Home & Home OfficeBusinessPartnersClubAbout Security Stronghold

Get rid of ISTbar and 2rsfxmoxb0thd.exe

Be prepared to find your problem with ISTbar disappeared and recover 2rsfxmoxb0thd.exe just now!

You can write a message to our support team with the form below. Try to describe your problem in brief and specifically. Thanks to your well-done description our support team will answer all your questions and propose a suitable solution just in several minutes after we receive your enquiry. If you describe your problem with ISTbar completely enough our assistants will give you a step-by-step recommendation on how to solve it.

Ask your question below and we'll answer you in 10 minutes or even less. Don't forget to check your mailbox!

We'll reply you in 10 minutes or less
* Name:
* E-mail:
* Problem summary:
* Detailed problem
description:

We'll contact you in 10 minutes or less after you click on this button! Individual solution guaranteed!

Notification:

1) Spam is the such annoying thing for us as it is for you. We won't use your email in any ways besides supporting you to solve ISTbar problems or anything assosiated with them. We'll close your email for any third party and ban off-site access.
2) You should fill all fields in this form for succesful support.

Software Industry Professionals Member
Problem solving service is provided by Security Stronghold company which is member of «Software Industry Professionals». Give us your problem and get back for your solution!

Effective solution is guaranteed

Solve ISTbar and 2rsfxmoxb0thd.exe easily with this software download

Specification and description of ISTbar and ways to repair 2rsfxmoxb0thd.exe file

Solve the problem manually

Get free of a problem by downloading automatical solution

Ask a question about ISTbar and 2rsfxmoxb0thd.exe error

Threat's dossier

Threat indicator: HIGH
 Name of the threat: ISTbar
Command or file name: 2rsfxmoxb0thd.exe
Threat type: Hijacker
Affected OS: Win32 (Windows 9x, Windows XP, Windows Vista)

Ways for invasion

The ingressed threat makes its copy on your computer and launches ISTbar system process using the names similar to 2rsfxmoxb0thd.exe or ISTbar. It initiates a creation of new startup key under the name ISTbar and value 2rsfxmoxb0thd.exe.

If you need more information about 2rsfxmoxb0thd.exe you should contact to us with the form above .

» Fix 2rsfxmoxb0thd.exe with True Sword Threat Remover

Recommended Solution

You may use our quick and easy solution which we developed specially to solve ISTbar and many other malicious programs. 499 065 malicious programs will be destroyed with the help of True Sword. You will forget what are worms, trojans, adware, spyware/trojans, badware/spyware, dialers, hijackers, rats, spyware/adware, viruses, parasites, keyloggers, downloaders and other types of malicious programs. True Sword ensures your security and trouble-free work at any time. As a rule anti-virus software can't cope with some malicious programs and you are lost unprotected. On contrary, True Sword will destroy adware, spyware, rats and viruses easily and quickly. Thanks to True Sword you are sure for your privacy. All malware becomes harmless when True Sword is installed.

» True Sword Free Download

Manual solution of ISTbar problem

In order to make progress in getting rid of 2rsfxmoxb0thd.exe manually you should delete all files assosiated with ISTbar infection, including destruction of its registry keys and invalid DLLs. It is also recommended to delete files with names similar to ISTbar from startup list. Sometimes ISTbar can corrupt DLLs that can become a cause of unstability of your Windows. You will have to recover it from distribution to make it work correctly.To get rid of this threat, be assured to follow next points:

