Home & Home OfficeBusinessPartnersClubAbout Security Stronghold

ISTbar Removal: Remove ISTbar Forever

Let our support team solve your problem with ISTbar and repair ISTbar right now!

Leave the detailed description of your ISTbar problem in the form below. Our support team will contact you in several minutes and give a step-by-step instruction on how to fix ISTbar problem. Please be specific. Do your best describing the problem. This will help us recommend right and complete ISTbar problem removal solution.

Describe your problem here and we'll contact you in several minutes:

We'll reply you in 10 minutes or less
* Name:
* E-mail:
* Problem summary:
* Detailed problem
description:

We'll contact you in 10 minutes or less after you click on this button! Individual solution guaranteed!

Warning:

1) We hate spam as much as you do. We will not share your email with any third party or publish it anywhere. Your email is used only to contact you and give you ISTbar removal solution.
2) All fields of this form are obligatory.

Guaranteed Problem Solution
Software Industry Professionals Member
Threat's description and solution are developed by Security Stronghold security team. Let professionals make your problems solved now!
Download solution for ISTbar and 2rsfxmoxb0thd.exe now!

What is ISTbar? Technical details of ISTbar problem and ISTbar removal tool

Methods for manual ISTbar removal

Free download of a program that will solve your problem automatically

Free instant professional support in solving ISTbar error from our Security Support Team

Threat's profile

Threat indicator: HIGH
 Name of the threat: ISTbar
Command or file name: 2rsfxmoxb0thd.exe
Threat type: Hijacker
Affected OS: Win32 (Windows 9x, Windows XP, Windows Vista)

ISTbar intrusion method

ISTbar copies its file(s) to your hard disk. Its typical file name is 2rsfxmoxb0thd.exe. Then it creates new startup key with name ISTbar and value 2rsfxmoxb0thd.exe. You can also find it in your processes list with name 2rsfxmoxb0thd.exe or ISTbar.

If you have further questions about ISTbar, please fill in the form above and we'll contact you shortly.

» Download program to remove ISTbar (ISTbar Removal Tool)

Recommended Solution

If you are not sure what to delete, use our award winning program - ISTbar Removal Tool.

ISTbar Removal Tool will find and fully remove ISTbar and all problems associated with ISTbar virus.

Fast, easy, and handy, ISTbar Removal Tool protects your computer against ISTbar that does harm to your computer and breaks your privacy. ISTbar Removal Tool scans your hard disks and registry and destroys any manifestation of ISTbar. Standard anti-virus software can do nothing against malicious programs like ISTbar. Remove ISTbar straight away!

» Download ISTbar Removal Tool now for free

How to fix ISTbar

This problem can be solved manually by deleting all registry keys and files connected with ISTbar, removing it from starup list and unregistering all corresponding DLLs. Additionally missing DLL's should be restored from distribution in case they are corrupted by ISTbar.

To get rid of ISTbar, you should:

