Page 1 of 2 12 LastLast
Results 1 to 10 of 11

Thread: Trojan Horse virus

  1. #1

    Trojan Horse virus

    How do you get rid of it? I've did everything they said to do on Norton Antivirus web site but can't get rid of it... I think Norton sucks!

  2. #2
    Tiger,

    What Trojan horse are you infected with?

    PN

    http://securityresponse.symantec.com...r/vinfodb.html

  3. #3
    It scans as Download trojan...

  4. #4
    Have you tried scanning your PC with another anti-virus such as AVG, or doing an online virus scan to see if the results are any different?

    PN

    http://www.grisoft.com/us/us_404.php

    http://housecall.antivirus.com/housecall/start_corp.asp

  5. #5
    Tigger:

    If you really have a trojan horse on your PC, you should consider disconnecting from the internet and then, save all of your important files and reformat your hard drive. Maybe another member has another suggestion on how to deal with this trojan horse.

    PN

  6. #6
    Originally posted by TIGGER74:

    How do you get rid of it? I've did everything they said to do on Norton Antivirus web site but can't get rid of it... I think Norton sucks!
    Have you tried Spybot Search & Destroy?

  7. #7
    Senior Member
    Join Date
    Oct 2001
    Location
    oklahoma
    Posts
    2,335
    Hey PN,

    i ran house call scan and found

    TROJ ISTAR.A C:\_RESTORE\ARCHIVE\FS120...
    TROJ STARTPAGE.Q C:\_RESTORE\ARCHIVE\FS135...
    TROJ STARTPAGE.Q \FS135
    TROJ STARTPAGE.Q \FS135
    TROJ STARTPAGE.Q \FS135
    TROJ ISTARB C:\PROGRAMFILES\ISTsvc\ISTsvc

    any ideas pn or anyone else?

    tigger i agree norton sucks

  8. #8
    The files in _RESTORE you can just delete... info on removing Startpage.Q can be found here... the ISTARB you may be able to delete, too.

    -Steven

  9. #9
    Originally posted by TIGGER74:

    It scans as Download trojan...
    Can you give the full path to the file it says is infected?

    -Steven

  10. #10
    Originally posted by CLC379:

    Hey PN,

    i ran house call scan and found

    TROJ ISTAR.A C:\_RESTORE\ARCHIVE\FS120...
    TROJ STARTPAGE.Q C:\_RESTORE\ARCHIVE\FS135...
    TROJ STARTPAGE.Q \FS135
    TROJ STARTPAGE.Q \FS135
    TROJ STARTPAGE.Q \FS135
    TROJ ISTARB C:\PROGRAMFILES\ISTsvc\ISTsvc

    any ideas pn or anyone else?

    tigger i agree norton sucks
    well, Norton claims that Norton anti-virus "will" get rid of istsvc.exe, which happens to be an adware. In which case Spybot should get rid of it as well.

    I have found following solution; --

    Partially removed via add/remove programs (MS AUpdate and ISTbar). Use AdAware and/or Spybot to help with the cleanup.

    You can also clean up the registry:

    HKEY_CURRENT_USERS\Software\Microsoft\Windows\Curr entVersion\Run (AutoUpdater entry for 'aupdate.exe' programme or "1stService")

    HKEY_CLASSES_ROOT\CSLID\{69550BE2-9A78-11D2-BA91-00600827878D}

    HKEY_CURRENT_USER\Software\1STbar

    HKEY_CURRENT_USER\Software\IST\

    HKEY_CLASSES_ROOT\Pugi.PugiObj

    HKEY_CLASSES_ROOT\Pugi.PugiObj.1

    HKEY_CLASSES_ROOT\1STactivex.Installer.1\

    HKEY_CLASSES_ROOT\1STactivex.Installer\

    Search engine hijackings - you may also need to delete the following registry keys as per the advice in Microsoft's knowledge base article:

    http://support.microsoft.com/default...;EN-US;q323869


    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page

    Delete the following files if they exist: aupdate_uninstall.exe; aupdate.trk; aupdate.conf; aupdate.exe; istbar.dll; istsvc.exe, istactivex.dll, 1STactivex.dll, 1stactivex.inf,

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •