Win32: IstDnldr-T [Trj] ... HELP!!!

Viruses and worms
1

Hi. Can somebody help me? :-\
My Avast Home edition detects a Win32: IstDnldr-T [Trj] and i can’t get rid of it. >:(
It’s loccated in C:\Documents and Settings\propriétaire\Local Settings\Temporary Internet Files\Content.IESt\BOEALN71\istsvc[1].exe
I did a Boot scan and it’s still there… I can’t manage to get rid of it. ???

2

Hi,

just close all programs&browser windows, then go:
Controlpanel → Internetoptions → delete files → check OFFLINE files -.> OK → OK

also work through the link “VirusRemoval” below in my sig on how to make yur browser & system more secure
:wink:

3

Thanks for the advice but… I already did that and it’s still detected when i reboot my PC. :-\ I’ll Check your link but, is it normal? What can i do more? ???

4

I have tried several things like, Disabling the system restor, Safe mode Reboot and running Spybuts Search and destroy after doing those… And the frrrreaken istsvc.exe comes back in my temporary Internet Files folder
http://www.messengermods.com/data/thumbnails/3/angrymad.jpg
even if i delete it manually.
http://www.messengermods.com/data/thumbnails/3/grumpy.jpg
Can anyone help me with that? I’m resourceless.
http://www.messengermods.com/data/thumbnails/3/sad.gif

5

Hi,

please post a hijackthis-Log for diagnosis: http://tomcoyote.org/hjt

6

I agree with whocares. Also, you may want to try this removal tool too: http://securityresponse.symantec.com/avcenter/venc/data/adware.istbar.html

7

Also try and run CCleaner

8

OK so do these thing:

Run ccleaner (see above)
Post a hijackthis log (see above)
Let us know the location and file name of this infection.

–lee

9

Hey! Thanks everybody for your help! :slight_smile:
But… unfortunately… I got mad at that virus and decided to format. :o Next time, if something like that happens, (and lets hope not ::)) i’ll try to pump up my patience and work with you guys! :wink: ;D
So thanks again, i appreciate it. Ciao! :slight_smile: