Sophos

Troj/IstBar-N

Aliases
  • IstBar-DH
Category
Type
What to do
Prevalence low high

Summary

 
Protection available since 15 July 2004 08:05:37 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/IstBar-N is a downloader Trojan.

The Trojan installs itself as a BHO plugin by creating the following registry entries:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTbarISTbar
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\
(5F1ABCDB-A875-46c1-8345-B72A4567E486)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTbarISTbar\
DisplayName = "SlotchBar"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTbarISTbar\
UninstallString = "regsvr32 /u /s "C:\NV\istbar.dll" "

Troj/IstBar-N attempts to connect to www.slotch.com and www.slotchbar.com in order to download updates.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer