HELP - removing worm Adware-ISTbar.b

[reflexology414]

A worm made it past my anti-spyware and anti-virus software. It's called:

Adware-ISTbar.b

I cannot clear this thing from my system, and I'll welcome any assistance. I've been to some forums online, and they weren't especially helpful. I'm hoping someone here will have suggestions for me.

 

[His Divine Shadow]

A free and relatively simple tool to try first is TrendMicro's free Housecall antivirus/malware scanner. Head to Housecall and run the scan and removal. If that doesn't work we'll take some more steps.

What antivirus/firewall/anti-mal/spyware software do you use? This will be helpful if Housecall fails and we need to find an alternate tool.

 

[Mitchell]

I use a program called SuperAntiSpyware free edition home. The program recommends that you fully scan your computer once a week, and it is supposed to remove adware popups. I dont recall the website url that I got the program at, because it's been a while, but if you want to check it out, type in SuperAntiSpyware free edition home, and see what comes up. I know its a free download

I'm not sure how what I suggested differs or is similar from HDS' suggestion, but it is just a thought. Good Luck. I have removed many adware and spyware popups over the course of the last six months with this program.

Mitch

 

[His Divine Shadow]

Yours is probably fine, Mitch. The advantage to Housecall as a first attempt is that it does not require installation to run. This makes it a good one to try before seeking out a more high-powered product. If Housecall fails Mitch's may be a good one to try.

 

[Mitchell]

Ah, I see. Thanks, HDS. Kurch had actually recommended SupeAntiSpyware to me in Feb, after the tech was here, due to my computer being frozen, with the adware virus. So far it has worked fine for me. Hopefully either your suggestion or mine will help with reflexology's computer problem.

Mitch

 

[reflexology414]

follow-up

A free and relatively simple tool to try first is TrendMicro's free Housecall antivirus/malware scanner. Head to Housecall and run the scan and removal. If that doesn't work we'll take some more steps.

What antivirus/firewall/anti-mal/spyware software do you use? This will be helpful if Housecall fails and we need to find an alternate tool.

Thanks so much for your kind reply. I've been away from my computer for much of the past two days or I would have responded sooner.

Housecall didn't work, unfortunately, and things have gotten worse. I now have a second 'PUP' to deal with. This one is called Adware-DFC.

I've been to some additional technical sites online, and their instructions weren't clear at all. I'll welcome any further thoughts on getting rid of these little buggers before they damage my system.

Thanks.

 

[His Divine Shadow]

Okie-dokie then; we try some more. If you have an firewall software, anti-virus software or anti-mal/spyware programs installed please list them so I don't get redundant. If you don't have a firewall active you NEED to download and install one. Try one of the following free firewalls:

ZoneAlarm
Comodo

Next, we try some antispyware utilities. Let's go with Mitch's suggestion first. Download the free version of SuperAntiSpyware and install it. If it offers or has a button to update the program click it and follow instructions. Once it is up to date run a full system scan (I can look up how to but have not used the program so I can't give it from memory).

 

[reflexology414]

...

Well, I'm still losing the fight against worms. I'll welcome any further ideas.

Oh... my current virus protection suite claims to offer firewall protection, but it obviously doesn't work.

Thanks again for sticking with me through this.

 

[Mitchell]

reflex, I'm sorry to hear you are still having worm problems. I cant think of any suggestions to get rid of it now, but I do have one for when you do. I would change your virus protection. When my computer had the problem in Feb, the tech changed my virus checker from Norton to one called Avast. Avast is great, because, instead of running a weekly virus scan like Norton or some other program, it continually runs virus checks whenever your computer goes into screensaver. On my system, it scans 20 to 30 thousand files each time the comp is in screensaver, and will immedately find and delete viruses every time it finds one.

By the way. HDS, I cant claim credit for the Superantispyware. That credit has to go to my good friend Kurch. After my comp problem, he told me to download, and it has removed probably thousands of pieces of adware over the last five months. Without it, I'd have had a tech in here again.

Good Luck., Relflex. I hope our suggestions help you with getting rid of worms and keeping them out.

Mitch

 

[fttickler]

Well still wondering....

based on HDS request.. what is the name of the program you are running. Currently I run Symantec 10.2 Corp. Since this version and the last version had spyware removal tool and has worked like a champ. I know most folks do not own a corp copy try the new version 360. IT has simialr functions. Most worms alter a windows files withing the system folder or registry ( I do not recommend you try that if your not a techie ). you can go to the Symantec site here: http://www.symantec.com/norton/security_response/removaltools.jsp

and see if your on the list. THey also offer a spyware and Virus removal service. Again though. What is the software you are currently using?

 

[His Divine Shadow]

Yes, we need to know what antivirus program and what firewall you are using. It may be worthless and, besides, I need to know what to recommend; I don't want to give you a program you already have.

 

[Mitchell]

One other point I forgot to mention about the superantispyware program: I find it useful, because it will also notify the person if a pop up of adware is evident, and will notify you that it blocked the pop up. You will still need to remove it during your weekly adware/spyware scan if you do use the program, but it doesnt allow hidden pop ups to infect your computer without notifying you.

Just wanted to add that little tidbit.

mitch

 

[reflexology414]

oops...

Yes, we need to know what antivirus program and what firewall you are using. It may be worthless and, besides, I need to know what to recommend; I don't want to give you a program you already have.

One of my posts didn't make it to the board. I'll try again.

McAfee VirusScan Plus with Site Advisor is my anti-virus software. It's done a good job in the larger picture, but this spyware/worm waltzed right past it. I also use Spybot Search & Destroy, and that hasn't cleared this thing either (even though on a few techie sites, they claim it can).

I don't have any firewall installed. I'm new to the technical side of the picture, and when I spoke to my local computer store they made fun of me when I asked about this. The staff member I spoke to said that firewalls are for large corporations and businesses... people don't have firewalls on their personal computers at home. From what you've said here, he was wrong.

This worm is evolving. The latest piece to hit my hard drive is called

Spyware.webhancer.dr

It's all part of the same suite, but it keeps adding new components. At least that's what it looks like.

If you've got further ideas, I'll give them a try. Thanks.

 

[His Divine Shadow]

A supposed computer technician said that, eh? I must say I am shocked at that; perhaps he thought you meant hardware firewall but even then he's a bit dense for that.

You need to get one installed. A Windows computer with no firewall has been shown to be infected within minutes of being connected to the internet. There are two excellent free solutions; take your pick.

Comodo Personal Firewall
ZoneAlarm (Choose the free download, NOT the trialpay)

Once you have installed one of those let me know. You need this before we do anything else or you'll just be infected again.

 

[His Divine Shadow]

Pardon, added the ZoneAlarm link there; it did not show up due to an error on my part.

 

[reflexology414]

...

I can't make them install. I get an error message.

Error 0 running command .\CPF_Setup3.0.25.378_XP_Vista_x64.exe

Ideas? This really is a mess.

 

[His Divine Shadow]

That looks like an error on the Comodo one, correct? Did you try the ZoneAlarm one as well? Very strange. But, we shall try to work around it.

Head to TrendMicro's Housecall service. It is an online anti-malware scanner that can get many bugs out. It has the advantage of requiring no installation and so it a good first look. Let me know how that works (if at all) and we will move to another option.

 

[reflexology414]

...

You're right. It was the first one. I'll try the second one and let you know.

I already tried Housecall and it didn't touch this worm.

Thanks again for your advice and ideas.

 

[His Divine Shadow]

I had suspected Housecall would fail but hoped for the best. Alas. Once you try/succeed in installing ZoneAlarm it's time to try a new antivirus product. Note the following: any one of these is a good choice to try. If one doesn't work try a second. However, be absolutely sure that you only have ONE running at a time. Having two running for a moment or two (while you turn one on and then turn the other off) is likely okay but longer periods of co-activation can result in crashes and system instability.

avast!
AVG
Avira

Of these Avira is sometimes rated slightly higher so you may wish to try it first. You already have Spybot installed (a bit of an out-of-date program but still useful). Here are some anti-spy/malware utilities you can try as well; these can be run concurrently:

Ad-Aware
Windows Defender (If you have Vista this should already be installed)

If none of this works we can start looking at disabling things that run on computer start-up. One may be the bug; stopping it from starting may allow removal.

 

[reflexology414]

Thanks

Sorry for the delayed response. Life has been chaotic of late. I've had trouble implementing your last round of suggestions and I'm going to try again.

 

[His Divine Shadow]

Trouble? Post your troubles if they continue; work through them we shall. Most anything I say here is one of several methods; if one fails we try another.