b3b3-8a05-11d3-97a4-0004aca6948e
HKEY_LOCAL_MACHINE\software\microsoft\office\outlook\addins\hbhostol.
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{204f937e-519e-4597-96fa-8f1f59f3cb6d}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{b195b3b3-8a05-11d3-97a4-0004aca6948e}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\internet settings\user agent\post platform\hotbar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\hotbar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\spam blocker for outlook express
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\weatherontray
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbar uninstall
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbara\
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarb\
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbarc\
HKEY_USERS\.default\software\hotbar
HKEY_USERS\.default\software\microsoft\internet explorer\explorer bars\{ff6b2fd5-093c-4d4f-bb98-5641130a9de6}
HKEY_USERS\s-1-5-21-1960408961-1993962763-1343024091-1003\software\hotbar
HKEY_USERS\s-1-5-21-1960408961-1993962763-1343024091-1003\software\microsoft
\internet explorer\explorer bars\{becafc17-baf9-11d4-b492-00d0b77f0a6d}
HKEY_USERS\s-1-5-21-329068152-1677128483-854245398-500\software\microsoft\internet explorer\explorer bars\{becafc17-baf9-11d4-b492-00d0b77f0a6d}
HKEY_USERS\s-1-5-21-725345543-1078145449-1343024091-500\software\microsoft
\internet explorer\explorer bars\{becafc17-baf9-11d4-b492-00d0b77f0a6d}
HKEY_USERS\s-1-5-21-796845957-842925246-1060284298-500\software\hotbar
HKEY_USERS\s-1-5-21-796845957-842925246-1060284298-500\software\microsoft\internet explorer\explorer bars\{becafc17-baf9-11d4-b492-00d0b77f0a6d}
Remove these files (if present) with Windows Explorer:
bubbles.cdf
bubbles.xip
bubbles_bubbles.bbl
bubbles_images.res
bubbles_images.xip
bubbles_images2.res
bubbles_images2.xip
c:\documents and settings\administrator\desktop\wowpapers.lnk
c:\hotbar\hotbar new files\hotbar.log
c:\program files\hotbar\bin\4.2.6.0\hbinst.exe
c:\program files\hotbar\bin\4.2.6.0\hbinstie.dll
c:\program files\hotbar\bin\4.2.6.0\install.scr
c:\program files\hotbar\bin\4.2.8.0\install.scr
c:\program files\hotbar\bin\hbinst.exe
c:\program files\hotbar\bin\hbinstie.dll
c:\windows\downloaded program files\hotbar.inf
c:\windows\system32\hbinst.exe
profilepath+\local settings\temp\hbinst.exe
programfilesdir+\hbinst\hbinst.exe
programfilesdir+\hotbar\bin\
programfilesdir+\hotbar\hotbar.dll
programfilesdir+\hotbar\hotbar.log
progress.res
progress.xip
samplegroups.txt
samplegroups.xip
setupapi.log
systemroot+\downloaded program files\hotbar.inf
systemroot+\system\ctor.dll
systemroot+\system\hbhostie.dll
systemroot+\system\hbinst.exe
systemroot+\system32\ctor.dll
systemroot+\system32\hbhostie.dll
systemroot+\system32\hbinst.exe
systemroot+\temp\hbinst.exe
wbemess.lo_
weatherontray.exe-01b746fd.pf
weatherontray.exe-1c07a355.pf
Remove these directories (if present) with Windows Explorer:
c:\documents and settings\emma umber\application data\hotbar
c:\documents and settings\emma umber\application data\hotbar\v3.0\hotbar
c:\documents and settings\ray umber\application data\hotbar
c:\documents and settings\ray umber\application data\hotbar\v3.0\hotbar
c:\documents and settings\saly umber\application data\hotbar
c:\documents and settings\saly umber\application data\hotbar\v3.0\hotbar
c:\documents and settings\sarah umber\application data\hotbar
c:\documents and settings\sarah umber\application data\hotbar\v3.0\hotbar
c:\program files\hotbar
profilepath+\application data&
profilepath+\application data& </div>
profilepath+\application data\hotbar
programfilesdir+\hbinst
programfilesdir+\hotbar
programfilesdir+\hotbar\bin\4.4.6.0
programfilesdir+\hotbar\bin\4.4.9.0
programfilesdir+\hotbar\bin\4.5.0.0
systemroot+\application data\hotbar
systemroot+\system32\config\systemprofile\application data\hotbar

In fact we strongly recommend to use Spyware Doctor to remove hotbar or other spyware as manually uninstalling and editing can seriously hurt your system.

Using Spyware Doctor to detect and remove HotBar AUTOMATICALLY!

More Removal Instructions for Adware/Spyware Programs - 'H'

Remove H@tKeysH@@k	Remove Hacker Spider
Remove Hacker Wacker 2.5.30	Remove HaczYK
Remove Haldex	Remove HelpExpress
Remove Hiddukel III	Remove HighSpeed Connector
Remove Home Keylogger	Remove Home Keylogger 1.60
Remove Hosts.vbs	Remove HotActionDating
Remove HotBar	Remove Hotra
Remove Httper	Remove Hugesearch.net
Remove Huntbar and Search Toolbar	Remove HXDL

More Removal Instructions for More Adware/Spyware Programs

Premiere Software

BPS SpyWare and AdWare Remover
A multi AdWare, SpyWare, Thiefware, Big Brotherware, Key loggers, Trojans, Browser Hijackers, Dialers, Mal ware removal utility with multi-language support ...

XBlock X-Cleaner Deluxe
X-Cleaner is hands-down the most robust and feature packed anti-spyware and system cleaning tool on the planet ...

BitDefender
Integrates antivirus, firewall and antispam modules into one comprehensive security package, tailored to meet the needs of home and corporate Internet users worldwide ...


	Anti-Keylogger		Password Pecovery
	Anti-Spam		PC Monitoring
	Anti-Spyware		Personal Firewall
	Anti-Virus		System Tools
	Online Privacy

	PQ DVD to iPod Video Suite PQ DVD to iPod Video Suite (PQ DVD to iPod + iPod Video Converter) is a One-Click, All-In-One solution to convert DVD, Tivo, DivX, MPEG, WMV, AVI, RealMedia and many more to iPod Video ...
	Kaspersky Internet Security Internet Security processes all incoming and outgoing data on your computer, including email, Internet traffic and network interaction, without the need for additional security applications ...
	Cucusoft MPEG/AVI to DVD/VCD/SVCD Converter Pro It enables you to convert and burn any video file directly to VCD, DVD, SVCD, MPEG1 and MPEG2 format. Pro version included all the features of the lite version ...
	SpyNoMore SpyNoMore scans, cleans and blocks spyware as well as any other good anti-spyware product, but with one big advantage, Custom Fix (patent pending). Spyware programs are growing more sophisticated by the day ...