IST.ISTbar browser hijacker

[Cappio]

Every time I boot up this notice comes up that IST.ISTbar
is a browser hijacker trying to install. I tell
Anitspayware to remove it, it does then informs me to re-
boot. But the process keeps repeating itself every time
I re-boot. HEEELLLPPP!!!!

 

[Steve Wechsler [MVP]]

Cappio,

Scan the system with MSAS while the system is DISCONNECTED from the
internet. Then reboot to Safe Mode and run MSAS at least twice more.
Does that remove ISTBar ?

Steve Wechsler (akaMowGreen)
MVP Windows Server

 

[John]

Steve,

Can i do this running an intelligent scan or do I need to
do a full system scan all three times?

Regards,

John

 

[Steve Wechsler [MVP]]

John,

Do a Full System scan with Scan Memory and Deep Scan checked.
If there is only one HD or partition than put a check next to
Scan selected drives/folders. If there are more than one, click the
Select link and include all of the drives/partitions.

Steve Wechsler (akaMowGreen)
MS-MVP
Windows Server - Software Distribtuion
Windows - Security

 

[John]

MowGreen,

I followed your instructions, however the IST bar still
tries to install.

Since this happens twice a day, I have noticed the pattern
of its installation. My CPU usage goes up to 100% and my
computer fans start making noise and that is when I know
it is installing. So I normally end the the process tree
through the task manager and this stops the activity.

However the issue with the MS program is that it only
recognizes the activity after it starts installing, so I
presumed a file remained on my PC and contacts IST to
install their programs.

I searched my computer for the file that caused the
activity yesterday and deleted it, however a new one
installed today...If this helps, the process that I
stopped today was called sys7248.exe and it had a
different name yesterday. I deleted the previous two
sys****.exe files and it seems like they just keep on
installing new files.

Anyhow, I hope you guys can find a solution!

Cheers,

John

 

[Savage]

i have the same problem here to , followed instructions
but is still there , i also runned PestPatrol, SpyBot and
Ad-Aware SE Pro , they all detect it and remove it , but
at reboot it comes back.

My last option is to format HD and reinstall WinXP , but
that means all my work will be lost.

Anyway to perm remove ISTbar?

 

[Bill Sanderson]

As I recall Symantec has an automated remover for this--let me see:

http://securityresponse.symantec.com/avcenter/venc/data/adware.istbar.html

See the link part way down the article, to the automated removal tool.