istactivex.dll = Trojan horse Downloader.Istbar.5.H

Discussion in 'Trojan Defence Suite' started by aussurucq, Dec 10, 2004.

Thread Status:
Not open for further replies.
  1. aussurucq

    aussurucq Registered Member

    Joined:
    Dec 10, 2004
    Posts:
    2
    my friends, i would like you to kindly do your best to please help me

    i have an file invaded by a trojan called 'istactivex.dll', or 'Trojan horse Downloader.Istbar.5.H'
    which my grisoft antivirus avg tells me is in the file
    'C:\Documents and Settings\User New\Local Settings\Temporary Internet Files\Content.IE5\WHUB852J\0006_regular[1].cab:\istactivex.dll'

    a good friend of mine, who i trust very much, adviced me to scan with TDS-3, but unfortunately it didn't work, it found only one positive identification, that i rightclickled and deleted, but had nothing to do with my problem

    i updated the tds after downloading, overwriting the initial 'radius.td3', then i ran 'full system scan', operating in safe mode

    THE ONLY THING THAT I COULDN'T DO, WAS TO DISABLE MY 'AVG', BECAUSE I DIDN'T KNOW HOW

    in any event, anyone knows how do i disable the anti virus grisoft 'avg', newest version 7.0?

    regards and thank you very much to all of you,

    aussurucq
     
    aussurucq, Dec 10, 2004
    #1
  2. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Hi there and welcome to the forum!
    To disable AVG normally via the systray icon open the GUI, uncheck all options, the systray icon should gray out and you can close it.
    Now scan with TDS, make sure to use all scan options and worm slider on highest.
    Does this help?
     
    Jooske, Dec 10, 2004
    #2
  3. gpdev

    gpdev Registered Member

    Joined:
    Jun 22, 2003
    Posts:
    12
    gpdev, Dec 10, 2004
    #3
  4. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    Hi aussurucq, If needs be you can scan with TDS3 in Safe mode.
    Safe mode can be acheived by pressing F8 during boot up just before Windows starts to load.
    gpdev's suggestion about scannining with Anti Spyware programs is a good one. :)

    Pilli
     
    Pilli, Dec 11, 2004
    #4
  5. aussurucq

    aussurucq Registered Member

    Joined:
    Dec 10, 2004
    Posts:
    2
    thanks a lot, JOOSKE!

    thank you very much, jooske! i appreciated your help

    also thanks to gpdev and pilli

    to all of you: i have a beautiful and different xmas card to send you, send me your e-mail and i send it back to you

    merry christmas!

    tool_eng_hugo@rodrigo.pro.br
    aussurucq
     
    aussurucq, Dec 17, 2004
    #5
  6. dvk01

    dvk01 Global Moderator

    Joined:
    Oct 9, 2003
    Posts:
    3,131
    Location:
    Loughton, Essex. UK
    Re: thanks a lot, JOOSKE!

    to get rid of the problem which is in the temporary internet files cache and therefore not active on the computer

    1) Open Control Panel
    2) Click on Internet Options
    3) On the General Tab, in the middle of the screen, click on Delete Files
    4) You may also want to check the box "Delete all offline content"
    5) Click on OK and wait for the hourglass icon to stop after it deletes the temporary internet files
    6) You can now click on Delete Cookies and click OK to delete cookies that websites have placed on your hard drive
     
    dvk01, Dec 17, 2004
    #6
  7. TheQuest

    TheQuest Registered Member

    Joined:
    Jun 9, 2003
    Posts:
    2,304
    Location:
    Kent. UK by the sea
    Re: thanks a lot, JOOSKE!

    Hi, aussurucq

    Thanks but no thanks, I am hopping that's not the Christmas Card that's been reported about on the World Ceefax and Teletext news. :eek:

    Take Care,
    TheQuest :cool:
     
    TheQuest, Dec 17, 2004
    #7
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...