Every second time I start up the following all self load and when I run
Mcafee Virus Scan it finds these;

Adware-DFC (4 locations)
PowerScan (2 locations)
Adware-180Solutions (2 locations)
YourSiteBar (2 locations)
Adware-ISTbar.b n (2 locations)
Adware-SearchAssist


Microsoft AntiSpyware finds;

AvenueMedia.DyFuCA
IST.XXXToolbar
iSearch.DesktopSearch
IST.PowerScan Adware
IST.SideFind Adware
YourSiteBar
Unclassified.Spyware.57 Spyware
Transponder.ABetterInternet.Ceres Spyware

Spybot Search & Destroy finds;

CallingHome.biz
DyFuCA.InternetOptimizer
DyFuCA
iSearch
ISearchTech.ISTsvc_Updater
ISearchTech.ISTsvc
ISearchTech.PowerScan
ISearchTech.Sidefind
ISearchTech.Slotch
n-Case

and is also constantly trying to block;

System Startup global entry - Desktop Search (c:\windows\isrvs\desktop.exe)
System Startup global entry - ffis (c:\windows\isrvs\ffisearch.exe)
System Startup global entry - IST Service (c:\Program
Files\ISTsvc\istsvc.exe)
Browser Helper Object - Value Deleted-
{00000010-6F7D-442C-93E3-4A4827C2E4C8}
Browser Helper Object - Value Deleted -
{53707962-6F74-2D53-2644-206D7942484F} (this one does not give me the option
to deny the change)

when you deny the change they just keep cycling through one after another
until you restart.

I have done these same scans in Safe Mode and then browse through the hard
drive and manually remove all unknown files and folders, the computer runs
fine for the rest of the day but on restart the next day it is the whole
regime again.

Is there some way to permanently remove all of these bastards of programs or
do I just backup my known work files and reformat and reload the whole
computer?

Any help here is greatly appreciated.

Chris

Ron Kinner would love to help - here is his post from another ng:

I'm bored and I haven't had a good HijackThis log to work
on all day. Will somebody take pity on me and send me a
HijackThis log?

Get HijackThis.exe from
http://tomcoyote.org/hjt/hjt199//HijackThis.exe

Save it to C:\hjt (new folder) then Open it and select
Scan and Save Log. Note where you saved the log then
send it to me as an attachment. Put Hijack in the subject
so I'll know it's not spam.

Ron Kinner
Microsoft MVP 2004 & 2005
(E-Mail Removed)


"Chris" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Every second time I start up the following all self load and when I run
> Mcafee Virus Scan it finds these;
>
> Adware-DFC (4 locations)
> PowerScan (2 locations)
> Adware-180Solutions (2 locations)
> YourSiteBar (2 locations)
> Adware-ISTbar.b n (2 locations)
> Adware-SearchAssist
>
>
> Microsoft AntiSpyware finds;
>
> AvenueMedia.DyFuCA
> IST.XXXToolbar
> iSearch.DesktopSearch
> IST.PowerScan Adware
> IST.SideFind Adware
> YourSiteBar
> Unclassified.Spyware.57 Spyware
> Transponder.ABetterInternet.Ceres Spyware
>
> Spybot Search & Destroy finds;
>
> CallingHome.biz
> DyFuCA.InternetOptimizer
> DyFuCA
> iSearch
> ISearchTech.ISTsvc_Updater
> ISearchTech.ISTsvc
> ISearchTech.PowerScan
> ISearchTech.Sidefind
> ISearchTech.Slotch
> n-Case
>
> and is also constantly trying to block;
>
> System Startup global entry - Desktop Search
> (c:\windows\isrvs\desktop.exe)
> System Startup global entry - ffis (c:\windows\isrvs\ffisearch.exe)
> System Startup global entry - IST Service (c:\Program
> Files\ISTsvc\istsvc.exe)
> Browser Helper Object - Value Deleted-
> {00000010-6F7D-442C-93E3-4A4827C2E4C8}
> Browser Helper Object - Value Deleted -
> {53707962-6F74-2D53-2644-206D7942484F} (this one does not give me the
> option to deny the change)
>
> when you deny the change they just keep cycling through one after another
> until you restart.
>
> I have done these same scans in Safe Mode and then browse through the hard
> drive and manually remove all unknown files and folders, the computer runs
> fine for the rest of the day but on restart the next day it is the whole
> regime again.
>
> Is there some way to permanently remove all of these bastards of programs
> or do I just backup my known work files and reformat and reload the whole
> computer?
>
> Any help here is greatly appreciated.
>
> Chris
>

Hello Chris

Get HijackThis.exe from
http://tomcoyote.org/hjt/hjt199//HijackThis.exe

Save it to C:\hjt (new folder) then Open it and select
Scan and Save Log. Note where you saved the log then send
it to Ron Kinner as an attachment. He can probably
identify the problem and tell you how to get rid of it for
good.
Ron email address. (E-Mail Removed)
He will tell you what to do next. Put Hijack in the
subject so he will know it's not spam.

