Computing.Net > Forums > Security and Virus > need help eliminating istbar.exe

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

need help eliminating istbar.exe

Reply to Message Icon

Name: whaley
Date: December 19, 2004 at 15:59:37 Pacific
OS: win98
CPU/Ram: pentium3/256
Comment:

Hi, this is my first post.

I am having a problem getting rid of some adware, ISTbar. I have and use Adaware and Spybot, but they don't seem to be able to get rid of the problem program "istsvce.exe". I've also gotten and followed instructions from Symantec to eliminate it using regedit, but it did not work.

Can I restart my computer in DOS mode and get rid of it by using the del command for that file? I know the path and filename.

Thanks.

Life is what happens while you're busy making plans.



Sponsored Link
Ads by Google

Response Number 1
Name: Derek
Date: December 19, 2004 at 16:21:46 Pacific
Reply:

It would appear to be a Trojan. It might be worth downloading and running this (primarily for trojans):
A2FREE

When you have cured the problem try SpywareBlaster which keeps things out rather than fixing them. SpyBot themselves say it it is best to use this rather than the "Immunize feature" in SpyBot.

Derek.W


0

Response Number 2
Name: whaley
Date: December 19, 2004 at 16:24:10 Pacific
Reply:

Since first posting, I searched and found a similar post with the following info:

Start in safe mode with command prompt:
then, type in: cd c:\program files\ISTSVC\
then press enter
then type del ISTSVC.exe
and press enter

When I typed in cd c:\program files\ISTSVC\ and pressed enter, I got the message:

"too many parameters-files\ISTSVC".

Any ideas?

Life is what happens while you're busy making plans.


0

Response Number 3
Name: Derek
Date: December 19, 2004 at 16:30:25 Pacific
Reply:

Try it without the last backslash because I think this is why you got the error message.

Note, this is a comment about the reason for the error message rather than whether it is right or not to delete the file itself.

Derek.W


0

Response Number 4
Name: whaley
Date: December 19, 2004 at 16:46:03 Pacific
Reply:

Thanks, I'll let you know how things turn out.

Life is what happens while you're busy making plans.


0

Response Number 5
Name: jboy
Date: December 19, 2004 at 16:50:56 Pacific
Reply:

Try this

cd "\program files\ISTSVC"

Even Windows DOS hates embedded spaces

also

del "c:\program files\ISTSVC\ISTSVC.exe"

.. should work, assuming that the file & location exist, and that it's not protected. Case doesn't matter

Not all recommendations here are necessarily correct or accurate. Deleting, if possible, may lead to other issues.


Why don't they make computers that will do what we think we want them to do?


0

Related Posts

See More



Response Number 6
Name: whaley
Date: December 20, 2004 at 14:55:03 Pacific
Reply:

No luck with the DOS command, but I did download and use A2FREE, and it was successful. Thanks for the help!

Life is what happens while you're busy making plans.


0

Response Number 7
Name: jboy
Date: December 20, 2004 at 15:09:45 Pacific
Reply:

Glad to hear it. Rarely is it ever so simple as deleting a file.


Why don't they make computers that will do what we think we want them to do?


0

Response Number 8
Name: Derek
Date: December 20, 2004 at 15:12:09 Pacific
Reply:

Great - thx for popping back.

Derek.W


0

Response Number 9
Name: Debbie25
Date: December 23, 2004 at 22:14:33 Pacific
Reply:

We are also having problems with this file on one of our systems.

Ran ad-aware, spybot and A2free and the directory keep coming back and messes up the internet home page and stuff.

I even did a search for the file in the registry and deleted the few that came up.

Is there a better program that will take care of it?

Thanks,
Debbie


0

Response Number 10
Name: jboy
Date: December 23, 2004 at 22:22:11 Pacific
Reply:

If you're running WinXP, things may be a little different - it may be advisable to run those programs from Safe Mode and/or disable System Restore (or so I've heard).

Probably best if you repost as a separate question to get a wider range of input.


Why don't they make computers that will do what we think we want them to do?


0

Response Number 11
Name: mike18xx
Date: December 30, 2004 at 03:06:03 Pacific
Reply:

Removing the istbar folder WON'T WORK with the current round of trojans, because there's an, at minimum, THREE-STEP process: A hidden program installing at launch which hijacks registries and launches an application which in turn installs the Istbar folder and then launches Istbar (and repeats doing so at least two more times).

NONE of the anti-spyware programs as of 12/30/04 have a handle on it yet.


0

Response Number 12
Name: jboy
Date: December 30, 2004 at 08:20:50 Pacific
Reply:

Yes, well, we'd already opined that deleting from DOS wouldn't fix things, and that seemed to be the case - although no harm in trying.

The OP was able to solve his issue with A2Free, which was the main focus of this thread.

New posters are encouraged to post separately since Operating Systems as well as other factors can differ greatly - what works for one may not work for others.


Why don't they make computers that will do what we think we want them to do?


0

Response Number 13
Name: mrbojangles3004
Date: December 30, 2004 at 23:43:34 Pacific
Reply:

Use Webroot Spy Sweeper, itll work i had the same problem


0

Response Number 14
Name: adripan
Date: January 3, 2005 at 13:13:48 Pacific
Reply:

i had a 5 hour struggle trying to remove this thing, and i ve never encountered anything as difficult to remove.It just kept coming back.
No standard popular spyware removal apps i tried could remove this unfortunately, they all kept prompting me to reboot to finish the removal, but it never worked.Finally,exasperated in my quest, i downloaded and tried Spyware Doctor, paid 30 bucks. Did the job in 1minute,and additonally removed 103 more entries.


0

Response Number 15
Name: Derek
Date: January 3, 2005 at 15:21:52 Pacific
Reply:

adripan

Thanks for your contribution. Like many I try to do everything for free (so far I've got away with it too).

Seems like my approach doesn't hold if the chips are really down (or maybe the freebie programs tend to be behind the times).

Worth knowing.

Derek.W


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: need help eliminating istbar.exe

hacked by find4u.net, need help www.computing.net/answers/security/hacked-by-find4unet-need-help/11676.html

need help removing nail.exe www.computing.net/answers/security/need-help-removing-nailexe/16984.html

Still need help with b.exe Removal! www.computing.net/answers/security/still-need-help-with-bexe-removal/20069.html