Cannot Remove These - Help Please

[Chris]

Every second time I start up the following all self load and when I run
Mcafee Virus Scan it finds these;

Adware-DFC (4 locations)
PowerScan (2 locations)
Adware-180Solutions (2 locations)
YourSiteBar (2 locations)
Adware-ISTbar.b n (2 locations)
Adware-SearchAssist


Microsoft AntiSpyware finds;

AvenueMedia.DyFuCA
IST.XXXToolbar
iSearch.DesktopSearch
IST.PowerScan Adware
IST.SideFind Adware
YourSiteBar
Unclassified.Spyware.57 Spyware
Transponder.ABetterInternet.Ceres Spyware

Spybot Search & Destroy finds;

CallingHome.biz
DyFuCA.InternetOptimizer
DyFuCA
iSearch
ISearchTech.ISTsvc_Updater
ISearchTech.ISTsvc
ISearchTech.PowerScan
ISearchTech.Sidefind
ISearchTech.Slotch
n-Case

and is also constantly trying to block;

System Startup global entry - Desktop Search (c:\windows\isrvs\desktop.exe)
System Startup global entry - ffis (c:\windows\isrvs\ffisearch.exe)
System Startup global entry - IST Service (c:\Program
Files\ISTsvc\istsvc.exe)
Browser Helper Object - Value Deleted-
{00000010-6F7D-442C-93E3-4A4827C2E4C8}
Browser Helper Object - Value Deleted -
{53707962-6F74-2D53-2644-206D7942484F} (this one does not give me the option
to deny the change)

when you deny the change they just keep cycling through one after another
until you restart.

I have done these same scans in Safe Mode and then browse through the hard
drive and manually remove all unknown files and folders, the computer runs
fine for the rest of the day but on restart the next day it is the whole
regime again.

Is there some way to permanently remove all of these bastards of programs or
do I just backup my known work files and reformat and reload the whole
computer?

Any help here is greatly appreciated.

Chris

 

[JohnF.]

Ron Kinner would love to help - here is his post from another ng:

I'm bored and I haven't had a good HijackThis log to work
on all day. Will somebody take pity on me and send me a
HijackThis log?

Get HijackThis.exe from
http://tomcoyote.org/hjt/hjt199//HijackThis.exe

Save it to C:\hjt (new folder) then Open it and select
Scan and Save Log. Note where you saved the log then
send it to me as an attachment. Put Hijack in the subject
so I'll know it's not spam.

Ron Kinner
Microsoft MVP 2004 & 2005
(e-mail address removed)

 

[Engel]

Hello Chris

Get HijackThis.exe from
http://tomcoyote.org/hjt/hjt199//HijackThis.exe

Save it to C:\hjt (new folder) then Open it and select
Scan and Save Log. Note where you saved the log then send
it to Ron Kinner as an attachment. He can probably
identify the problem and tell you how to get rid of it for
good.
Ron email address. (e-mail address removed)
He will tell you what to do next. Put Hijack in the
subject so he will know it's not spam.

For information
HijackThis tutorial:
http://www.bleepingcomputer.com/forums/index.php?
showtutorial=42

Also maybe you need to run CCleaner

www.ccleaner.com/

Good luck

Engel

 

[Bill Sanderson]

Additionally - Steve Dodson has said he wants to hear from folks with
resistant Istbar infections--drop a line to:

(e-mail address removed)

with a subject header including ISTBAR.