For information
HijackThis tutorial:
http://www.bleepingcomputer.com/forums/index.php?
showtutorial=42

Also maybe you need to run CCleaner

www.ccleaner.com/

Good luck

Engel
>-----Original Message-----
>Every second time I start up the following all self load
and when I run
>Mcafee Virus Scan it finds these;
>
>Adware-DFC (4 locations)
>PowerScan (2 locations)
>Adware-180Solutions (2 locations)
>YourSiteBar (2 locations)
>Adware-ISTbar.b n (2 locations)
>Adware-SearchAssist
>
>
>Microsoft AntiSpyware finds;
>
>AvenueMedia.DyFuCA
>IST.XXXToolbar
>iSearch.DesktopSearch
>IST.PowerScan Adware
>IST.SideFind Adware
>YourSiteBar
>Unclassified.Spyware.57 Spyware
>Transponder.ABetterInternet.Ceres Spyware
>
>Spybot Search & Destroy finds;
>
>CallingHome.biz
>DyFuCA.InternetOptimizer
>DyFuCA
>iSearch
>ISearchTech.ISTsvc_Updater
>ISearchTech.ISTsvc
>ISearchTech.PowerScan
>ISearchTech.Sidefind
>ISearchTech.Slotch
>n-Case
>
>and is also constantly trying to block;
>
>System Startup global entry - Desktop Search
(c:\windows\isrvs\desktop.exe)
>System Startup global entry - ffis
(c:\windows\isrvs\ffisearch.exe)
>System Startup global entry - IST Service (c:\Program
>Files\ISTsvc\istsvc.exe)
>Browser Helper Object - Value Deleted-
>{00000010-6F7D-442C-93E3-4A4827C2E4C8}
>Browser Helper Object - Value Deleted -
>{53707962-6F74-2D53-2644-206D7942484F} (this one does not
give me the option
>to deny the change)
>
>when you deny the change they just keep cycling through
one after another
>until you restart.
>
>I have done these same scans in Safe Mode and then browse
through the hard
>drive and manually remove all unknown files and folders,
the computer runs
>fine for the rest of the day but on restart the next day
it is the whole
>regime again.
>
>Is there some way to permanently remove all of these
bastards of programs or
>do I just backup my known work files and reformat and
reload the whole
>computer?
>
>Any help here is greatly appreciated.
>
>Chris
>
>
>.
>

Additionally - Steve Dodson has said he wants to hear from folks with
resistant Istbar infections--drop a line to:

as-(E-Mail Removed)

with a subject header including ISTBAR.

--
FAQ for Microsoft Antispyware:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

"Chris" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Every second time I start up the following all self load and when I run
> Mcafee Virus Scan it finds these;
>
> Adware-DFC (4 locations)
> PowerScan (2 locations)
> Adware-180Solutions (2 locations)
> YourSiteBar (2 locations)
> Adware-ISTbar.b n (2 locations)
> Adware-SearchAssist
>
>
> Microsoft AntiSpyware finds;
>
> AvenueMedia.DyFuCA
> IST.XXXToolbar
> iSearch.DesktopSearch
> IST.PowerScan Adware
> IST.SideFind Adware
> YourSiteBar
> Unclassified.Spyware.57 Spyware
> Transponder.ABetterInternet.Ceres Spyware
>
> Spybot Search & Destroy finds;
>
> CallingHome.biz
> DyFuCA.InternetOptimizer
> DyFuCA
> iSearch
> ISearchTech.ISTsvc_Updater
> ISearchTech.ISTsvc
> ISearchTech.PowerScan
> ISearchTech.Sidefind
> ISearchTech.Slotch
> n-Case
>
> and is also constantly trying to block;
>
> System Startup global entry - Desktop Search
> (c:\windows\isrvs\desktop.exe)
> System Startup global entry - ffis (c:\windows\isrvs\ffisearch.exe)
> System Startup global entry - IST Service (c:\Program
> Files\ISTsvc\istsvc.exe)
> Browser Helper Object - Value Deleted-
> {00000010-6F7D-442C-93E3-4A4827C2E4C8}
> Browser Helper Object - Value Deleted -
> {53707962-6F74-2D53-2644-206D7942484F} (this one does not give me the
> option to deny the change)
>
> when you deny the change they just keep cycling through one after another
> until you restart.
>
> I have done these same scans in Safe Mode and then browse through the hard
> drive and manually remove all unknown files and folders, the computer runs
> fine for the rest of the day but on restart the next day it is the whole
> regime again.
>
> Is there some way to permanently remove all of these bastards of programs
> or do I just backup my known work files and reformat and reload the whole
> computer?
>
> Any help here is greatly appreciated.
>
> Chris
>