Thursday, November 6, 2008

Hotbar.ShopperReports Adware

How To Remove Remove Hotbar.ShopperReports?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Hotbar.ShopperReports is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Toolbar presents itself as a helpful add-on for Internet Explorer but it is a real pest.

Hotbar.ShopperReports Symptoms:

Files:
[%COMMON_DESKTOPDIRECTORY%]\Click to Find Errors.lnk
[%COMMON_DESKTOPDIRECTORY%]\Find And Fix Errors.lnk
[%COMMON_DESKTOPDIRECTORY%]\Free PC Wallpapers.lnk
[%DESKTOP%]\hbtools.exe
[%PROFILE_TEMP%]\cd10E.tmp.exe
[%PROFILE_TEMP%]\cd14D.tmp.exe
[%PROFILE_TEMP%]\cd15B.tmp.exe
[%PROFILE_TEMP%]\cd1BA.tmp.exe
[%PROFILE_TEMP%]\cd1CA.tmp.exe
[%PROFILE_TEMP%]\cd1EA.tmp.exe
[%PROFILE_TEMP%]\cd20.tmp.exe
[%PROFILE_TEMP%]\cd21.tmp.exe
[%PROFILE_TEMP%]\cd23B.tmp.exe
[%PROFILE_TEMP%]\cd26.tmp.exe
[%PROFILE_TEMP%]\cd316.tmp.exe
[%PROFILE_TEMP%]\cd31C.tmp.exe
[%PROFILE_TEMP%]\cd422.tmp.exe
[%PROFILE_TEMP%]\cd49.tmp.exe
[%PROFILE_TEMP%]\cd52.tmp.exe
[%PROFILE_TEMP%]\cd57.tmp.exe
[%PROFILE_TEMP%]\cd7E.tmp.exe
[%PROFILE_TEMP%]\cd84F.tmp.exe
[%PROFILE_TEMP%]\cd95.tmp.exe
[%PROFILE_TEMP%]\cdD8.tmp.exe
[%PROFILE_TEMP%]\cdDD9.tmp.exe
[%PROFILE_TEMP%]\ShprRprt.exe
[%SYSTEM%]\clzctixz.exe
[%SYSTEM%]\gdagsvbl.exe
[%DESKTOP%]\hbtools.exe
[%PROFILE_TEMP%]\cd2D.tmp
[%PROFILE_TEMP%]\cd2D.tmp.exe
[%PROFILE_TEMP%]\cd2E.tmp
[%PROFILE_TEMP%]\cd2E.tmp.exe
[%COMMON_DESKTOPDIRECTORY%]\Click to Find Errors.lnk
[%COMMON_DESKTOPDIRECTORY%]\Find And Fix Errors.lnk
[%COMMON_DESKTOPDIRECTORY%]\Free PC Wallpapers.lnk
[%DESKTOP%]\hbtools.exe
[%PROFILE_TEMP%]\cd10E.tmp.exe
[%PROFILE_TEMP%]\cd14D.tmp.exe
[%PROFILE_TEMP%]\cd15B.tmp.exe
[%PROFILE_TEMP%]\cd1BA.tmp.exe
[%PROFILE_TEMP%]\cd1CA.tmp.exe
[%PROFILE_TEMP%]\cd1EA.tmp.exe
[%PROFILE_TEMP%]\cd20.tmp.exe
[%PROFILE_TEMP%]\cd21.tmp.exe
[%PROFILE_TEMP%]\cd23B.tmp.exe
[%PROFILE_TEMP%]\cd26.tmp.exe
[%PROFILE_TEMP%]\cd316.tmp.exe
[%PROFILE_TEMP%]\cd31C.tmp.exe
[%PROFILE_TEMP%]\cd422.tmp.exe
[%PROFILE_TEMP%]\cd49.tmp.exe
[%PROFILE_TEMP%]\cd52.tmp.exe
[%PROFILE_TEMP%]\cd57.tmp.exe
[%PROFILE_TEMP%]\cd7E.tmp.exe
[%PROFILE_TEMP%]\cd84F.tmp.exe
[%PROFILE_TEMP%]\cd95.tmp.exe
[%PROFILE_TEMP%]\cdD8.tmp.exe
[%PROFILE_TEMP%]\cdDD9.tmp.exe
[%PROFILE_TEMP%]\ShprRprt.exe
[%SYSTEM%]\clzctixz.exe
[%SYSTEM%]\gdagsvbl.exe
[%DESKTOP%]\hbtools.exe
[%PROFILE_TEMP%]\cd2D.tmp
[%PROFILE_TEMP%]\cd2D.tmp.exe
[%PROFILE_TEMP%]\cd2E.tmp
[%PROFILE_TEMP%]\cd2E.tmp.exe

Folders:
[%APPDATA%]\hbtools
[%APPDATA%]\shopperreports
[%PROGRAM_FILES%]\shopperreports