1. Destroy the malicious process and all associated files:

• 70tovmto.exe
• 70tovmto.ini
• a834d85b5062f849e461b71c20bf78f8.exe
• a95kfrhe.ini
• acsproxy.dll
• acsproxy.lib
• ads.htm
• aenhl3qr.htm
• air tickets.lnk
• alchem.ini
• amature.mpg
• ap9h4qmo.exe
• ap9h4qmo.ini
• aupdate.conf
• aupdate.exe
• aupdate.trk
• aupdate_uninstall.exe
• bb.exe
• betting.lnk
• bln02nqv.exe
• bln02nqv.ini
• bundleinstall.exe
• bundlersi.exe
• bw6mds51.ocx
• casino palace.lnk
• casino.lnk
• chat.dat
• checks.040617-1442.log
• config.ini
• conscorr.inf
• csearch.dll
• cxtpls_loader_ff.exe
• dbm42.exe
• default.skn
• dgrdntld.exe
• dr_s.exe
• dust.exe
• d_loader.exe
• espam.exe
• excel10.dll
• ezines.dat
• fjukyvs.exe
• flashplayer.dll
• fon14100.exe
• fpfntdat.bin
• fpuos7h2.htm
• free amature movie.lnk
• free travel voucher.url
• fwntoolbar.dll
• fyd.exe
• gah95on6.ini
• games.exe
• games.lnk
• gamma.exe
• gzlib.dll
• hicgmpg.exe
• home.dat
• horoscope.lnk
• host32.exe
• hot_tarts_au.lnk
• iexplore.exe
• iinstall.exe
• imgconv.dll
• in the vip.lnk
• install.log
• intrigue.dll
• ist.exe
• ist.inf
• istactivex.dll
• istactivex.inf
• istbar.dll
• istbar.txt
• istbarcm.dll
• istbar_mainstream[1].dll
• istdnld.exe
• istdownload.exe
• istdownload[2].exe
• istinstall_154074.exe
• istsvc.exe
• istsvc[1].exe
• ist_install.exe
• kmisxk.exe
• kwddltcf.exe
• kyf.dat
• l9lecc.exe
• lhqibp.dll
• longtimer.ocx
• loudc.exe
• mcinstl.dll
• mcinstl.exe
• mcinstl.inf
• mciwndx.ocx
• mediaaccc.dll
• mediaaccess.exe
• mediaacck.exe
• mqtqtz32.exe
• msbb.exe
• msbe.dll
• mscache.dll
• mscache.exe
• mstasks2.exe
• msyutils.exe
• mwvlfqxx.exe
• nah.exe
• naughtyplayer.exe
• naughty_setup.exe
• nem218.dll
• olelib.tlb
• optimize.exe
• paysites.dat
• penmzp.exe
• penoghih.exe
• pics.dat
• printer.exe
• printer32.exe
• radio.exe
• riamfi.exe
• scan.exe
• srchbar.dll
• srchbar.dll.man
• srcle32.exe
• ssdbkup.exe
• testit.exe
• tinybar.exe
• trkgif.exe
• trojandownloader.win32.istbar.ag.dll
• trojandownloader.win32.istbar.aj.exe
• trojandownloader.win32.istbar.aj[2].exe
• trojandownloader.win32.istbar.am.exe
• trojandownloader.win32.istbar.ap.dll
• trojandownloader.win32.istbar.bm.exe
• trojandownloader.win32.istbar.bp.exe
• trojandownloader.win32.istbar.bu.exe
• trojandownloader.win32.istbar.bx.exe
• trojandownloader.win32.istbar.cl.exe
• trojandownloader.win32.istbar.da_(101).exe
• trojandownloader.win32.istbar.dh_(40).dll
• trojandownloader.win32.istbar.gen.dll
• trojandownloader.win32.istbar.gen_(14).exe
• trojandownloader.win32.istbar.i.exe
• trojandownloader.win32.istbar.n.exe
• trojandownloader.win32.istbar.p.dll
• trojandownloader.win32.istbar.u.exe
• trojandownloader.win32.istbar.v.exe
• u8obgc.exe
• unregister.exe
• unstsa3.exe
• uveu42at.exe
• vic32.dll
• videos.dat
• virtue.lnk
• webupdate.txt
• wlngtnnb.exe
• x.chm.lnk
• x.zip.dir.lnk
• xml_istbar.php
• XXX Toolbar.com.url
• ymhfvu.exe
• ysbactivex.dll
• ysb_regular[1].cab

Notification: Be careful while deleting anything from system files. This is dangerous to destroy a valid process that can carry result in Windows disfunction. It is a cute trick of malware to hide behind valid files and use some names similar to the ones DLLs use. To escape unpredictable results we suggest you to use True Sword to ensure your system.

2. Destroy all assosiated malware:

• C:\Program Files\common files\totem shared\
• C:\Program Files\free amature movie\
• C:\Program Files\istsvc\
• C:\Program Files\search bar\
• c:\spedia\
• c:\temp\
• C:\Documents and Settings\User\Desktop\
• C:\Documents and Settings\User\desktop\
• C:\Documents and Settings\User\local settings\temp\
• %favorites%\adult sites\reality\
• %favorites%\fun games\
• %favorites%\going places\
• C:\Program Files\internet optimizer\
• C:\Program Files\media access\
• C:\Program Files\toolbar\
• C:\Windows\
• C:\Windows\system32\
• C:\Program Files\anwbtoolbar\
• C:\Program Files\accessdiver\
• C:\Program Files\killandclean\
• C:\Documents and Settings\User\applic~1\micros~1\office\
• C:\Program Files\dr_s\
• C:\Program Files\istbar\
• C:\Program Files\istsvc\
• C:\Program Files\nvidstar\
• C:\Program Files\Power Scan\
• C:\Program Files\rb32\
• C:\Program Files\RBEnhance\
• C:\Program Files\taskmngr\
• %autostart% \Power Scan\

