4 replies to this topic

[john maciver]

hi,i'm running vista 32bit and use avg,windows defender and lavasoft se version 1.06r1

i use firefox,but last night decided to try internet explorer..just before i had,i'd ran se and it found the usual 4 items,tracking cookies..
after using internet explorer,i did another scan and it now finds 2 registry key warnings almost instantly,then it finds 4 other registry key associated with this and 2 other files..
i am unable to remove this, so each time i perform a scan,it all re-appears..tried quarantine too..same result.windows defender cant find it,nor can counterspy..
can anyone help me?


(i've just done a system restore and obviously adaware reverted to last update...it didn't find the registry keys..after i re-updated lavasoft,it then found them again..)




istbar Object Recognized!
Type : Regkey
Data :
TAC Rating : 7
Category : Malware
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{83a2f9b1-01a2-4aa5-87d1-45b6b8505e96}

istbar Object Recognized!
Type : Regkey
Data :
TAC Rating : 7
Category : Malware
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : typelib\{834f470c-e0fd-43d9-aa5f-c0b974be1b2b}


istbar Object Recognized!
Type : Regkey
Data :
TAC Rating : 7
Category : Malware
Comment :
Rootkey : HKEY_LOCAL_MACHINE
Object : SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83a2f9b1-01a2-4aa5-87d1-45b6b8505e96}



istbar Object Recognized!
Type : Regkey
Data :
TAC Rating : 7
Category : Malware
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : activetoolband.showbarobj

istbar Object Recognized!
Type : Regkey
Data :
TAC Rating : 7
Category : Malware
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : activetoolband.showbarobj.1

istbar Object Recognized!
Type : Regkey
Data :
TAC Rating : 7
Category : Malware
Comment :
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\downloadmanager

Edited by john maciver, 20 June 2007 - 04:58 PM.

[Oaken]

I had the same problem I don't think it is "istbar" because for me at least my PC wasn't showing any symptoms. Go to this link http://www.symantec....-091913-2632-99 and downlaod and run the removal tool to make sure.

I have run loads of removal tools and other ant-spyware tools and non of them can detect it but after I restart Ad-Aware always re-finds it.

Can anyone confirm that it is detecting Istbar falsely?


EDIT:

john maciver I have just re-read you post and I agree it does have something to do with the new defination files but is it bcause they are bugged or because it is finding something, that's what we need the answer too

Edited by Oaken, 21 June 2007 - 10:34 AM.

[john maciver]

http://www.symantec....-091913-2632-99 and downlaod and run the removal tool to make sure.

i forgot to say i'd tried that too!..it came up clear,so i'm well puzzled!

[Oaken]

I think it's safe to say that it is detecting it falsely then

[LS CalamityJane]

See this topic:
http://www.lavasofts...showtopic=10289