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{0774f696-d801-4c18-81a7-a3a32b8bef19}
HKEY_CLASSES_ROOT\clsid\{1e6ac766-9094-4bcf-abd3-39e2eaea5fcd}
HKEY_CLASSES_ROOT\clsid\{2178c864-b8bc-41ae-a1fb-eb6a32f87eb1}
HKEY_CLASSES_ROOT\CLSID\{2A8A997F-BB9F-48F6-AA2B-2762D50F9289}
HKEY_CLASSES_ROOT\clsid\{454b4812-e572-4703-a1bb-63490809eac0}
HKEY_CLASSES_ROOT\clsid\{580a1f3f-89b4-433b-bbdb-b97aeb13f3fc}
HKEY_CLASSES_ROOT\clsid\{a798e2b4-b6a0-4b96-8c53-8ec7a3b0895a}
HKEY_CLASSES_ROOT\interface\{34f4d917-31e4-464c-b8b3-84c1ce76b395}
HKEY_CLASSES_ROOT\interface\{3f04cbf7-cd62-4403-b090-b432dedcb159}
HKEY_CLASSES_ROOT\interface\{3f6da8bb-3e45-44e2-b494-c55beaf3b41e}
HKEY_CLASSES_ROOT\interface\{8578d35e-c6c0-4808-9a80-0f6c29a2c423}
HKEY_CLASSES_ROOT\interface\{bc190da5-0187-4d99-b3ac-6c45ea1b9324}
HKEY_CLASSES_ROOT\rprtspsclient.psexecuter
HKEY_CLASSES_ROOT\rprtspsclient.psexecuter.1
HKEY_CLASSES_ROOT\shprrprts.hbax
HKEY_CLASSES_ROOT\shprrprts.hbax.1
HKEY_CLASSES_ROOT\shprrprts.hbcommband
HKEY_CLASSES_ROOT\shprrprts.hbcommband.1
HKEY_CLASSES_ROOT\shprrprts.hbinfoband
HKEY_CLASSES_ROOT\shprrprts.hbinfoband.1
HKEY_CLASSES_ROOT\shprrprts.iebutton
HKEY_CLASSES_ROOT\shprrprts.iebutton.1
HKEY_CLASSES_ROOT\shprrprts.iebuttona
HKEY_CLASSES_ROOT\shprrprts.iebuttona.1
HKEY_CLASSES_ROOT\shprrprts.smrtshprctl
HKEY_CLASSES_ROOT\shprrprts.smrtshprctl.1
HKEY_CURRENT_USER\software\microsoft\internet explorer\explorer bars\{2178c864-b8bc-41ae-a1fb-eb6a32f87eb1}
HKEY_CURRENT_USER\software\microsoft\internet explorer\explorer bars\{a798e2b4-b6a0-4b96-8c53-8ec7a3b0895a}
HKEY_CURRENT_USER\software\shopperreports
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2A8A997F-BB9F-48F6-AA2B-2762D50F9289}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hotbar shopperreports
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\shopper reports by hotbar
HKEY_LOCAL_MACHINE\software\shopperreports
HKEY_CLASSES_ROOT\clsid\{2a8a997f-bb9f-48f6-aa2b-2762d50f9289}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{2a8a997f-bb9f-48f6-aa2b-2762d50f9289}

Registry Values:
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{946b3e9e-e21a-49c8-9f63-900533fafe15}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\internet settings\5.0\user agent\post platform
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\shopperreports
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{946b3e9e-e21a-49c8-9f63-900533fafe15}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{946b3e9e-e21a-49c8-9f63-900533fafe15}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{946b3e9e-e21a-49c8-9f63-900533fafe15}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{946b3e9e-e21a-49c8-9f63-900533fafe15}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{946b3e9e-e21a-49c8-9f63-900533fafe15}, hoticon=[%PROGRAM_FILES%]\shopperreports\bin\2.0.0\shprrprt.dll
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{946b3e9e-e21a-49c8-9f63-900533fafe15}, icon=[%PROGRAM_FILES%]\shopperreports\bin\2.0.0\shprrprt.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\shopperreports
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\shopperreports
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\shopperreports
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\shopperreports
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\shopperreports


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:

1 comment:

Unknown said...

The above post listed Hotbar as a threat.
We would like to correct this listing.

Hotbar is a safe and secure program and is tested daily to make sure it is always safe.

We are certainly aware of the ever-growing number of harmful applications that have surfaced on the Web.
Please be assured that Hotbar, unlike such applications, will always make the user’s privacy our top priority. Hotbar is a safe and secure program which installs only upon user's download and does nothing without the user's consent.

Following are some clarifications on the function of Hotbar's software:

1. Hotbar does not build personal profiles.
2. Hotbar does not gather any data you enter in online forms.
3. Hotbar does not access any sensitive information entered while surfing, such as account details, passwords, credit card information, products you purchase online, etc.
4. Hotbar’s installation does not install any third party applications. In addition, Hotbar can be installed only through a standard download process initiated by the user from Hotbar's websites and is easy to uninstall.

Unfortunately, it appears that some scanning applications have mistakenly included Hotbar on their lists. We are aware of this situation and our legal team is contacting these companies in order to be removed from their lists.

Hotbar is a user friendly program, and it is of paramount importance to us that our program will function properly and will be easily installed and removed.

As a common practice among online companies, Hotbar can be easily removed from your computer via "Add\Remove programs" (Start > Control Panel > Add\Remove programs). In addition you may use our uninstaller (see instructions below) and you may also use the uninstall instructions we offer under the Hotbar component in the program's list.

Following this procedure, Hotbar and all Hotbar related components will be completely removed from your computer.

To remove Hotbar from your computer, please do the following:

1. Close all open applications/programs/windows
2. Go to Start > Settings > Control Panel > Add or Remove Programs
3. Find Hotbar on the list
4. Click the Change/Remove button
5. Check the components you wish to remove, click Next and follow the on-screen instructions.
6. Restart your computer

Alternatively, you can use our uninstaller:
1. Click on the following link - http://client.hotbar.com/downloads/Uninstaller/Uninstaller.exe
2. Click Run and follow on-screen instructions
3. Restart your computer.

Hotbar support team can be easily contacted through our help site: http://hotbar.com/helpdesk/faq/index.asp or directly at: support@hotbar.com