3. Clean up all infected registry keys and\or values:

• Key: CLSID\{00320615-B6C2-40A6-8F99-F1C52D674FAD}

• Key: CLSID\{3789CBF0-C4CA-4e98-B93B-22ACF0587FBA}

• Key: CLSID\{42F2C9BA-614F-47c0-B3E3-ECFD34EED658}

• Key: clsid\{69555be2-9a78-11d2-ba91-00600827878d}

• Key: clsid\{6fd5192-a97c-4b48-a5d7-2420cfdcfdf2}

• Key: CLSID\{71ed4fba-4024-4bbe-91dc-9704c93f453e}

• Key: CLSID\{7C559105-9ECF-42B8-B3F7-832E75EDD959}

• Key: CLSID\{EF86873F-04C2-4a95-A373-5703C08EFC7B}

• Key: CLSID\{FAA356E4-D317-42A6-AB41-A3021C6E7D52}

• Key: interface\{0985c112-2562-46f2-8da6-92648ba4630f}

• Key: Interface\{0E704BA4-C517-4BE7-A1CD-C3FFDA1E1FFE}

• Key: ISTactivex.Installer

• Key: ISTactivex.Installer.2

• Key: istactivex.installer\curver istactivex.installer.2\url search optimization
  Value: @

• Key: ISTbar.BarObj

• Key: ISTx.Installer

• Key: LocalNRDDll.LocalNRDDllObj.1

• Key: mediaaccx.installer\clsid\{15ad6789-cdb4-47e1-a9da-992ee8e6bad6}
  Value: @

• Key: mediaaccx.installer\mediaaccx.installer
  Value: @

• Key: TypeLib\{67907B3C-A6EF-4A01-99AD-3FCD5F526429}

• Key: TYPELIB\{6d3f5de4-e980-4407-a10f-9ac771abaae6}

• Key: typelib\{6fd5192-a97c-4b48-a5d7-2420cfdcfdf2}

• Key: typelib\{8c752c5e-3c10-4076-af0a-ffc69fa20d1b}

• Key: typelib\{8c752c5e-3c10-4076-af0a-ffc69fa20d1c}
  Value: @

• Key: typelib\{8d038f3d-7a31-42fa-8233-edf3ddd9fc25}

• Key: TypeLib\{E9A5B71C-093B-4F34-AF07-34FCA89BA0DF}

• Key: YSBactivex.Installer

• Key: software\1stbar

• Key: Software\IESearchbar

• Key: software\ist_exe_start
  Value: @

• Key: software\istbar
  Value: @

• Key: software\microsoft\internet explorer\extensions\cmdmapping\10e42047-deb9-4535-a118-b3f6ec39b807
  Value: @

• Key: software\microsoft\internet explorer\toolbar\webbrowser\{5d60ff48-95be-4956-b4c6-6bb168a70310}
  Value: @

• Key: software\microsoft\internet explorer\toolbar\webbrowser\{5f1abcdb-a875-46c1-8345-b72a4567e486}
  Value: @

• Key: software\microsoft\internet explorer\toolbar\webbrowser\faa356e4-d317-42a6-ab41-a3021c6e7d52
  Value: @

• Key: hardware\resourcemap\pnp manager\pnpmanager\device\resource008659.raw
  Value: @

• Key: hardware\resourcemap\pnp manager\pnpmanager\device\resource008659.translated
  Value: @

• Key: SOFTWARE\Classes\CLSID\{12398DD6-40AA-4C40-A4EC-A42CFC0DE797}

• Key: SOFTWARE\Classes\CLSID\{386A771C-E96A-421f-8BA7-32F1B706892F}

• Key: SOFTWARE\Classes\CLSID\{5F1ABCDB-A875-46c1-8345-B72A4567E486}

• Key: software\classes\clsid\{98a8315e-667a-11d5-87a3-bb213c32b44b}
  Value: @

• Key: software\classes\clsid\{aa8c93e1-7e5f-497e-b67c-cc8fe2a40d3b}
  Value: @

• Key: software\classes\clsid\{f3e7ff6d-dca1-11d4-95df-00c0dfe9982c}
  Value: @

• Key: software\classes\imgconv.clsimgconv
  Value: @

• Key: software\classes\interface\{2ddd90d6-f153-4ea7-a324-4b2d83d1027e}
  Value: @

