I cannot get rid of XXXToolBar and TinyBar!

Ever since I downloaded a program called ZoomPlayer, I have been having problems with 2 certain spyware: XXXToolBar and TinyBar.

Spyware Doctor, Ad-aware, and Spybot: Search and Destroy, all detected the spyware, and deleted them. Yet, after about 5 or so hours, the spyware is back on my computer. A file called "ISTsvc" is in my Program Files, and all of my anti-spyware programs detect the spyware again.

Even though Spyblaster is supposed to protect my computer from XXXToolBar, it does not, so I am about ready to delete it.

HijackThis! does not find anything unusual.

Avast! Antivirus found multiple trojan viruses with the name IST (this is not the full name of the virus, I just forgot the rest), but they just won't go away, even though I delete them. It seems every time I start my computer up, the viruses are detected again.

I even followed the instructions on this webpage: http://www.spyany.com/program/article_spw_rm_XXXToolBar.html , but I cannot seem to find and delete "AutoUpdater" (step 4).

I have no idea what to do now, so please, someone help. I want to get rid of this spyware once and for all.

 

I have had something like that, and my spware remover detected it, but it is actually a virus which sorta reanimates the spyware. Try a virus scan and delete it from there, or quarantine it *If it really is a virus*

 

Well, I found out that XXXToolBar doesn't re-appear on my computer 5 hours after I've deleted it with Spyware Doctor, it re-appears every time I restart my computer.

But, to the person that responded, Avast! just found a Trojan Virus called Win32: IstDnldr-T [Trj], so I think what you said was right, even though I had suspected it was a virus in the first place.

I'm 99% sure that once I restart my computer, start it back up, and run Spyware Doctor, XXXToolBar is going to be found.

I'll tell you if it is, and if anyone else knows how to help, please do so! I've been trying to get rid of all this crap for the past 3 hours, yet to no avail.

SOMEONE PLEASE HELP ME!

 

Please follow ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

After doing ALL of the above if you still have a problem:

• Download HijackThis 1.99.1

• Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

• Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the ZIP file.

• Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

• Run HijackThis and save your log file.

• Post your log as an ATTACHMENT to your next post. (Do NOT copy/paste the log into your post).

• Need help with HJT? See this thread: NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting

 

Well, XXXToolBar and TinyBar are no longer found by any of my anti-spyware programs (Nothing in the "READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal page" is responsible for getting rid of the spyware), but I still cannot get rid of the virus "Win32: IstDnldr-T [Trj]". I ran Avast! about a hour ago, and the same virus was found and supposedly deleted. Yet, I just scanned my computer with Avast!, and suprise suprise, the virus "Win32: IstDnldr-T [Trj]" was found and supposedly deleted AGAIN.

I know if I restart my computer, and scan it with Avast!, the virus is going to be found again. So is there an alternate way of getting rid of the virus? There is no trace of IST anywhere in my computer. Not in Add or Remove Programs, not in Program Files, not in Regedit, no where. So I can't imagine any way of ridding my computer of this virus.

Can someone help?

 

Never mind the previous post. Avast! is still scanning, but nothing has been found yet. The virus was found before in about 3 minutes.

So, I hope I've fully gotten rid of IST! I'll never download Zoom Player again...

 

After you complete each and every step I mentioned in the READ ME. Procede to attaching a current HJT log.