ISTBAR.5

  • Thread starter Thread starter DB
  • Start date Start date
D

DB

my pc is reporting that i have the DOWNLOADER.ISTBAR.5 virus on my system..

i am running AVG version 7 , I have tried deleteing the file but when i do
another scan immediately...it's back...

I have tried SPYBOT ...but again......it gets detected......and supposedly
"fixed" but as soon as i scan again....it's back...

im not sure what, if any damage is being done......

how do i get rid of this - anyone got any clues please.

Thanks

DB :)
 
1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download SYSCLEAN.COM and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt333.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM.

2) Update Adaware with the latest definitions.
3) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode and shutdown as many applications as possible.
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) If you are using WinME or WinXP, Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) If you are using WinXP, create a new Restore point

* * * Please report back your results * * *

--
Dave
http://www.claymania.com/removal-trojan-adware.html




| my pc is reporting that i have the DOWNLOADER.ISTBAR.5 virus on my system..
|
| i am running AVG version 7 , I have tried deleteing the file but when i do
| another scan immediately...it's back...
|
| I have tried SPYBOT ...but again......it gets detected......and supposedly
| "fixed" but as soon as i scan again....it's back...
|
| im not sure what, if any damage is being done......
|
| how do i get rid of this - anyone got any clues please.
|
| Thanks
|
| DB :)
|
|
|
 
David H. Lipman - 06.01.2005 18:13 :
* * * Please report back your results * * *

| my pc is reporting that i have the DOWNLOADER.ISTBAR.5 virus on my system..
|
| i am running AVG version 7 , I have tried deleteing the file but when i do
| another scan immediately...it's back...
|
| I have tried SPYBOT ...but again......it gets detected......and supposedly
| "fixed" but as soon as i scan again....it's back...
|
| im not sure what, if any damage is being done......
|
| how do i get rid of this - anyone got any clues please.
|
| Thanks
|
| DB :)
|
|
|
Click to expand...

Hi David,

it seems you are a "regular" here. Please give a good example and do not
(unnecessary) quote even after your SIG delimiter which should expand
more than about 5 lines. That's not RFC conform and not a good example
even for all the "newbies" reading this NG. THX for your kind understanding.
 
Peter:

I feel there is NO need to snip the original poster's (OP's) post. If this was a reply to a
reply then a snip is a good idea. The OP's post was short and my reply only made the total
~3KB. Hardly a requirement for snipping !

--
Dave





|
| Hi David,
|
| it seems you are a "regular" here. Please give a good example and do not
| (unnecessary) quote even after your SIG delimiter which should expand
| more than about 5 lines. That's not RFC conform and not a good example
| even for all the "newbies" reading this NG. THX for your kind understanding.
|
| --
| by(e) PS
|
| spam will be killed
|
 
David said:
I feel there is NO need to snip the original poster's (OP's) post. If this was a reply to a
reply then a snip is a good idea. The OP's post was short and my reply only made the total
~3KB. Hardly a requirement for snipping !
Click to expand...

Would you mind adjusting your line length to about 76 characters? ;-)
 
I'll give it consideration.

--
Dave




| David H. Lipman wrote:
|
| > I feel there is NO need to snip the original poster's (OP's) post. If this was a reply
to a
| > reply then a snip is a good idea. The OP's post was short and my reply only made the
total
| > ~3KB. Hardly a requirement for snipping !
|
| Would you mind adjusting your line length to about 76 characters? ;-)
|
| --
| -bts
| -This space intentionally left blank.
 
Hi and thanks to all...

i've done all that was suggested ( it took a long time by the way)

and...AVG is still popping up as i type to say there is a virus.....

i think i'll do it again just incase i missed something

DB :(
 
right, time wasnt on my side so i thought i'd try another method..........

a while ago i tried PandaSoft virus suite and found it to be excellent at
getting rid of really awkward to delete virus.
i ran AdawareSE , it picked up a few files and "deleted" them , but when i
ran it again straight away.....the files were detected again.
So off to PandaSoft, downloaded the trial version of their "platinum
suite"...ran it.......it detected and removed all the files that have been
giving me problems.....

THEN

i ran AVG, ADAWARE,NOSPAM and finally PANDASOFT.......and
.........NOTHING.....detected from any of them....

YIPPEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE

Thanks to all who offered any form of help - it was very much appreciated.

FINALLY.......i've just been to the shops and i found a fiver on the
ground............

Great stuff eh.....no virus and a free fiver.......there mst be a God.

THX AGAIN.....DB :))))))))))))))))))))))))))))))))))
 
Back
Top