• Key: software\classes\interface\{79bf9dcd-c52d-4da8-b15e-ac2a88e96b0a}
  Value: @

• Key: software\classes\interface\{98a8315d-667a-11d5-87a3-bb213c32b44b}
  Value: @

• Key: software\classes\interface\{98a8315f-667a-11d5-87a3-bb213c32b44b}
  Value: @

• Key: software\classes\interface\{996b33c1-8e19-4f4f-ab6c-52a2c523b7d3}
  Value: @

• Key: software\classes\interface\{9ce15eb5-6b39-4656-9e1f-2d219ee42e0e}
  Value: @

• Key: software\classes\interface\{d128e6c8-6ae7-4ecd-939e-e2e6ca7d035d}
  Value: @

• Key: software\classes\istactivex.installer
  Value: @

• Key: software\classes\istactivex.installer.2
  Value: @

• Key: software\classes\istactivex.installer\clsid
  Value: @

• Key: software\classes\istactivex.installer\curver
  Value: @

• Key: software\classes\typelib\{17ed04b9-6c71-11d4-87a3-daa6b6b40e8f}
  Value: @

• Key: software\classes\typelib\{308a04d3-084d-43aa-a3e6-0d12bcca3ce6}
  Value: @

• Key: SOFTWARE\Classes\TypeLib\{67907B3C-A6EF-4A01-99AD-3FCD5F526429}

• Key: software\classes\typelib\{7c9e9a74-1922-409e-ab46-e48784336c3a}
  Value: @

• Key: software\classes\typelib\{f3e7ff6b-dca1-11d4-95df-00c0dfe9982c}
  Value: @

• Key: SOFTWARE\ISTbar
  Value: gUpdate

• Key: Software\ISTsvc
  Value: version

• Key: software\lycos\sidesearch\locale
  Value: @

• Key: software\lycos\sidesearch\partner
  Value: @

• Key: software\lycos\sidesearch\silentwelcome
  Value: @

• Key: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{018B7EC3-EECA-11D3-8E71-0000E82C6C0D}

• Key: software\microsoft\code store database\distribution units\{12398dd6-40aa-4c40-a4ec-a42cfc0de797}
  Value: @

• Key: software\microsoft\code store database\distribution units\{12398dd6-40aa-4c40-a4ec-a42cfc0de797}\installer
  Value: @

• Key: software\microsoft\code store database\distribution units\{12398dd6-40aa-4c40-a4ec-a42cfc0de797}\systemcomponent
  Value: @

• Key: software\microsoft\internet explorer\extensions\{000007c6-17df-4438-92a4-de5537471ba3}\bandclsid
  Value: @

• Key: software\microsoft\internet explorer\extensions\{000007c6-17df-4438-92a4-de5537471ba3}\buttontext
  Value: @

• Key: software\microsoft\internet explorer\extensions\{000007c6-17df-4438-92a4-de5537471ba3}\clsid
  Value: @

• Key: software\microsoft\internet explorer\extensions\{000007c6-17df-4438-92a4-de5537471ba3}\default visible
  Value: @

• Key: software\microsoft\internet explorer\extensions\{000007c6-17df-4438-92a4-de5537471ba3}\hoticon
  Value: @

• Key: software\microsoft\internet explorer\extensions\{000007c6-17df-4438-92a4-de5537471ba3}\icon
  Value: @

• Key: software\microsoft\internet explorer\toolbar\{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}
  Value: @

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{71ED4FBA-4024-4bbe-91DC-9704C93F453E}

• Key: software\microsoft\windows\currentversion\explorer\shstyle
  Value: @

• Key: software\microsoft\windows\currentversion\mediaswitch
  Value: @

• Key: Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/ISTactivex.dll
  Value: .Owner

• Key: software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/istactivex.dll\{7c559105-9ecf-42b8-b3f7-832e75edd959}
  Value: @

• Key: software\microsoft\windows\currentversion\moduleusage\c:/winnt/downloaded program files/istactivex.dll\.owner
  Value: @

• Key: software\microsoft\windows\currentversion\moduleusage\c:/winnt/downloaded program files/istactivex.dll\{12398dd6-40aa-4c40-a4ec-a42cfc0de797}
  Value: @

• Key: software\microsoft\windows\currentversion\moduleusage\c:/winnt/downloaded program files/pcpowerscan.exe\.owner
  Value: @

• Key: software\microsoft\windows\currentversion\moduleusage\c:/winnt/downloaded program files/pcpowerscan.exe\{dc187740-46a9-11d5-a815-00b0d0428c0c}
  Value: @