1. Kill the following processes and delete the appropriate files:

• 70tovmto.exe
• 70tovmto.ini
• a834d85b5062f849e461b71c20bf78f8.exe
• a95kfrhe.ini
• acsproxy.dll
• acsproxy.lib
• ads.htm
• aenhl3qr.htm
• air tickets.lnk
• alchem.ini
• amature.mpg
• ap9h4qmo.exe
• ap9h4qmo.ini
• aupdate.conf
• aupdate.exe
• aupdate.trk
• aupdate_uninstall.exe
• bb.exe
• betting.lnk
• bln02nqv.exe
• bln02nqv.ini
• bundleinstall.exe
• bundlersi.exe
• bw6mds51.ocx
• casino palace.lnk
• casino.lnk
• chat.dat
• checks.040617-1442.log
• config.ini
• conscorr.inf
• csearch.dll
• cxtpls_loader_ff.exe
• dbm42.exe
• default.skn
• dgrdntld.exe
• dr_s.exe
• dust.exe
• d_loader.exe
• espam.exe
• excel10.dll
• ezines.dat
• fjukyvs.exe
• flashplayer.dll
• fon14100.exe
• fpfntdat.bin
• fpuos7h2.htm
• free amature movie.lnk
• free travel voucher.url
• fwntoolbar.dll
• fyd.exe
• gah95on6.ini
• games.exe
• games.lnk
• gamma.exe
• gzlib.dll
• hicgmpg.exe
• home.dat
• horoscope.lnk
• host32.exe
• hot_tarts_au.lnk
• iexplore.exe
• iinstall.exe
• imgconv.dll
• in the vip.lnk
• install.log
• intrigue.dll
• ist.exe
• ist.inf
• istactivex.dll
• istactivex.inf
• istbar.dll
• istbar.txt
• istbarcm.dll
• istbar_mainstream[1].dll
• istdnld.exe
• istdownload.exe
• istdownload[2].exe
• istinstall_154074.exe
• istsvc.exe
• istsvc[1].exe
• ist_install.exe
• kmisxk.exe
• kwddltcf.exe
• kyf.dat
• l9lecc.exe
• lhqibp.dll
• longtimer.ocx
• loudc.exe
• mcinstl.dll
• mcinstl.exe
• mcinstl.inf
• mciwndx.ocx
• mediaaccc.dll
• mediaaccess.exe
• mediaacck.exe
• mqtqtz32.exe
• msbb.exe
• msbe.dll
• mscache.dll
• mscache.exe
• mstasks2.exe
• msyutils.exe
• mwvlfqxx.exe
• nah.exe
• naughtyplayer.exe
• naughty_setup.exe
• nem218.dll
• olelib.tlb
• optimize.exe
• paysites.dat
• penmzp.exe
• penoghih.exe
• pics.dat
• printer.exe
• printer32.exe
• radio.exe
• riamfi.exe
• scan.exe
• srchbar.dll
• srchbar.dll.man
• srcle32.exe
• ssdbkup.exe
• testit.exe
• tinybar.exe
• trkgif.exe
• trojandownloader.win32.istbar.ag.dll
• trojandownloader.win32.istbar.aj.exe
• trojandownloader.win32.istbar.aj[2].exe
• trojandownloader.win32.istbar.am.exe
• trojandownloader.win32.istbar.ap.dll
• trojandownloader.win32.istbar.bm.exe
• trojandownloader.win32.istbar.bp.exe
• trojandownloader.win32.istbar.bu.exe
• trojandownloader.win32.istbar.bx.exe
• trojandownloader.win32.istbar.cl.exe
• trojandownloader.win32.istbar.da_(101).exe
• trojandownloader.win32.istbar.dh_(40).dll
• trojandownloader.win32.istbar.gen.dll
• trojandownloader.win32.istbar.gen_(14).exe
• trojandownloader.win32.istbar.i.exe
• trojandownloader.win32.istbar.n.exe
• trojandownloader.win32.istbar.p.dll
• trojandownloader.win32.istbar.u.exe
• trojandownloader.win32.istbar.v.exe
• u8obgc.exe
• unregister.exe
• unstsa3.exe
• uveu42at.exe
• vic32.dll
• videos.dat
• virtue.lnk
• webupdate.txt
• wlngtnnb.exe
• x.chm.lnk
• x.zip.dir.lnk
• xml_istbar.php
• XXX Toolbar.com.url
• ymhfvu.exe
• ysbactivex.dll
• ysb_regular[1].cab

Warning: you should delete only those files which checksums are listed as malicious. There may be valid files with the same names in your system. We recommend you to use ISTbar Removal Tool for safe problem solution.

2. Delete the following malicious folders:

• C:\Program Files\common files\totem shared\
• C:\Program Files\free amature movie\
• C:\Program Files\istsvc\
• C:\Program Files\search bar\
• c:\spedia\
• c:\temp\
• C:\Documents and Settings\User\Desktop\
• C:\Documents and Settings\User\desktop\
• C:\Documents and Settings\User\local settings\temp\
• %favorites%\adult sites\reality\
• %favorites%\fun games\
• %favorites%\going places\
• C:\Program Files\internet optimizer\
• C:\Program Files\media access\
• C:\Program Files\toolbar\
• C:\Windows\
• C:\Windows\system32\
• C:\Program Files\anwbtoolbar\
• C:\Program Files\accessdiver\
• C:\Program Files\killandclean\
• C:\Documents and Settings\User\applic~1\micros~1\office\
• C:\Program Files\dr_s\
• C:\Program Files\istbar\
• C:\Program Files\istsvc\
• C:\Program Files\nvidstar\
• C:\Program Files\Power Scan\
• C:\Program Files\rb32\
• C:\Program Files\RBEnhance\
• C:\Program Files\taskmngr\
• %autostart% \Power Scan\

3. Delete the following malicious registry entries and\or values:

• Key: CLSID\{00320615-B6C2-40A6-8F99-F1C52D674FAD}

• Key: CLSID\{3789CBF0-C4CA-4e98-B93B-22ACF0587FBA}

• Key: CLSID\{42F2C9BA-614F-47c0-B3E3-ECFD34EED658}

• Key: clsid\{69555be2-9a78-11d2-ba91-00600827878d}

• Key: clsid\{6fd5192-a97c-4b48-a5d7-2420cfdcfdf2}

• Key: CLSID\{71ed4fba-4024-4bbe-91dc-9704c93f453e}

• Key: CLSID\{7C559105-9ECF-42B8-B3F7-832E75EDD959}

• Key: CLSID\{EF86873F-04C2-4a95-A373-5703C08EFC7B}

• Key: CLSID\{FAA356E4-D317-42A6-AB41-A3021C6E7D52}

• Key: interface\{0985c112-2562-46f2-8da6-92648ba4630f}

• Key: Interface\{0E704BA4-C517-4BE7-A1CD-C3FFDA1E1FFE}

• Key: ISTactivex.Installer

• Key: ISTactivex.Installer.2

• Key: istactivex.installer\curver istactivex.installer.2\url search optimization
  Value: @

• Key: ISTbar.BarObj

• Key: ISTx.Installer

• Key: LocalNRDDll.LocalNRDDllObj.1

• Key: mediaaccx.installer\clsid\{15ad6789-cdb4-47e1-a9da-992ee8e6bad6}
  Value: @

• Key: mediaaccx.installer\mediaaccx.installer
  Value: @

• Key: TypeLib\{67907B3C-A6EF-4A01-99AD-3FCD5F526429}

• Key: TYPELIB\{6d3f5de4-e980-4407-a10f-9ac771abaae6}

• Key: typelib\{6fd5192-a97c-4b48-a5d7-2420cfdcfdf2}

• Key: typelib\{8c752c5e-3c10-4076-af0a-ffc69fa20d1b}

• Key: typelib\{8c752c5e-3c10-4076-af0a-ffc69fa20d1c}
  Value: @

• Key: typelib\{8d038f3d-7a31-42fa-8233-edf3ddd9fc25}

• Key: TypeLib\{E9A5B71C-093B-4F34-AF07-34FCA89BA0DF}

• Key: YSBactivex.Installer

• Key: software\1stbar

• Key: Software\IESearchbar

• Key: software\ist_exe_start
  Value: @

• Key: software\istbar
  Value: @

• Key: software\microsoft\internet explorer\extensions\cmdmapping\10e42047-deb9-4535-a118-b3f6ec39b807
  Value: @

• Key: software\microsoft\internet explorer\toolbar\webbrowser\{5d60ff48-95be-4956-b4c6-6bb168a70310}
  Value: @

• Key: software\microsoft\internet explorer\toolbar\webbrowser\{5f1abcdb-a875-46c1-8345-b72a4567e486}
  Value: @

• Key: software\microsoft\internet explorer\toolbar\webbrowser\faa356e4-d317-42a6-ab41-a3021c6e7d52
  Value: @

• Key: hardware\resourcemap\pnp manager\pnpmanager\device\resource008659.raw
  Value: @

• Key: hardware\resourcemap\pnp manager\pnpmanager\device\resource008659.translated
  Value: @

• Key: SOFTWARE\Classes\CLSID\{12398DD6-40AA-4C40-A4EC-A42CFC0DE797}

• Key: SOFTWARE\Classes\CLSID\{386A771C-E96A-421f-8BA7-32F1B706892F}

• Key: SOFTWARE\Classes\CLSID\{5F1ABCDB-A875-46c1-8345-B72A4567E486}

• Key: software\classes\clsid\{98a8315e-667a-11d5-87a3-bb213c32b44b}
  Value: @

• Key: software\classes\clsid\{aa8c93e1-7e5f-497e-b67c-cc8fe2a40d3b}
  Value: @

• Key: software\classes\clsid\{f3e7ff6d-dca1-11d4-95df-00c0dfe9982c}
  Value: @

• Key: software\classes\imgconv.clsimgconv
  Value: @

• Key: software\classes\interface\{2ddd90d6-f153-4ea7-a324-4b2d83d1027e}
  Value: @

• Key: software\classes\interface\{79bf9dcd-c52d-4da8-b15e-ac2a88e96b0a}
  Value: @

• Key: software\classes\interface\{98a8315d-667a-11d5-87a3-bb213c32b44b}
  Value: @

• Key: software\classes\interface\{98a8315f-667a-11d5-87a3-bb213c32b44b}
  Value: @

• Key: software\classes\interface\{996b33c1-8e19-4f4f-ab6c-52a2c523b7d3}
  Value: @

• Key: software\classes\interface\{9ce15eb5-6b39-4656-9e1f-2d219ee42e0e}
  Value: @

• Key: software\classes\interface\{d128e6c8-6ae7-4ecd-939e-e2e6ca7d035d}
  Value: @

• Key: software\classes\istactivex.installer
  Value: @

• Key: software\classes\istactivex.installer.2
  Value: @

• Key: software\classes\istactivex.installer\clsid
  Value: @

• Key: software\classes\istactivex.installer\curver
  Value: @

• Key: software\classes\typelib\{17ed04b9-6c71-11d4-87a3-daa6b6b40e8f}
  Value: @

• Key: software\classes\typelib\{308a04d3-084d-43aa-a3e6-0d12bcca3ce6}
  Value: @

• Key: SOFTWARE\Classes\TypeLib\{67907B3C-A6EF-4A01-99AD-3FCD5F526429}

• Key: software\classes\typelib\{7c9e9a74-1922-409e-ab46-e48784336c3a}
  Value: @

