Help - Search - Members - Calendar
Full Version: Istbar Removal
Lavasoft Support Forums > Archived Topics > Archives: Resolved/Inactive Topics > Resolved/Inactive False Postive Issues
john maciver
hi,i'm running vista 32bit and use avg,windows defender and lavasoft se version 1.06r1

i use firefox,but last night decided to try internet explorer..just before i had,i'd ran se and it found the usual 4 items,tracking cookies..
after using internet explorer,i did another scan and it now finds 2 registry key warnings almost instantly,then it finds 4 other registry key associated with this and 2 other files..
i am unable to remove this, so each time i perform a scan,it all re-appears..tried quarantine too..same result.windows defender cant find it,nor can counterspy..
can anyone help me?


(i've just done a system restore and obviously adaware reverted to last update...it didn't find the registry keys..after i re-updated lavasoft,it then found them again..)




istbar Object Recognized!
Type : Regkey
Data :
TAC Rating : 7
Category : Malware
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{83a2f9b1-01a2-4aa5-87d1-45b6b8505e96}

istbar Object Recognized!
Type : Regkey
Data :
TAC Rating : 7
Category : Malware
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : typelib\{834f470c-e0fd-43d9-aa5f-c0b974be1b2b}


istbar Object Recognized!
Type : Regkey
Data :
TAC Rating : 7
Category : Malware
Comment :
Rootkey : HKEY_LOCAL_MACHINE
Object : SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83a2f9b1-01a2-4aa5-87d1-45b6b8505e96}



istbar Object Recognized!
Type : Regkey
Data :
TAC Rating : 7
Category : Malware
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : activetoolband.showbarobj

istbar Object Recognized!
Type : Regkey
Data :
TAC Rating : 7
Category : Malware
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : activetoolband.showbarobj.1

istbar Object Recognized!
Type : Regkey
Data :
TAC Rating : 7
Category : Malware
Comment :
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\downloadmanager
Oaken
I had the same problem I don't think it is "istbar" because for me at least my PC wasn't showing any symptoms. Go to this link http://www.symantec.com/security_response/...-091913-2632-99 and downlaod and run the removal tool to make sure.

I have run loads of removal tools and other ant-spyware tools and non of them can detect it but after I restart Ad-Aware always re-finds it.

Can anyone confirm that it is detecting Istbar falsely?


EDIT:

john maciver I have just re-read you post and I agree it does have something to do with the new defination files but is it bcause they are bugged or because it is finding something, that's what we need the answer too smile.gif
john maciver
http://www.symantec.com/security_response/...-091913-2632-99 and downlaod and run the removal tool to make sure.

i forgot to say i'd tried that too!..it came up clear,so i'm well puzzled! smile.gif
Oaken
I think it's safe to say that it is detecting it falsely then biggrin.gif
LS CalamityJane
See this topic:
http://www.lavasoftsupport.com/index.php?showtopic=10289
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.