ISTbar malware

[kiri]

Hi all

I'm having some difficulty removing the ISTbar malware from one of my machines.

Symantecs removal tool didn't even see it so I went ahead and deleted or disabled associated registry keys which has left me with a harmless version. Still a nuisance with my AV picking it up every few seconds.

The skeletal remains consist of one registry entry called "restore" (go figure), of which I've tried to disable via corrupting the binary code and/or "", but it restores itself. Yay!

I've done the scan and repeated the work from safe mode/system restore off. No joy.

BTW. I'm a PC tech but this little darling has got me stumped.

Sasser was easy compared to this ***** of a thing.

Appreciate any help.

Cheers!
kiri

 

[rstones12]

kiri,

ISTbar has few variants, maybe you could post a HijackThis log and someone here can take a look.

Here is the forum:
http://www.techist.com/forumdisplay.php?s=&forumid=126

ISTbar can sometimes install little nasties like:
RapidBlaster
and
DownloadPlus

Thanks,
rstones12

 

[TrukinDave]

That is the reason I only have yahoo toolbar on my PC, Most the toolbars are nuffin more than viruses and spyware

 

[rstones12]

TrukinDave,

Go ahead and post a HJT log so that we can review what you have.

Thanks,
rstones12