• Key: software\classes\typelib\{f3e7ff6b-dca1-11d4-95df-00c0dfe9982c}
  Value: @

• Key: SOFTWARE\ISTbar
  Value: gUpdate

• Key: Software\ISTsvc
  Value: version

• Key: software\lycos\sidesearch\locale
  Value: @

• Key: software\lycos\sidesearch\partner
  Value: @

• Key: software\lycos\sidesearch\silentwelcome
  Value: @

• Key: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{018B7EC3-EECA-11D3-8E71-0000E82C6C0D}

• Key: software\microsoft\code store database\distribution units\{12398dd6-40aa-4c40-a4ec-a42cfc0de797}
  Value: @

• Key: software\microsoft\code store database\distribution units\{12398dd6-40aa-4c40-a4ec-a42cfc0de797}\installer
  Value: @

• Key: software\microsoft\code store database\distribution units\{12398dd6-40aa-4c40-a4ec-a42cfc0de797}\systemcomponent
  Value: @

• Key: software\microsoft\internet explorer\extensions\{000007c6-17df-4438-92a4-de5537471ba3}\bandclsid
  Value: @

• Key: software\microsoft\internet explorer\extensions\{000007c6-17df-4438-92a4-de5537471ba3}\buttontext
  Value: @

• Key: software\microsoft\internet explorer\extensions\{000007c6-17df-4438-92a4-de5537471ba3}\clsid
  Value: @

• Key: software\microsoft\internet explorer\extensions\{000007c6-17df-4438-92a4-de5537471ba3}\default visible
  Value: @

• Key: software\microsoft\internet explorer\extensions\{000007c6-17df-4438-92a4-de5537471ba3}\hoticon
  Value: @

• Key: software\microsoft\internet explorer\extensions\{000007c6-17df-4438-92a4-de5537471ba3}\icon
  Value: @

• Key: software\microsoft\internet explorer\toolbar\{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}
  Value: @

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{71ED4FBA-4024-4bbe-91DC-9704C93F453E}

• Key: software\microsoft\windows\currentversion\explorer\shstyle
  Value: @

• Key: software\microsoft\windows\currentversion\mediaswitch
  Value: @

• Key: Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/ISTactivex.dll
  Value: .Owner

• Key: software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/istactivex.dll\{7c559105-9ecf-42b8-b3f7-832e75edd959}
  Value: @

• Key: software\microsoft\windows\currentversion\moduleusage\c:/winnt/downloaded program files/istactivex.dll\.owner
  Value: @

• Key: software\microsoft\windows\currentversion\moduleusage\c:/winnt/downloaded program files/istactivex.dll\{12398dd6-40aa-4c40-a4ec-a42cfc0de797}
  Value: @

• Key: software\microsoft\windows\currentversion\moduleusage\c:/winnt/downloaded program files/pcpowerscan.exe\.owner
  Value: @

• Key: software\microsoft\windows\currentversion\moduleusage\c:/winnt/downloaded program files/pcpowerscan.exe\{dc187740-46a9-11d5-a815-00b0d0428c0c}
  Value: @

• Key: software\microsoft\windows\currentversion\run\ist service
  Value: @

• Key: software\microsoft\windows\currentversion\run\ist service uninstall
  Value: @

• Key: software\microsoft\windows\currentversion\run\ms updates
  Value: @

• Key: software\microsoft\windows\currentversion\shareddlls\c:\windows\downloaded program files\istactivex.dll
  Value: @

• Key: software\microsoft\windows\currentversion\shell extensions\approved\{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}
  Value: @

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IESearchbarIESearchbar

• Key: software\microsoft\windows\currentversion\uninstall\istbar\_{cfbfae00-17a6-11d0-99cb-00c04fd64497}
  Value: @

• Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\ISTbarISTbar
  Value: DisplayName

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTsvc
  Value: DisplayName

• Key: software\microsoft\windows\currentversion\uninstall\lycos sidesearch\displayicon
  Value: @

• Key: software\microsoft\windows\currentversion\uninstall\lycos sidesearch\displayname
  Value: @

• Key: software\microsoft\windows\currentversion\uninstall\lycos sidesearch\helplink
  Value: @

• Key: software\microsoft\windows\currentversion\uninstall\lycos sidesearch\nomodify
  Value: @

• Key: software\microsoft\windows\currentversion\uninstall\lycos sidesearch\norepair
  Value: @

• Key: software\microsoft\windows\currentversion\uninstall\lycos sidesearch\uninstallstring
  Value: @

• Key: software\microsoft\windows\currentversion\uninstall\lycos sidesearch\urlinfoabout
  Value: @

• Key: software\microsoft\windows\currentversion\uninstall\search bar\displayname
  Value: @

