Spywares hide in ADVPACK.DLL

  • Thread starter Thread starter Edwin Martinez
  • Start date Start date
E

Edwin Martinez

I have run the scan like 40 times and everytime I get the
same results IST.Bar, IST.xxx, 180search, etc and I belive
my advpack.dll its infected but the scanner do nothing.
 
Manually remove:

http://www.doxdesk.com/parasite/ISTbar.html

Or, use Ad-aware (or) SpyBot Search & Destroy.

Ad-aware here:

http://www.lavasoft.de/ms/index.htm

SpyBot here:

http://www.safer-networking.org/microsoft.en.html

Hello Chris

Get HijackThis.exe from
http://tomcoyote.org/hjt/hjt199//HijackThis.exe

Additionally - Steve Dodson has said he wants to hear from folks with
resistant Istbar infections--drop a line to:

(e-mail address removed)

with a subject header including ISTBAR.

Save it to C:\hjt (new folder) then Open it and select
Scan and Save Log. Note where you saved the log then send
it to Ron Kinner as an attachment. He can probably
identify the problem and tell you how to get rid of it for
good.
Ron email address. (e-mail address removed)
He will tell you what to do next. Put Hijack in the
subject so he will know it's not spam.

For information
HijackThis tutorial:
http://www.bleepingcomputer.com/forums/index.php?
showtutorial=42

Also maybe you need to run CCleaner

www.ccleaner.com/

Good luck
 
If you are under attack and MSAS does not seem to help:

*Submit suspected spyware report in the tools menu of MSAS*

1. Download lspfix.exe and ccleaner.exe

2. Reboot into safe mode - http://tinyurl.com/pfca

3. Clean out all temp file locations - ccleaner.exe

4. Run MSAS at least twice in full/Deep mode

5. Run a robust, updated antivirus software scan

6. Reboot into normal mode,see if problem has been corrected

Battle Notes:
- If you have trojans (files that won't go away),
you may have to disable System Restore on XP:
http://tinyurl.com/movy

- If your Internet connectivity quits:
http://support.microsoft.com/kb/892350
LSP-Fix - http://www.cexx.org/lspfix.htm

- This program will not detect or remove viruses
http://www.microsoft.com/athome/security/viruses/default.mspx

** For a more detailed attack plan **
http://spywarewarrior.com/sww-help.htm

Application Notes:
The VB6 runtime service pack seems to fix missing agents:
http://tinyurl.com/6x5fs

- Several issues are addressed by Microsoft -
Cookies, supported OS, and cost.
http://www.microsoft.com/athome/security/spyware/software/faq.mspx

- This program will not work with Windows 98 or ME.
If you need a tool for 9X/ME, go here:
http://www.majorgeeks.com/downloads31.html

- If your taskbar is on the side of your screen, the alerts
scroll off the screen. Move the taskbar back to the
bottom or top to stop the scroll, then revert back.

- Mark Ferguson maintains an FAQ:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.txt
 
Back
Top