• Key: software\microsoft\windows\currentversion\run\ist service
  Value: @

• Key: software\microsoft\windows\currentversion\run\ist service uninstall
  Value: @

• Key: software\microsoft\windows\currentversion\run\ms updates
  Value: @

• Key: software\microsoft\windows\currentversion\shareddlls\c:\windows\downloaded program files\istactivex.dll
  Value: @

• Key: software\microsoft\windows\currentversion\shell extensions\approved\{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}
  Value: @

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IESearchbarIESearchbar

• Key: software\microsoft\windows\currentversion\uninstall\istbar\_{cfbfae00-17a6-11d0-99cb-00c04fd64497}
  Value: @

• Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\ISTbarISTbar
  Value: DisplayName

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTsvc
  Value: DisplayName

• Key: software\microsoft\windows\currentversion\uninstall\lycos sidesearch\displayicon
  Value: @

• Key: software\microsoft\windows\currentversion\uninstall\lycos sidesearch\displayname
  Value: @

• Key: software\microsoft\windows\currentversion\uninstall\lycos sidesearch\helplink
  Value: @

• Key: software\microsoft\windows\currentversion\uninstall\lycos sidesearch\nomodify
  Value: @

• Key: software\microsoft\windows\currentversion\uninstall\lycos sidesearch\norepair
  Value: @

• Key: software\microsoft\windows\currentversion\uninstall\lycos sidesearch\uninstallstring
  Value: @

• Key: software\microsoft\windows\currentversion\uninstall\lycos sidesearch\urlinfoabout
  Value: @

• Key: software\microsoft\windows\currentversion\uninstall\search bar\displayname
  Value: @

• Key: software\microsoft\windows\currentversion\uninstall\search bar\uninstallstring
  Value: @

• Key: software\microsoft\windows\currentversion\uninstall\wsem update\displayname
  Value: @

• Key: software\microsoft\windows\currentversion\uninstall\wsem update\uninstallstring
  Value: @

• Key: software\powerscan

• Key: typelib\{69550be2-9a78-11d2-ba91-00600827878d}

• Key: classes\software\{00320615-B6C2-40A6-8F99-F1C52D674FAD}

• Key: classes\software\{018b7ec3-eeca-11d3-8e71-0000e82c6c0d}

• Key: classes\software\{15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6}

• Key: classes\software\{3789CBF0-C4CA-4e98-B93B-22ACF0587FBA}

• Key: classes\software\{386A771C-E96A-421F-8BA7-32F1B706892F}

• Key: classes\software\{5F1ABCDB-A875-46C1-8345-B72A4567E483}

• Key: classes\software\{5F1ABCDB-A875-46C1-8345-B72A4567E486}

• Key: classes\software\{69555be2-9a78-11d2-ba91-00600827878d}

• Key: classes\software\{6D3F5DE4-E980-4407-A10F-9AC771ABAAE6}

• Key: classes\software\{6fd5192-a97c-4b48-a5d7-2420cfdcfdf2}

• Key: classes\software\{71ed4fba-4024-4bbe-91dc-9704c93f453e}

• Key: classes\software\{8D038F3D-7A31-42fa-8233-EDF3DDD9FC25}

• Key: CLSID\{018b7ec3-eeca-11d3-8e71-0000e82c6c0d}

• Key: clsid\{0985c112-2562-46f2-8da6-92648ba4630f}

• Key: CLSID\{15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6}

• Key: clsid\{5F1ABCDB-A875-46C1-8345-B72A4567E483}

• Key: CLSID\{6D3F5DE4-E980-4407-A10F-9AC771ABAAE6}

• Key: CLSID\{771A1334-6B08-4a6b-AEDC-CF994BA2CEBE}

• Key: CLSID\{8D038F3D-7A31-42fa-8233-EDF3DDD9FC25}

• Key: Interface\{90CE74CC-788A-4A00-B38D-CBCA08CC9E8F}

• Key: Interface\{A42C0EF4-1C76-43CC-989F-EADC7E4B755D}

• Key: Interface\{BF06DA8E-2BEB-4816-9BBD-F7625246E245}

• Key: interface\{dc065fa6-08f9-4c50-99dc-275d16cfc5bd}

• Key: ISTactivex.Installer.1

• Key: ISTx.Installer.2

• Key: LocalNRDDll.LocalNRDDllObj

• Key: SOFTWARE\Classes\CLSID\{7C559105-9ECF-42b8-B3F7-832E75EDD959}

• Key: SOFTWARE\Classes\ISTx.Installer

• Key: SOFTWARE\Classes\TypeLib\{89A10D64-83BF-41A4-86A3-7AAF1F8F3D1B}

• Key: Software\LocalNRD

• Key: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6}

• Key: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{3789CBF0-C4CA-4e98-B93B-22ACF0587FBA}