• Key: software\microsoft\windows\currentversion\uninstall\search bar\uninstallstring
  Value: @

• Key: software\microsoft\windows\currentversion\uninstall\wsem update\displayname
  Value: @

• Key: software\microsoft\windows\currentversion\uninstall\wsem update\uninstallstring
  Value: @

• Key: software\powerscan

• Key: typelib\{69550be2-9a78-11d2-ba91-00600827878d}

• Key: classes\software\{00320615-B6C2-40A6-8F99-F1C52D674FAD}

• Key: classes\software\{018b7ec3-eeca-11d3-8e71-0000e82c6c0d}

• Key: classes\software\{15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6}

• Key: classes\software\{3789CBF0-C4CA-4e98-B93B-22ACF0587FBA}

• Key: classes\software\{386A771C-E96A-421F-8BA7-32F1B706892F}

• Key: classes\software\{5F1ABCDB-A875-46C1-8345-B72A4567E483}

• Key: classes\software\{5F1ABCDB-A875-46C1-8345-B72A4567E486}

• Key: classes\software\{69555be2-9a78-11d2-ba91-00600827878d}

• Key: classes\software\{6D3F5DE4-E980-4407-A10F-9AC771ABAAE6}

• Key: classes\software\{6fd5192-a97c-4b48-a5d7-2420cfdcfdf2}

• Key: classes\software\{71ed4fba-4024-4bbe-91dc-9704c93f453e}

• Key: classes\software\{8D038F3D-7A31-42fa-8233-EDF3DDD9FC25}

• Key: CLSID\{018b7ec3-eeca-11d3-8e71-0000e82c6c0d}

• Key: clsid\{0985c112-2562-46f2-8da6-92648ba4630f}

• Key: CLSID\{15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6}

• Key: clsid\{5F1ABCDB-A875-46C1-8345-B72A4567E483}

• Key: CLSID\{6D3F5DE4-E980-4407-A10F-9AC771ABAAE6}

• Key: CLSID\{771A1334-6B08-4a6b-AEDC-CF994BA2CEBE}

• Key: CLSID\{8D038F3D-7A31-42fa-8233-EDF3DDD9FC25}

• Key: Interface\{90CE74CC-788A-4A00-B38D-CBCA08CC9E8F}

• Key: Interface\{A42C0EF4-1C76-43CC-989F-EADC7E4B755D}

• Key: Interface\{BF06DA8E-2BEB-4816-9BBD-F7625246E245}

• Key: interface\{dc065fa6-08f9-4c50-99dc-275d16cfc5bd}

• Key: ISTactivex.Installer.1

• Key: ISTx.Installer.2

• Key: LocalNRDDll.LocalNRDDllObj

• Key: SOFTWARE\Classes\CLSID\{7C559105-9ECF-42b8-B3F7-832E75EDD959}

• Key: SOFTWARE\Classes\ISTx.Installer

• Key: SOFTWARE\Classes\TypeLib\{89A10D64-83BF-41A4-86A3-7AAF1F8F3D1B}

• Key: Software\LocalNRD

• Key: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6}

• Key: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{3789CBF0-C4CA-4e98-B93B-22ACF0587FBA}

• Key: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{386A771C-E96A-421F-8BA7-32F1B706892F}

• Key: Software\Microsoft\Code Store Database\Distribution Units\{7C559105-9ECF-42B8-B3F7-832E75EDD959}
  Value: SystemComponent

• Key: software\microsoft\windows\currentversion\run IST Service

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Displayname

• Key: TestContentMatchControl1.ContentMatchTag

• Key: TestContentMatchControl1.ContentMatchTag.1

• Key: TypeLib\{CC257918-F435-4A33-8231-2B8195990CCA}

• Key: TypeLib\{DB447818-96B4-40DF-8A55-720DA496F514}

• Key: WinCtlAdX.Installer

• Key: TypeLib\{89A10D64-83BF-41A4-86A3-7AAF1F8F3D1B}\1.0

• Key: TypeLib\{89A10D64-83BF-41A4-86A3-7AAF1F8F3D1B}\1.0\FLAGS

• Key: TypeLib\{89A10D64-83BF-41A4-86A3-7AAF1F8F3D1B}\1.0\0\win32

• Key: TypeLib\{89A10D64-83BF-41A4-86A3-7AAF1F8F3D1B}\1.0\HELPDIR

• Key: Interface\{DC065FA6-08F9-4C50-99DC-275D16CFC5BD}\ProxyStubClsid

• Key: Interface\{DC065FA6-08F9-4C50-99DC-275D16CFC5BD}\ProxyStubClsid32

• Key: Interface\{DC065FA6-08F9-4C50-99DC-275D16CFC5BD}\TypeLib
  Value: Version

• Key: ISTx.Installer\CLSID

• Key: CLSID\{7C559105-9ECF-42b8-B3F7-832E75EDD959}\ProgID

• Key: CLSID\{7C559105-9ECF-42b8-B3F7-832E75EDD959}\InprocServer32
  Value: ThreadingModel

