A Trojan Horse Downloader .IstBar.4.H has been found in my System Volume Information_restore file- I use AVG antoivirus- the antivirus shield says run AVG to cleanse and later the warning dialog box appears saying it is there.
When I run AVG it does not show the virus and there are some files and folders that it cannot open to check.
I ran Stinger and it does not clean it- Does anyone have any idea what to do?
Thanks

I assume that you have either Windows ME or XP

Go to this page and temporarily disable system restore

Run a full Antivirus scan

Once declared clean, re-enable system restore

IstBar is an adware/spyware program (hate that stuff). Do you have a firewall turned on. Minimally turn on Microsoft's ( if you're using XP). I would recommend a program called Zonealert. It's free. Works great. Go to Zonealarm.com. Go to the download page. Load the Trial version of Zonealarm. It's easy to use and it is intuitive. If you continue to have adware/spyware problems, go to this website, Merijin.org

What I usually suggest in situation like this are following steps:

- Go to "Safe mode with networking"

- Scan your computer here - http://housecall.antivirus.com/house...tart_frame.asp
(should find infected file and let you remove it)

- Install a firewall (Zonealarm is good, same with Sygate Personall Firewall)

- After that go back to normal mode and see what's going on

Alternatively, follow 'Puta's adbvice. After all, it's right.

Yes Nirvana,
The firewall and protection should be installed afterwards, making sure we start with a clean slate.

This is the BEST way to remove that virus!

1) download Norton Antivirus (2003 or 2004) or buy it

2) now use norton antivirus to run a full system scan

3) wah lah! trojan Destroyed!!!

the full version Norton antivirus is worth every cent than the demo you can download
I've used it everytime and it even updates its virus list AUTOMATICALLY!

Some may argue about that. You can get free alternatives to Norton that are much better and downloading "cracks" is not a good idea, thats why your post was edited.

This is a very simple problem and a solution has already been given by putasolutions.