My Bitdefender
  • 0 Shopping Cart

SHARE
THIS ON

Facebook Twitter Google Plus

Trojan.Downloader.Istbar.NN

LOW
LOW
~ 69kb
(Trojan-Downloader.Win32.IstBar.nj, Win32/Istbar.BN!Trojan, W32/Istbar.NJ!dldr)

Symptoms

Possible pressence of the IstBAR toolbar in Internet Explorer browser and/or other malware.

Removal instructions:

Please let BitDefender disinfect your files.

Analyzed By

Marian RADU, virus researcher

Technical Description:

This malware is an online installer created with NullSoft Installer.

Upon execution it announces the user that it will install a toolbar for "Internet Explorer" but no "Cancel" option is present, only one "Agree" button. If pressed, an executable file from http://www.ysbweb.com/ist/softwares/[removed] will be downloaded, saved as "gkey.dll" in the temporary folder, and executed as an ".exe".

In fact, the downloaded file could be either a toolbar, another trojan downloader or even other malware.