Systweak Spyware Library
Systweak Spyware Library text
More than 21875 spyware signatures and growing
Microsoft Gold Certified Partner
Search in:
Comparison Details for ISTBar
Description: ISTbar is a homepage and search hijacking adware. It adds a toolbar to Internet Explorer and displays popup ads that come mainly from porn sites.

#

SPYWARE

Advanced System Protector
Counter Spy
Spy Doctor
Spy Sweeper
Trend Micro

S.NO

File Path

Detected |Cleaned

Detected |Cleaned

Detected |Cleaned

Detected |Cleaned

Detected |Cleaned

1

Main exe (malware.exe)

2

C:\Documents and Settings\Administrator\Cookies\ad
ministrator@xxxtoolbar[1].txt

3

C:\Documents and Settings\Administrator\Local Sett
ings\Temp\istsv_.exe

4

C:\Documents and Settings\Administrator\Local Sett
ings\Temporary Internet Files\Content.IE5\PVRA
W1X5\istsvc[1].exe

5

C:\WINDOWS\ikhno.exe

6

C:\Program Files\ISTsvc

7

C:\Program Files\ISTsvc\ISTSVC.EXE

Registry Comparison Results

1

HKEY_CURRENT_USER\Software\IST()

2

HKEY_CURRENT_USER\Software\IST(Recover)

3

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc()

4

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc(version)

5

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc(app_name)

6

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc(popup_url)

7

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc(update_url)

8

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc(config_url)

9

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc(popup_initial_delay)

10

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc(popup_count)

11

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc(update_count)

12

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc(update_version)

13

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc(config_count)

14

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc(account_id)

15

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc(app_date)

16

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc(popup_interval)

17

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc(popup_last)

18

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc(update_interval)

19

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc(update_last)

20

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc(config_interval)

21

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc(config_last)

22

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc(ui)

23

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc(popup_titletext)

24

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc(popup_day_count)

25

HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc(popup_day_limit)

26

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wi
ndows\CurrentVersion\Run(IST Service)

27

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wi
ndows\CurrentVersion\Run(DKxcWDC)

28

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wi
ndows\CurrentVersion\Uninstall\ISTsvc()

29

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wi
ndows\CurrentVersion\Uninstall\ISTsvc(DisplayName)

30

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wi
ndows\CurrentVersion\Uninstall\ISTsvc(UninstallString)

31

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wi
ndows\CurrentVersion\Uninstall\ISTsvc(NoModify)

32

HKEY_USERS\S-1-5-21-1614895754-180167453
1-839522115-500\Software\IST()

33

HKEY_USERS\S-1-5-21-1614895754-180167453
1-839522115-500\Software\IST(Recover)

Microsoft Gold Certified Partner

© Systweak Inc., 1999-2018 All rights reserved.