Home & Home OfficeBusinessPartnersClubAbout Security Stronghold

Get rid of IBIS/Hunt Toolbar and EDowST3.exe

Be prepared to find your problem with IBIS/Hunt Toolbar disappeared and recover EDowST3.exe just now!

You can write a message to our support team with the form below. Try to describe your problem in brief and specifically. Thanks to your well-done description our support team will answer all your questions and propose a suitable solution just in several minutes after we receive your enquiry. If you describe your problem with IBIS/Hunt Toolbar completely enough our assistants will give you a step-by-step recommendation on how to solve it.

Ask your question below and we'll answer you in 10 minutes or even less. Don't forget to check your mailbox!

Notification:

1) Spam is the such annoying thing for us as it is for you. We won't use your email in any ways besides supporting you to solve IBIS/Hunt Toolbar problems or anything assosiated with them. We'll close your email for any third party and ban off-site access.
2) You should fill all fields in this form for succesful support.

Problem solving service is provided by Security Stronghold company which is member of «Software Industry Professionals». Give us your problem and get back for your solution!

Effective solution is guaranteed

Specification and description of IBIS/Hunt Toolbar and ways to repair EDowST3.exe file

Solve the problem manually

Get free of a problem by downloading automatical solution

Ask a question about IBIS/Hunt Toolbar and EDowST3.exe error

Threat's dossier

	Name of the threat: IBIS/Hunt Toolbar
	Command or file name: EDowST3.exe
	Threat type: Spyware\trojan
	Affected OS: Win32 (Windows 9x, Windows XP, Windows Vista)

Ways for invasion

The ingressed threat makes its copy on your computer and launches IBIS/Hunt Toolbar system process using the names similar to EDowST3.exe or IBIS/Hunt Toolbar. It initiates a creation of new startup key under the name IBIS/Hunt Toolbar and value EDowST3.exe.

If you need more information about EDowST3.exe you should contact to us with the form above .

» Fix EDowST3.exe with True Sword Threat Remover

Recommended Solution

You may use our quick and easy solution which we developed specially to solve IBIS/Hunt Toolbar and many other malicious programs. 499 065 malicious programs will be destroyed with the help of True Sword. You will forget what are worms, trojans, adware, spyware/trojans, badware/spyware, dialers, hijackers, rats, spyware/adware, viruses, parasites, keyloggers, downloaders and other types of malicious programs. True Sword ensures your security and trouble-free work at any time. As a rule anti-virus software can't cope with some malicious programs and you are lost unprotected. On contrary, True Sword will destroy adware, spyware, rats and viruses easily and quickly. Thanks to True Sword you are sure for your privacy. All malware becomes harmless when True Sword is installed.

» True Sword Free Download

Manual solution of IBIS/Hunt Toolbar problem

In order to make progress in getting rid of EDowST3.exe manually you should delete all files assosiated with IBIS/Hunt Toolbar infection, including destruction of its registry keys and invalid DLLs. It is also recommended to delete files with names similar to IBIS/Hunt Toolbar from startup list. Sometimes IBIS/Hunt Toolbar can corrupt DLLs that can become a cause of unstability of your Windows. You will have to recover it from distribution to make it work correctly.To get rid of this threat, be assured to follow next points:

1. Destroy the malicious process and all associated files:

• edow_as2.exe
• qdow_as2.dll
• rmhgxlmu.wzg
• rtal.exe
• tbssaver.scr
• winrd.exe
• winupdak.dll
• WTools*.dll
• WToolsB.exe

Notification: Be careful while deleting anything from system files. This is dangerous to destroy a valid process that can carry result in Windows disfunction. It is a cute trick of malware to hide behind valid files and use some names similar to the ones DLLs use. To escape unpredictable results we suggest you to use True Sword to ensure your system.

2. Destroy all assosiated malware:

• C:\Program Files\common files\btlink\
• C:\Program Files\common files\msiets\
• C:\Program Files\common files\wintools\
• C:\Program Files\search toolbar\
• Documents and Settings\All Users\Start Menu\Programs\Web Search Tools\
• %commonprogramfiles%\WinTools\

3. Clean up all infected registry keys and\or values:

• Key: btieinscriptconfigproj.btieinscriptc

• Key: BTIEINScriptConfigProj.BTIEINScriptConfig

• Key: btlink.relatedlinksProtocol

• Key: btlink.ResProtocol

• Key: CLSID\{0a68c5a2-64ae-4415-88a2-6542304a4745}

• Key: CLSID\{26E8361F-BCE7-4F75-A347-98C88B418322}

• Key: CLSID\{3C53010D-97BA-4650-84C5-1A6FAA31055E}

• Key: CLSID\{59450db0-341d-4436-b380-b8377d8b6796}

• Key: CLSID\{63B78BC1-A711-4D46-AD2F-C581AC420D41}

• Key: CLSID\{8A05273A-2EA5-42DE-AA75-59EA7D9D50D7}

• Key: CLSID\{a6250fb8-2206-499e-a7aa-e1ec437e71c0}

• Key: CLSID\{c5183abc-eb6e-4e05-b8c9-500a16b6cf94}

• Key: CLSID\{CD8D1CAA-FE4A-45DF-A06C-028AAF1821DE}

• Key: CLSID\{d6dff6d8-b94b-4720-b730-1c38c7065c3b}

• Key: clsid\{d6e66235-7aa6-44ed-a06c-6f2033b1d993}

• Key: Common.Buttons

• Key: Interface\{234F09FB-FE89-4C6D-9203-31832FC051C3}

• Key: Interface\{365B9A54-E613-46E5-9DB1-4F91A9DE80BD}

• Key: Interface\{618BE527-B7F5-417C-BC51-98FDC2D6DE61}

• Key: Interface\{66C22569-F05C-4A70-A142-763B337E1002}

• Key: Interface\{7B8BD940-B1EF-460C-85A2-9ACAAF7F9303}

• Key: Interface\{99AA88D1-D9D3-410A-BE9E-044F94C183DA}

• Key: Interface\{D1951679-1D52-43FC-9585-0737143585F5}

• Key: Interface\{F273D4EA-2025-4410-8408-251A0CD46BE7}

• Key: protocols\handler\relatedlinks

• Key: typelib\{26e8361f-bce7-4f75-a347-98c88b418328}

• Key: typelib\{8992b6ca-b8c9-4aed-bf89-0a17f6296a06}

• Key: typelib\{d6dff6d8-b94b-4720-b730-1c38c7065c3b}

• Key: software\msiets

• Key: software\msietslink

• Key: Software\BTIEIN

• Key: Software\BTLINK

• Key: software\classes\clsid\{26e8361f-bce7-4f75-a347-98c88b418322}

• Key: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{26E8361F-BCE7-4F75-A347-98C88B418322}

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0A68C5A2-64AE-4415-88A2-6542304A4745}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{63b78bc1-a711-4d46-ad2f-c581ac420d41}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{87766247-311c-43b4-8499-3d5fec94a183}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{a6250fb8-2206-499e-a7aa-e1ec437e71c0}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{c5183abc-eb6e-4e05-b8c9-500a16b6cf94}

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D6DFF6D8-B94B-4720-B730-1C38C7065C3B}

• Key: software\microsoft\windows\currentversion\explorer\browser helper objects\{d6e66235-7aa6-44ed-a06c-6f2033b1d993}

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\STO

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/QDow_AS2.dll

• Key: software\microsoft\windows\currentversion\uninstall\btlink_dll

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HAUTO_UNINSTALL

• Key: SYSTEM\CurrentControlSet\Services\TBPSSvc

• Key: .DEFAULT\Software\ORL\VNCHooks\Application_Prefs\TBPS.EXE

• Key: CLSID\{69357D4E-BF4D-4651-91E9-52ECD45A0128}

• Key: clsid\{87067f04-de4c-4688-bc3c-4fcf39d609e7}

• Key: clsid\{87766247-311c-43b4-8499-3d5fec94a183}

• Key: CLSID\{8DA5457F-A8AA-4CCF-A842-70E6FD274094}

• Key: clsid\{a8deb4a5-d9ef-4d21-b4f6-921475004e7d}

• Key: CLSID\{CABCF5E7-0C79-4F1C-909D-B9CF68FED746}

• Key: CLSID\~8952A998-1E7E-4716-B23D-3DBE03910972}

• Key: Interface\{C380566D-F343-42AB-987B-6B38A1A35747}

• Key: msiein

• Key: msiets

• Key: PROTOCOLS\Name-Space Handler\res\btlink.ResProtocol

• Key: protocols\name-space handler\res\wtoolsb.resprotocol

• Key: radio.radioplayer

• Key: search toolbar

• Key: SOFTWARE\CLASSES\CLSID\{356639AA-E878-40FF-B2F8-E22FA87DF389}

• Key: software\classes\protocols\name-space handler\res\wtoolsb.resprotocol

• Key: SOFTWARE\CLASSES\TypeLib\{5CF68A06-673D-4619-A805-C8FC9AC611DD}

• Key: software\classes\wtoolsb.resprotocol

• Key: software\folder manager

• Key: software\microsoft\code store database\distribution units\{59450DB0-341D-4436-B380-B8377D8B6796}

• Key: software\microsoft\code store database\distribution units\{87067f04-de4c-4688-bc3c-4fcf39d609e7}

• Key: software\microsoft\code store database\distribution units\{D6E66235-7AA6-44ED-A06C-6F2033B1D993}

• Key: Software\Microsoft\RAS Autodial\Addresses\www.websearch.com

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{26E8361F-BCE7-4F75-A347-98C88B418322}

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3C53010D-97BA-4650-84C5-1A6FAA31055E}

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8189480F-AA04-4BBD-82E5-001B4926BD45}

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinTools

• Key: software\wintools

• Key: SYSTEM\ControlSet001\Services\TBPSSvc

• Key: SYSTEM\ControlSet001\Services\WinToolsSvc

• Key: SYSTEM\ControlSet002\Services\TBPSSvc

• Key: SYSTEM\ControlSet002\Services\WinToolsSvc

• Key: SYSTEM\ControlSet003\Services\TBPSSvc

• Key: SYSTEM\ControlSet003\Services\WinToolsSvc

• Key: SYSTEM\ControlSet004\Services\TBPSSvc

• Key: SYSTEM\ControlSet004\Services\WinToolsSvc

• Key: SYSTEM\ControlSet005\Services\TBPSSvc

• Key: SYSTEM\ControlSet005\Services\WinToolsSvc

• Key: SYSTEM\CurrentControlSet\Services\WinToolsSvc

• Key: tbps.pluginst

• Key: typelib\{1d4db7d0-6ec9-47a3-bd87-1e41684e07bb}

• Key: TypeLib\{37AC49E3-E906-4BD8-AE83-D0F7FB48FD17}

• Key: TypeLib\{B23B3ADD-84B1-414A-92B9-0CABE5A781F4}

• Key: typelib\{d8bd4ded-5bb2-4d4e-9a6a-f10244fed7d6}

• Key: TypeLib\{DB9A4E78-35DF-4A54-B6C5-C5190CEAF949}

• Key: WSG.WSGObj

• Key: wtoolsb.resprotocol

• Key: software\microsoft\internet explorerinternet0%\toolbar
  Value: {339bb23f-a864-48c0-a59f-29ea915965ec}

• Key: software\microsoft\internet explorerinternet0%\Toolbar
  Value: {57E69D5A-6539-4d7d-9637-775DE8A385B4}

• Key: software\microsoft\internet explorerinternet0%\toolbar
  Value: {87766247-311c-43b4-8499-3d5fec94a183}

• Key: software\microsoft\internet explorerinternet0%\toolbar
  Value: {8a05273a-2ea5-42de-aa75-59ea7d9d50d7}

• Key: software\microsoft\internet explorerinternet0%\toolbar
  Value: {c5183abc-eb6e-4e05-b8c9-500a16b6cf94}

• Key: software\microsoft\internet explorerinternet0%\urlsearchhooks
  Value: {87766247-311c-43b4-8499-3d5fec94a183}

• Key: software\microsoft\internet explorerinternet0%\URLSearchHooks
  Value: {8952A998-1E7E-4716-B23D-3DBE03910972}

• Key: software\microsoft\internet explorerinternet0%\URLSearchHooks
  Value: {D6DFF6D8-B94B-4720-B730-1C38C7065C3B}

• Key: SOFTWARE\Microsoft\Internet Explorer\Toolbar
  Value: {339BB23F-A864-48C0-A59F-29EA915965EC}

• Key: Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser
  Value: {339BB23F-A864-48C0-A59F-29EA915965EC}

• Key: Software\Microsoft\Internet Explorer\URLSearchHooks
  Value: _{8952A998-1E7E-4716-B23D-3DBE03910972}

• Key: Software\Microsoft\Internet Explorer\URLSearchHooks
  Value: {8952A998-1E7E-4716-B23D-3DBE03910972}

• Key: Software\Microsoft\Internet Explorer\URLSearchHooks
  Value: ~8952A998-1E7E-4716-B23D-3DBE03910972}

• Key: software\microsoft\windows\currentversion\explorer
  Value: ServerProc

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
  Value: %commonprogramfiles%\MSIETS\

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage
  Value: C:/WINDOWS/Downloaded Program Files/QDow_AS2.dll\{87067F04-DE4C-4688-BC3C-4FCF39D609E7}

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\0001
  Value: tbps

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\0001
  Value: wintools

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce
  Value: tbps

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce
  Value: wintools

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
  Value: C:\Windows\Downloaded Program Files\QDow_AS2.dll

Notification: It is unsafe to make any changes amongst registry entries when you are not sure what to do. It is strongly recommended to keep out of them. You should only delete registry entries using professional guidance. If you use True Sword you will have no need in manual changes in Registry.

» Get True Sword for Free

Next threat: IBS-Dialer »

Learn more about IBIS/Hunt Toolbar and EDowST3.exe »

« Back to catalog