Content

Adware-ISTBar

Type
Program
SubType
Adware
Discovery Date
11/17/2004
Length
Minimum DAT
4264 (05/14/2003)
Updated DAT
5096 (08/13/2007)
Minimum Engine
5.1.00
Description Added
04/20/2004
Description Modified
01/06/2005 2:15 AM (PT)
Risk Assessment
Corporate User
N/A
Home User
N/A

Tab Navigation

Characteristics

This is not a virus or trojan. It is a direct-marketing adware application from istbar.xxxtoolbar.com

This kind of application generally comes bundled with another program, which usually discloses the fact that it is ad-supported. Users agree to have the Adware installed in the license agreement, although they may not realise at first that this file was packaged with the product they installed.

Installation

Upon execution, the application installs itself as an Internet Explorer Toolbar with links to various pornographic websites.

The following Registry key are added

HKEY_CURRENT_USER\Software\ISTbar
HKEY_CLASSES_ROOT\CLSID\{5F1ABCDB-A875-46c1-8345-B72A4567E486}
HKEY_CLASSES_ROOT\Interface\{03022430-ABC4-11D0-BDE2-00AA001A1953}
HKEY_CLASSES_ROOT\Pugi.PugiObj
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTbarISTbar

Users who would like to check for the presence of potentially unwanted programs on their system should run the command line scanner with the /PROGRAM switch.
Please note that VirusScan 7, and higher, has an option that enables users to detect this kind of program automatically (see below).

Symptoms

N/A This is not a virus or trojan

Method of Infection

N/A This is not a virus or trojan

Variants

Variants

    N/A

All Information

Overview -

This is a Potentially Unwanted Program (PUP) detection. It is not a virus or trojan. PUPs are any piece of software which a reasonably security-or privacy-minded computer user may want to be informed of.

Characteristics

Characteristics -

This is not a virus or trojan. It is a direct-marketing adware application from istbar.xxxtoolbar.com

This kind of application generally comes bundled with another program, which usually discloses the fact that it is ad-supported. Users agree to have the Adware installed in the license agreement, although they may not realise at first that this file was packaged with the product they installed.

Installation

Upon execution, the application installs itself as an Internet Explorer Toolbar with links to various pornographic websites.

The following Registry key are added

HKEY_CURRENT_USER\Software\ISTbar
HKEY_CLASSES_ROOT\CLSID\{5F1ABCDB-A875-46c1-8345-B72A4567E486}
HKEY_CLASSES_ROOT\Interface\{03022430-ABC4-11D0-BDE2-00AA001A1953}
HKEY_CLASSES_ROOT\Pugi.PugiObj
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTbarISTbar

Users who would like to check for the presence of potentially unwanted programs on their system should run the command line scanner with the /PROGRAM switch.
Please note that VirusScan 7, and higher, has an option that enables users to detect this kind of program automatically (see below).

Symptoms

Symptoms -

N/A This is not a virus or trojan

Method of Infection

Method of Infection -

N/A This is not a virus or trojan

Removal -

Removal -

Instructions on Enabling/Disabling Detection and Removal of Potentially Unwanted Programs

Variants

Variants -

    N/A