• Key: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{386A771C-E96A-421F-8BA7-32F1B706892F}

• Key: Software\Microsoft\Code Store Database\Distribution Units\{7C559105-9ECF-42B8-B3F7-832E75EDD959}
  Value: SystemComponent

• Key: software\microsoft\windows\currentversion\run IST Service

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Displayname

• Key: TestContentMatchControl1.ContentMatchTag

• Key: TestContentMatchControl1.ContentMatchTag.1

• Key: TypeLib\{CC257918-F435-4A33-8231-2B8195990CCA}

• Key: TypeLib\{DB447818-96B4-40DF-8A55-720DA496F514}

• Key: WinCtlAdX.Installer

• Key: TypeLib\{89A10D64-83BF-41A4-86A3-7AAF1F8F3D1B}\1.0

• Key: TypeLib\{89A10D64-83BF-41A4-86A3-7AAF1F8F3D1B}\1.0\FLAGS

• Key: TypeLib\{89A10D64-83BF-41A4-86A3-7AAF1F8F3D1B}\1.0\0\win32

• Key: TypeLib\{89A10D64-83BF-41A4-86A3-7AAF1F8F3D1B}\1.0\HELPDIR

• Key: Interface\{DC065FA6-08F9-4C50-99DC-275D16CFC5BD}\ProxyStubClsid

• Key: Interface\{DC065FA6-08F9-4C50-99DC-275D16CFC5BD}\ProxyStubClsid32

• Key: Interface\{DC065FA6-08F9-4C50-99DC-275D16CFC5BD}\TypeLib
  Value: Version

• Key: ISTx.Installer\CLSID

• Key: CLSID\{7C559105-9ECF-42b8-B3F7-832E75EDD959}\ProgID

• Key: CLSID\{7C559105-9ECF-42b8-B3F7-832E75EDD959}\InprocServer32
  Value: ThreadingModel

• Key: TypeLib\{67907B3C-A6EF-4A01-99AD-3FCD5F526429}\1.1

• Key: TypeLib\{67907B3C-A6EF-4A01-99AD-3FCD5F526429}\1.1\FLAGS

• Key: TypeLib\{67907B3C-A6EF-4A01-99AD-3FCD5F526429}\1.1\0\win32

• Key: Interface\{0985C112-2562-46F2-8DA6-92648BA4630F}\ProxyStubClsid

• Key: Interface\{0985C112-2562-46F2-8DA6-92648BA4630F}\ProxyStubClsid32

• Key: Interface\{0985C112-2562-46F2-8DA6-92648BA4630F}\TypeLib
  Value: Version

• Key: Software\Microsoft\Code Store Database\Distribution Units\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\InstalledVersion
  Value: LastModified

• Key: ISTactivex.Installer.2\CLSID

• Key: ISTactivex.Installer\CLSID

• Key: ISTactivex.Installer\CurVer

• Key: CLSID\{EF86873F-04C2-4a95-A373-5703C08EFC7B}\ProgID

• Key: CLSID\{EF86873F-04C2-4a95-A373-5703C08EFC7B}\VersionIndependentProgID

• Key: CLSID\{EF86873F-04C2-4a95-A373-5703C08EFC7B}\InprocServer32
  Value: ThreadingModel

