How Do I Get Rid Of...

Solid Lifters

Solid Lifters

In Memoriam
19,311
United States
Inland Empire SoCal
SOLID_LIFTERS
...the ISTbar hijacker located at hkey_local_machine\software\microsoft\downloadmanager

So, I hit run and then enter regedit. I got the right folder and then the right file and then what? How do I get rid of it besides selecting delete? My options are New, Find, Delete, Rename, Export, Permissions and Copy Key Name. There are more options under New.
 
Can you not delete it? Try using a program like mcafee shredder, ones that don't even leave a shadow of the old file. That might work.
 
phat_pengiun
Can you not delete it? Try using a program like mcafee shredder, ones that don't even leave a shadow of the old file. That might work.
Click to expand...
Thanks for replying, but no, I'm too affraid to delete the download manager. That's the only option I know to get rid of it. But, I need the download manager, don't I? Once I delete it, I can't get it back, nor could I retrieve it with a system restore, correct?

I have Spy Subtract, which is great, and McAfee virus scan but they don't catch it. I found it with a pc security pest scan. Other than that, I don't know what next to do. I even did a scan for the ISTbar hijaker at Symantec, which was an ISTbar remover, and it came up with nothing!

So, now what?

Wow, this is going to take a long time. I see what I have to do, but I'm still a little confused. Some steps don't make sense to me.

http://securityresponse.symantec.com/avcenter/venc/data/adware.istbar.html
 
Solid Lifters
Thanks for replying, but no, I'm too affraid to delete the download manager. That's the only option I know to get rid of it. But, I need the download manager, don't I? Once I delete it, I can't get it back, nor could I retrieve it with a system restore, correct?
Click to expand...
Right click on the folder that the registry key resides in and hit Export. This will make a *.reg file with all the registry entries in that folder. Now if you delete the download manager and something goes wrong, just double-click the *.reg file to re-enter all the registry entries. :)

But can't you just run Ad-Aware or something?
 
Shannon
Right click on the folder that the registry key resides in and hit Export. This will make a *.reg file with all the registry entries in that folder. Now if you delete the download manager and something goes wrong, just double-click the *.reg file to re-enter all the registry entries. :)

But can't you just run Ad-Aware or something?
Click to expand...

I did run Ad-Aware. Twice. Once in safe mode. It didn't catch it. Nor did both McAfee virus scans, once in safe mode, or two Symantec scans including one in safe mode which is the ISTbar remover. I guess they all need to be updated. This ISTbar hijaker had a newer date of 6/21/2005 on it. The Symantec ISTbar remover was last updated March 2005.

But, I just followed your instructions and all is good! It's now gone and download manager is still working. Yeah! :)

Thanks Shannon! 👍
 
LoudMusic
System administrators have but one answer.
Click to expand...
Son: "Hey dad, my car is running strange, can you help me fix it?"

Father: "Format then reinstall."

:lol:
 
LoudMusic
System administrators have but one answer.
Click to expand...

lets see, from the 5 minutes it took to remove a registry entry you would have been about 10% into formatting. formatting is not the answer to everything.


OmFgZ my MSN isnt showing my currently playing song! FORMAT! :dunce:
 
Solid Lifters, I see you already removed it 👍 but I use Ad Aware SE Personal and it has caught things like that Istbar and others, often these things get on your PC from downloading programs like P2P's, & ofcourse alot of "free stuff" that contain "3rd party softwares"... :yuck:

Anyways, it has an automatic update feature that usually lets you know that your "definitions" are XX days old and checks for updates w\ your permission, you can upgrade the SE version to add features by purchasing it, I think it has a feature like you mentioned not having, something that detects this stuff trying to get on your PC ..

Also 💡 theres a nice registry editor here
http://www.worldstart.com/weekly-download/archives/reg-cleaner4.3.htm
It allows you to view and delete startups, program entries denoting author, program name and age etc, it tells you what other keys will be affected if you delete a particular entry, it makes backup copies of files as you delete them so if something odd happens after deleting a file(s), you can simply restore it ... To me its just abit friendlier than MS regedit ..
 
Spyware Blaster and Spybot are an excellent pair for prevention of such things.
 
Solid Lifters
Thanks for replying, but no, I'm too affraid to delete the download manager. That's the only option I know to get rid of it. But, I need the download manager, don't I? Once I delete it, I can't get it back, nor could I retrieve it with a system restore, correct?

I have Spy Subtract, which is great, and McAfee virus scan but they don't catch it. I found it with a pc security pest scan. Other than that, I don't know what next to do. I even did a scan for the ISTbar hijaker at Symantec, which was an ISTbar remover, and it came up with nothing!

So, now what?

Wow, this is going to take a long time. I see what I have to do, but I'm still a little confused. Some steps don't make sense to me.

http://securityresponse.symantec.com/avcenter/venc/data/adware.istbar.html
Click to expand...

It's nothing to do with the Download Manager. However, the link that you gave includes a link to a file that does the removal for you! It's right under the section entitled "Removal Instructions". 💡 You can do a manual removal, but it looks like quite a lot of work to do a full removal.

If you're on Windows XP, set a System Restore point before you make any changes.
 
GilesGuthrie
It's nothing to do with the Download Manager. However, the link that you gave includes a link to a file that does the removal for you! It's right under the section entitled "Removal Instructions". 💡 You can do a manual removal, but it looks like quite a lot of work to do a full removal.

If you're on Windows XP, set a System Restore point before you make any changes.
Click to expand...
The removal program never worked. I was told that a system restore wont undo changes made to the registry. That's why I was hesitant to do anything.

I have Spy Bot, Spy Subtract (Damn Good Program!), Ad-Aware SE Personal and McAfee virus and spyware blocker. None of those were able to stop it. It was a new hijaker at the time. I've since had my McAfee and Spy Subtract updated and I no longer have a problem with it.
 
Solid Lifters
The removal program never worked. I was told that a system restore wont undo changes made to the registry. That's why I was hesitant to do anything.

I have Spy Bot, Spy Subtract (Damn Good Program!), Ad-Aware SE Personal and McAfee virus and spyware blocker. None of those were able to stop it. It was a new hijaker at the time. I've since had my McAfee and Spy Subtract updated and I no longer have a problem with it.
Click to expand...
Actually, restoring registry settings is all that System Restore does. The downside is you need to set a restore point beforehand. And that's pretty useless as you never know when a malicous attack on your registry will happen to make a restore point beforehand.

The only time its useful, really, is when you're playing with something you know might have negative effects. Having said that, I've completely disabled System Restore (even the Windows service).
 
VTGT07
Son: "Hey dad, my car is running strange, can you help me fix it?"

Father: "Format then reinstall."

:lol:
Click to expand...
1459.gif

format....and reinstall....god that's funny.
 

Latest Posts

Back