it consultancy

ISTbar XXXToolbar malware

ISTbar_XXXToolbar details

  • Description

    Unknown

  • Alias

    Spyware/ISTbar [Panda]TrojanDownloader.Win32.Istbar.eo

  • Dll

    Program Filesistbaristbar.dll

  • Registry

    HKEY_CLASSES_ROOTclsid{386a771c-e96a-421f-8ba7-32f1b706892f}HKEY_CLASSES_ROOTclsid{5f1abcdb-a875-46c1-8345-b72a4567e486}HKEY_CLASSES_ROOTclsid{5f1abcdb-a875-46c1-8345-b72a4567e486} istbarHKEY_CLASSES_ROOTclsid{5f1abcdb-a875-46c1-8345-b72a4567e486}inprocserver32 c:progra~1istbaristbar.dllHKEY_CLASSES_ROOTclsid{5f1abcdb-a875-46c1-8345-b72a4567e486}inprocserver32 threadingmodel apartmentHKEY_CLASSES_ROOTclsid{5f1abcdb-a875-46c1-8345-b72a4567e486}progid pugi.pugiobj.1HKEY_CLASSES_ROOTclsid{5f1abcdb-a875-46c1-8345-b72a4567e486} ypelib {6d3f5de4-e980-4407-a10f-9ac771abaae6}HKEY_CLASSES_ROOTclsid{5f1abcdb-a875-46c1-8345-b72a4567e486}versionindependentprogid pugi.pugiobjHKEY_CLASSES_ROOTclsid{8cba1b49-8144-4721-a7b1-64c578c9eed7}HKEY_CLASSES_ROOTinterface{0985c112-2562-46f2-8da6-92648ba4630f}HKEY_CLASSES_ROOTinterface{339d8aff-0b42-4260-ad82-78ce605a9543}HKEY_CLASSES_ROOTinterface{7b9a715e-9d87-4c21-bf9e-f914f2fa953f}HKEY_CLASSES_ROOTinterface{a36a5936-cfd9-4b41-86bd-319a1931887f}HKEY_CLASSES_ROOTinterface{aa4939c3-deca-4a48-a454-97cd587c0ef5}HKEY_CLASSES_ROOTinterface{eee4a2e5-9f56-432f-a6ed-f6f625b551e0}HKEY_CLASSES_ROOTpugi.pugiobj istbarHKEY_CLASSES_ROOTpugi.pugiobj.1 istbarHKEY_CLASSES_ROOTpugi.pugiobj.1clsid {5f1abcdb-a875-46c1-8345-b72a4567e486}}HKEY_CLASSES_ROOTpugi.pugiobjclsid {5f1abcdb-a875-46c1-8345-b72a4567e486}}HKEY_CLASSES_ROOTpugi.pugiobjcurver pugi.pugiobj.1HKEY_CLASSES_ROOT ypelib{6d3f5de4-e980-4407-a10f-9ac771abaae6}1.0 pugi 1.0 type libraryHKEY_CLASSES_ROOT ypelib{6d3f5de4-e980-4407-a10f-9ac771abaae6}1.0win32 c:program filesistbaristbar.dllHKEY_CLASSES_ROOT ypelib{6d3f5de4-e980-4407-a10f-9ac771abaae6}1.0flags 0HKEY_CLASSES_ROOT ypelib{6d3f5de4-e980-4407-a10f-9ac771abaae6}1.0helpdir c:program filesistbarHKEY_CURRENT_USERsoftwareistecoverHKEY_CURRENT_USERsoftwareistbaristbar oolbar_idHKEY_LOCAL_MACHINEsoftwareclassesclsid{5f1abcdb-a875-46c1-8345-b72a4567e486}HKEY_LOCAL_MACHINEsoftwareclassesinterface{0985c112-2562-46f2-8da6-92648ba4630f}HKEY_LOCAL_MACHINEsoftwareclassesinterface{7b9a715e-9d87-4c21-bf9e-f914f2fa953f}HKEY_LOCAL_MACHINEsoftwareclassesinterface{aa4939c3-deca-4a48-a454-97cd587c0ef5}HKEY_LOCAL_MACHINEsoftwareclassesinterface{eee4a2e5-9f56-432f-a6ed-f6f625b551e0}HKEY_LOCAL_MACHINEsoftwareclasses ypelib{67907b3c-a6ef-4a01-99ad-3fcd5f526429}HKEY_LOCAL_MACHINEsoftwareclasses ypelib{d0288a41-9855-4a9b-8316-babe243648da}HKEY_LOCAL_MACHINEsoftwaremicrosoftcode store databasedistribution units{386a771c-e96a-421f-8ba7-32f1b706892f} HKEY_LOCAL_MACHINEsoftwaremicrosoftcode store databasedistribution units{7c559105-9ecf-42b8-b3f7-832e75edd959}containsfilesc:windowsdownloaded program filesistactivex.dllHKEY_LOCAL_MACHINEsoftwaremicrosoftinternet explorer oolbar{5f1abcdb-a875-46c1-8345-b72a4567e486}HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallistbaristbar displayname xxxtoolbarHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallistbaristbar uninstallstring regsvr32 /u /s "c:program filesistbaristbar.dll"