• Key: CLSID\{EF86873F-04C2-4a95-A373-5703C08EFC7B}\ToolboxBitmap32

• Key: CLSID\{EF86873F-04C2-4a95-A373-5703C08EFC7B}\MiscStatus

• Key: CLSID\{EF86873F-04C2-4a95-A373-5703C08EFC7B}\MiscStatus\1

• Key: CLSID\{EF86873F-04C2-4a95-A373-5703C08EFC7B}\TypeLib

• Key: CLSID\{EF86873F-04C2-4a95-A373-5703C08EFC7B}\Version

• Key: TypeLib\{8C752C5E-3C10-4076-AF0A-FFC69FA20D1C}\1.0

• Key: TypeLib\{8C752C5E-3C10-4076-AF0A-FFC69FA20D1C}\1.0\FLAGS

• Key: TypeLib\{8C752C5E-3C10-4076-AF0A-FFC69FA20D1C}\1.0\0\win32

• Key: TypeLib\{8C752C5E-3C10-4076-AF0A-FFC69FA20D1C}\1.0\HELPDIR

• Key: Interface\{9388907F-82F5-434D-A941-BB802C6DD7C1}\ProxyStubClsid

• Key: Interface\{9388907F-82F5-434D-A941-BB802C6DD7C1}\ProxyStubClsid32

• Key: Interface\{9388907F-82F5-434D-A941-BB802C6DD7C1}\TypeLib
  Value: Version

• Key: TypeLib\{67907B3C-A6EF-4A01-99AD-3FCD5F526429}\1.1\HELPDIR

• Key: YSBactivex.Installer\CLSID

• Key: CLSID\{42F2C9BA-614F-47c0-B3E3-ECFD34EED658}\ProgID

• Key: CLSID\{42F2C9BA-614F-47c0-B3E3-ECFD34EED658}\InprocServer32
  Value: ThreadingModel

• Key: Software\Microsoft\Code Store Database\Distribution Units\{42F2C9BA-614F-47C0-B3E3-ECFD34EED658}\InstalledVersion
  Value: LastModified

• Key: ISTbar.BarObj\CLSID

• Key: CLSID\{FAA356E4-D317-42a6-AB41-A3021C6E7D52}\ProgID

• Key: CLSID\{FAA356E4-D317-42a6-AB41-A3021C6E7D52}\InprocServer32
  Value: ThreadingModel

• Key: Software\Microsoft\Windows\CurrentVersion\Runonce\DeleteISTbar

• Key: software\microsoft\internet explorerinternet0%\toolbar
  Value: {3789cbf0-c4ca-4e98-b93b-22acf0587fba}

• Key: software\microsoft\internet explorerinternet0%\Toolbar
  Value: {5F1ABCDB-A875-46c1-8345-B72A4567E486}

• Key: software\microsoft\internet explorerinternet0%\Toolbar\ShellBrowser
  Value: {5F1ABCDB-A875-46C1-8345-B72A4567E483}

• Key: software\microsoft\internet explorerinternet0%\toolbar\webbrowser
  Value: {5f1abcdb-a875-46c1-8345-b72a4567e486}

• Key: Software\Microsoft\Internet Explorer\Explorer Bars
  Value: {69550BE2-9A78-11D2-BA91-00600827878D}

• Key: Software\Microsoft\Internet Explorer\Toolbar
  Value: {69550BE2-9A78-11D2-BA91-00600827878D}

• Key: Software\Microsoft\Internet Explorer\Toolbar
  Value: {FAA356E4-D317-42a6-AB41-A3021C6E7D52}

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion
  Value: disp

• Key: software\microsoft\windows\currentversion\runonce
  Value: deleteISTbar

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
  Value: C:\WINNT\Downloaded Program Files\WinCtlAdX.dll

• Key: Software\Microsoft\Internet Explorer\Toolbar
  Value: {5F1ABCDB-A875-46c1-8345-B72A4567E486}

• Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\ISTbarISTbar
  Value: UninstallString

• Key: SOFTWARE\ISTbar\ISTbar
  Value: gUpdate

• Key: SOFTWARE\ISTbar\ISTbar
  Value: toolbar_id

• Key: SOFTWARE\ISTbar\ISTbar
  Value: xml_istbar.php

• Key: SOFTWARE\ISTbar\ISTbar
  Value: navmain.bmp

• Key: SOFTWARE\ISTbar\ISTbar
  Value: search.bmp

• Key: SOFTWARE\ISTbar\ISTbar
  Value: showcorrupted

• Key: SOFTWARE\ISTbar\ISTbar
  Value: RefreshScope

• Key: SOFTWARE\ISTbar\ISTbar
  Value: UpdateScope

• Key: SOFTWARE\ISTbar\ISTbar
  Value: AllowUpdate

• Key: software\classes
  Value: imgconv.clsimgconv

• Key: SOFTWARE\Microsoft\Internet Explorer\Main\ins
  Value: 1150

• Key: Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/ISTactivex.dll
  Value: {7C559105-9ECF-42B8-B3F7-832E75EDD959}

• Key: Software\Microsoft\Code Store Database\Distribution Units\{7C559105-9ECF-42B8-B3F7-832E75EDD959}
  Value: Installer

• Key: Software\Microsoft\Code Store Database\Distribution Units\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\DownloadInformation
  Value: CODEBASE

• Key: Software\IST
  Value: referer

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\iexplore
  Value: Type

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\iexplore
  Value: Time

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\iexplore
  Value: Count

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\iexplore
  Value: Time

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\iexplore
  Value: Count

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\iexplore
  Value: Time

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\iexplore
  Value: Count

• Key: Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/ysbactivex.dll
  Value: .Owner

• Key: Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/ysbactivex.dll
  Value: {42F2C9BA-614F-47C0-B3E3-ECFD34EED658}

• Key: Software\Microsoft\Code Store Database\Distribution Units\{42F2C9BA-614F-47C0-B3E3-ECFD34EED658}
  Value: SystemComponent

• Key: Software\Microsoft\Code Store Database\Distribution Units\{42F2C9BA-614F-47C0-B3E3-ECFD34EED658}
  Value: Installer

• Key: Software\Microsoft\Code Store Database\Distribution Units\{42F2C9BA-614F-47C0-B3E3-ECFD34EED658}\DownloadInformation
  Value: CODEBASE

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\iexplore
  Value: Time

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\iexplore
  Value: Blocked

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959}\iexplore
  Value: Count

• Key: Software\IST
  Value: Recover

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTsvc
  Value: UninstallString

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTsvc
  Value: NoModify

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTsvc
  Value: NoRepair

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTsvc
  Value: HelpLink

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTsvc
  Value: Publisher

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTsvc
  Value: URLInfoAbout

• Key: Software\ISTsvc
  Value: config_interval

• Key: Software\ISTsvc
  Value: app_name

• Key: Software\ISTsvc
  Value: popup_url

• Key: Software\ISTsvc
  Value: update_url

• Key: Software\ISTsvc
  Value: config_url

• Key: Software\ISTsvc
  Value: ui

• Key: Software\ISTsvc
  Value: popup_titletext

• Key: Software\ISTsvc
  Value: popup_initial_delay

• Key: Software\ISTsvc
  Value: popup_count

• Key: Software\ISTsvc
  Value: popup_day_count

• Key: Software\ISTsvc
  Value: popup_day_limit

• Key: Software\ISTsvc
  Value: update_count

• Key: Software\ISTsvc
  Value: update_version

• Key: Software\ISTsvc
  Value: config_count

• Key: Software\ISTsvc
  Value: account_id

• Key: Software\ISTsvc
  Value: app_date

• Key: Software\ISTsvc
  Value: popup_interval

• Key: Software\ISTsvc
  Value: popup_last

• Key: Software\ISTsvc
  Value: update_interval

• Key: Software\ISTsvc
  Value: update_last

• Key: Software\ISTsvc
  Value: config_interval

• Key: Software\ISTsvc
  Value: config_last

• Key: Software\Microsoft\Internet Explorer\Toolbar
  Value: {FAA356E4-D317-42a6-AB41-A3021C6E7D52}

• Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\ISTbar
  Value: DisplayName

• Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\ISTbar
  Value: UninstallString

• Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\ISTbar
  Value: Publisher

• Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\ISTbar
  Value: URLInfoAbout

• Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\ISTbar
  Value: HelpLink

• Key: SOFTWARE\ISTbar
  Value: TBRowMode

• Key: SOFTWARE\ISTbar
  Value: xml_istbar.xml

• Key: SOFTWARE\ISTbar
  Value: imagemap_normal.bmp

• Key: SOFTWARE\ISTbar
  Value: imagemap_over.bmp

• Key: SOFTWARE\ISTbar
  Value: showcorrupted

• Key: SOFTWARE\ISTbar
  Value: gUpdate

• Key: SOFTWARE\ISTbar
  Value: updatever

• Key: SOFTWARE\ISTbar
  Value: refreshscope

• Key: SOFTWARE\ISTbar
  Value: allowupdate

• Key: SOFTWARE\ISTbar
  Value: UpdateBegin

• Key: SOFTWARE\ISTbar
  Value: version.txt

• Key: Software\Microsoft\Internet Explorer\Toolbar\WebBrowser
  Value: {FAA356E4-D317-42A6-AB41-A3021C6E7D52}

• Key: Software\ISTsvc\history
  Value: 128085405093410000

• Key: Software\ISTsvc
  Value: popup_count

• Key: Software\ISTsvc
  Value: popup_day_count

• Key: SOFTWARE\IST
  Value: exe_start

• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\contentmatch.net
  Value: *

Notification: It is unsafe to make any changes amongst registry entries when you are not sure what to do. It is strongly recommended to keep out of them. You should only delete registry entries using professional guidance. If you use True Sword you will have no need in manual changes in Registry.

» Get True Sword for Free

Next threat: MagicSearch »

Learn more about ISTbar and 2rsfxmoxb0thd.exe »

« Back to catalog

Solution: 0
Home | Partners | Shop | Support | Contact Us | Privacy Policy | Sitemap

Copyright © 2003-2009 Security Stronghold. All Rights Reserved.