• Key: TypeLib\{67907B3C-A6EF-4A01-99AD-3FCD5F526429}\1.1

• Key: TypeLib\{67907B3C-A6EF-4A01-99AD-3FCD5F526429}\1.1\FLAGS

• Key: TypeLib\{67907B3C-A6EF-4A01-99AD-3FCD5F526429}\1.1\0\win32

• Key: Interface\{0985C112-2562-46F2-8DA6-92648BA4630F}\ProxyStubClsid

• Key: Interface\{0985C112-2562-46F2-8DA6-92648BA4630F}\ProxyStubClsid32

• Key: Interface\{0985C112-2562-46F2-8DA6-92648BA4630F}\TypeLib
  Value: Version

• Key: Software\Microsoft\Code Store Database\Distribution Units\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\InstalledVersion
  Value: LastModified

• Key: ISTactivex.Installer.2\CLSID

• Key: ISTactivex.Installer\CLSID

• Key: ISTactivex.Installer\CurVer

• Key: CLSID\{EF86873F-04C2-4a95-A373-5703C08EFC7B}\ProgID

• Key: CLSID\{EF86873F-04C2-4a95-A373-5703C08EFC7B}\VersionIndependentProgID

• Key: CLSID\{EF86873F-04C2-4a95-A373-5703C08EFC7B}\InprocServer32
  Value: ThreadingModel

• Key: CLSID\{EF86873F-04C2-4a95-A373-5703C08EFC7B}\ToolboxBitmap32

• Key: CLSID\{EF86873F-04C2-4a95-A373-5703C08EFC7B}\MiscStatus

• Key: CLSID\{EF86873F-04C2-4a95-A373-5703C08EFC7B}\MiscStatus\1

• Key: CLSID\{EF86873F-04C2-4a95-A373-5703C08EFC7B}\TypeLib

• Key: CLSID\{EF86873F-04C2-4a95-A373-5703C08EFC7B}\Version

• Key: TypeLib\{8C752C5E-3C10-4076-AF0A-FFC69FA20D1C}\1.0

• Key: TypeLib\{8C752C5E-3C10-4076-AF0A-FFC69FA20D1C}\1.0\FLAGS

• Key: TypeLib\{8C752C5E-3C10-4076-AF0A-FFC69FA20D1C}\1.0\0\win32

• Key: TypeLib\{8C752C5E-3C10-4076-AF0A-FFC69FA20D1C}\1.0\HELPDIR

• Key: Interface\{9388907F-82F5-434D-A941-BB802C6DD7C1}\ProxyStubClsid

• Key: Interface\{9388907F-82F5-434D-A941-BB802C6DD7C1}\ProxyStubClsid32

• Key: Interface\{9388907F-82F5-434D-A941-BB802C6DD7C1}\TypeLib
  Value: Version

• Key: TypeLib\{67907B3C-A6EF-4A01-99AD-3FCD5F526429}\1.1\HELPDIR

• Key: YSBactivex.Installer\CLSID

• Key: CLSID\{42F2C9BA-614F-47c0-B3E3-ECFD34EED658}\ProgID

• Key: CLSID\{42F2C9BA-614F-47c0-B3E3-ECFD34EED658}\InprocServer32
  Value: ThreadingModel

• Key: Software\Microsoft\Code Store Database\Distribution Units\{42F2C9BA-614F-47C0-B3E3-ECFD34EED658}\InstalledVersion
  Value: LastModified

• Key: ISTbar.BarObj\CLSID

• Key: CLSID\{FAA356E4-D317-42a6-AB41-A3021C6E7D52}\ProgID

• Key: CLSID\{FAA356E4-D317-42a6-AB41-A3021C6E7D52}\InprocServer32
  Value: ThreadingModel

• Key: Software\Microsoft\Windows\CurrentVersion\Runonce\DeleteISTbar

• Key: software\microsoft\internet explorerinternet0%\toolbar
  Value: {3789cbf0-c4ca-4e98-b93b-22acf0587fba}

• Key: software\microsoft\internet explorerinternet0%\Toolbar
  Value: {5F1ABCDB-A875-46c1-8345-B72A4567E486}

• Key: software\microsoft\internet explorerinternet0%\Toolbar\ShellBrowser
  Value: {5F1ABCDB-A875-46C1-8345-B72A4567E483}

• Key: software\microsoft\internet explorerinternet0%\toolbar\webbrowser
  Value: {5f1abcdb-a875-46c1-8345-b72a4567e486}

• Key: Software\Microsoft\Internet Explorer\Explorer Bars
  Value: {69550BE2-9A78-11D2-BA91-00600827878D}

• Key: Software\Microsoft\Internet Explorer\Toolbar
  Value: {69550BE2-9A78-11D2-BA91-00600827878D}

• Key: Software\Microsoft\Internet Explorer\Toolbar
  Value: {FAA356E4-D317-42a6-AB41-A3021C6E7D52}

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion
  Value: disp

• Key: software\microsoft\windows\currentversion\runonce
  Value: deleteISTbar

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
  Value: C:\WINNT\Downloaded Program Files\WinCtlAdX.dll

• Key: Software\Microsoft\Internet Explorer\Toolbar
  Value: {5F1ABCDB-A875-46c1-8345-B72A4567E486}

• Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\ISTbarISTbar
  Value: UninstallString

• Key: SOFTWARE\ISTbar\ISTbar
  Value: gUpdate

• Key: SOFTWARE\ISTbar\ISTbar
  Value: toolbar_id

• Key: SOFTWARE\ISTbar\ISTbar
  Value: xml_istbar.php

• Key: SOFTWARE\ISTbar\ISTbar
  Value: navmain.bmp

• Key: SOFTWARE\ISTbar\ISTbar
  Value: search.bmp

• Key: SOFTWARE\ISTbar\ISTbar
  Value: showcorrupted

• Key: SOFTWARE\ISTbar\ISTbar
  Value: RefreshScope

• Key: SOFTWARE\ISTbar\ISTbar
  Value: UpdateScope

• Key: SOFTWARE\ISTbar\ISTbar
  Value: AllowUpdate

• Key: software\classes
  Value: imgconv.clsimgconv

• Key: SOFTWARE\Microsoft\Internet Explorer\Main\ins
  Value: 1150

• Key: Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/ISTactivex.dll
  Value: {7C559105-9ECF-42B8-B3F7-832E75EDD959}

• Key: Software\Microsoft\Code Store Database\Distribution Units\{7C559105-9ECF-42B8-B3F7-832E75EDD959}
  Value: Installer

• Key: Software\Microsoft\Code Store Database\Distribution Units\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\DownloadInformation
  Value: CODEBASE

• Key: Software\IST
  Value: referer

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\iexplore
  Value: Type

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\iexplore
  Value: Time

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\iexplore
  Value: Count

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\iexplore
  Value: Time

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\iexplore
  Value: Count

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\iexplore
  Value: Time

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\iexplore
  Value: Count

• Key: Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/ysbactivex.dll
  Value: .Owner

• Key: Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/ysbactivex.dll
  Value: {42F2C9BA-614F-47C0-B3E3-ECFD34EED658}

• Key: Software\Microsoft\Code Store Database\Distribution Units\{42F2C9BA-614F-47C0-B3E3-ECFD34EED658}
  Value: SystemComponent

• Key: Software\Microsoft\Code Store Database\Distribution Units\{42F2C9BA-614F-47C0-B3E3-ECFD34EED658}
  Value: Installer

• Key: Software\Microsoft\Code Store Database\Distribution Units\{42F2C9BA-614F-47C0-B3E3-ECFD34EED658}\DownloadInformation
  Value: CODEBASE

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\iexplore
  Value: Time

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\iexplore
  Value: Blocked

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\iexplore
  Value: Count

• Key: Software\IST
  Value: Recover

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTsvc
  Value: UninstallString

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTsvc
  Value: NoModify

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTsvc
  Value: NoRepair

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTsvc
  Value: HelpLink

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTsvc
  Value: Publisher

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTsvc
  Value: URLInfoAbout

• Key: Software\ISTsvc
  Value: config_interval

• Key: Software\ISTsvc
  Value: app_name

• Key: Software\ISTsvc
  Value: popup_url

• Key: Software\ISTsvc
  Value: update_url

• Key: Software\ISTsvc
  Value: config_url

• Key: Software\ISTsvc
  Value: ui

• Key: Software\ISTsvc
  Value: popup_titletext

• Key: Software\ISTsvc
  Value: popup_initial_delay

• Key: Software\ISTsvc
  Value: popup_count

• Key: Software\ISTsvc
  Value: popup_day_count

• Key: Software\ISTsvc
  Value: popup_day_limit

• Key: Software\ISTsvc
  Value: update_count

• Key: Software\ISTsvc
  Value: update_version

• Key: Software\ISTsvc
  Value: config_count

• Key: Software\ISTsvc
  Value: account_id

• Key: Software\ISTsvc
  Value: app_date

• Key: Software\ISTsvc
  Value: popup_interval

• Key: Software\ISTsvc
  Value: popup_last

• Key: Software\ISTsvc
  Value: update_interval

• Key: Software\ISTsvc
  Value: update_last

• Key: Software\ISTsvc
  Value: config_interval

• Key: Software\ISTsvc
  Value: config_last

• Key: Software\Microsoft\Internet Explorer\Toolbar
  Value: {FAA356E4-D317-42a6-AB41-A3021C6E7D52}

• Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\ISTbar
  Value: DisplayName

• Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\ISTbar
  Value: UninstallString

• Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\ISTbar
  Value: Publisher

• Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\ISTbar
  Value: URLInfoAbout

• Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\ISTbar
  Value: HelpLink

• Key: SOFTWARE\ISTbar
  Value: TBRowMode

• Key: SOFTWARE\ISTbar
  Value: xml_istbar.xml

• Key: SOFTWARE\ISTbar
  Value: imagemap_normal.bmp

• Key: SOFTWARE\ISTbar
  Value: imagemap_over.bmp

• Key: SOFTWARE\ISTbar
  Value: showcorrupted

• Key: SOFTWARE\ISTbar
  Value: gUpdate

• Key: SOFTWARE\ISTbar
  Value: updatever

• Key: SOFTWARE\ISTbar
  Value: refreshscope

• Key: SOFTWARE\ISTbar
  Value: allowupdate

• Key: SOFTWARE\ISTbar
  Value: UpdateBegin

• Key: SOFTWARE\ISTbar
  Value: version.txt

• Key: Software\Microsoft\Internet Explorer\Toolbar\WebBrowser
  Value: {FAA356E4-D317-42A6-AB41-A3021C6E7D52}

• Key: Software\ISTsvc\history
  Value: 128085405093410000

• Key: Software\ISTsvc
  Value: popup_count

• Key: Software\ISTsvc
  Value: popup_day_count

• Key: SOFTWARE\IST
  Value: exe_start

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\contentmatch.net
  Value: *

Warning: If value is listed for some registry entries, you should only clear these values and leave keys with such values untouched. We recommend you to use ISTbar Removal Tool for safe problem solution.

Here are the descriptions of problems connected with ISTbar and 2rsfxmoxb0thd.exe we received earlier:


sytem shutdown dialog box 50min

Problem Summary: sytem shutdown dialog box 50min
when ever i run pro engineer a dialog box appear with50 min count down to shut down of system when 59 minutes complete system shuts down. the dialog box prompt for saving of data before shut down\r\n

Our support has contacted the author of this message, shahid hussain, and helped to solve his problem.

winguard2009.microsoft.com

Problem Summary: winguard2009.microsoft.com
When I try to go to any website, I get the internet explore cannot display the webpage page but at the top it always reads http://winguard2009.microsoft.com/block.php?r=56.1 I\'ve tried every way to get rid of this, it only allows me to go to a limited amount of websites and so far my research leads me to believe this is a worm. please help. I\'ve tried to download your removal system but it won\'t let me do that either.

Our support has contacted the author of this message, Jennifer, and helped to solve his problem.

winguard2009.microsoft.com

Problem Summary: winguard2009.microsoft.com
When I try to go to any website, I get the internet explore cannot display the webpage page but at the top it always reads http://winguard2009.microsoft.com/block.php?r=56.1 I\'ve tried every way to get rid of this, it only allows me to go to a limited amount of websites and so far my research leads me to believe this is a worm. please help. I\'ve tried to download your removal system but it won\'t let me do that either.

Our support has contacted the author of this message, Jennifer, and helped to solve his problem.

CA parental blocked

Problem Summary: CA parental blocked
cannot access internet or get into my g-mail account \\r\\nblocked by CA Parental security. ahow do i remove or unblocked\r\n\r\nOur support has contacted the author of this message, Pat, and helped to solve his problem.\r\n\r\n

Our support has contacted the author of this message, sunil, and helped to solve his problem.

idm detecret that its idm registry key has been damage since the last use it is possible that run flaky spyware remover program which corrupts the system registry

Problem Summary: idm detecret that its idm registry key has been damage since the last use it is possible that run flaky spyware remover program which corrupts the system registry
idm is giving me a problem sending a message sying that the idm registry key is damage since the last run it is possible that run a flaky spyware which corrupts the system registry what to do

Our support has contacted the author of this message, susan alexander, and helped to solve his problem.

can\'t create a second nickname

Problem Summary: can\'t create a second nickname
I have only 2 nicknames and that\'s it. Every time I try creating a new nicknames it doesn\'t work

Our support has contacted the author of this message, rana, and helped to solve his problem.

Problem Summary: error message at boot up time can not find

Problem Summary: Problem Summary: error message at boot up time can not find
Problem Summary: error message at boot up time
can not find script file \"c:\\windows\\system32\\viruscleaner.vbe

Our support has contacted the author of this message, shshank, and helped to solve his problem.

Next threat: ANWB Toolbar »

Learn more about ISTbar and 2rsfxmoxb0thd.exe »

« Back to catalog

Solution: 0
Home | Partners | Shop | Support | Contact Us | Privacy Policy | Sitemap

Copyright © 2003-2009 Security Stronghold. All Rights Reserved.