"ISTsvc" won't go away.....

[Guest]

I have used Ad-ware, Spybot, CWSchredder, Process Explorer both in safe mode
and regular mode and still it keeps popping back up. I have gone into
Regedit and deleted it many times but it still keeps getting reloaded........
Help!!!!!!!!

 

[David H. Lipman]

From: "Richard Hollister" <[email protected](donotspam)>

| I have used Ad-ware, Spybot, CWSchredder, Process Explorer both in safe mode
| and regular mode and still it keeps popping back up. I have gone into
| Regedit and deleted it many times but it still keeps getting reloaded........
| Help!!!!!!!!
| --
| Richard

Use BHODemon -- http://www.definitivesolutions.com/bhodemon.htm

 

[Guest]

I tried the suggested approach, running it 2 or 3 times. I did catch a
"trojan" IST but after I rebooted and turned back on the restore and again
rebooted, wala.... there in the programs sublibrary was the good ol
"istsvc.exe". which of course doesn't allow me to rename it and delete it.
or just delete it. It also showed back up in the registery. Anything else
I can do?????

 

[BUCKO]

try spyware doctor 3.1. download trial and keygen the serial. I had this
two and it took a reboot with sd to shift it.

 

[BUCKO]

try spyware doctor 3.1. download trial and keygen the serial. I had thi
too and it took a reboot with sd to shift i

 

[David H. Lipman]

From: "Richard Hollister" <[email protected](donotspam)>

| Thanks Bucko, but I couldn't find a good site to go to get the download of
| 3.1. Maybe you have an url for me??
|
| "BUCKO" wrote:
|


In addition to my other reply...

Please read the following URL on Clean Booting XP
http://support.microsoft.com/kb/310353

Also use BHODemon -- http://www.definitivesolutions.com/bhodemon.htm

BHODemon "should" be effective.

 

[Guest]

Hi Dave, I got your message about not opening up another thread.

I did as instructed and no matter what I use, I cannot get rid of this pest.
I went into Norton with a search of ISTsvc and got about what you indicated.
It will id the culprit and delete it, but it still comes back. This little
bugger is hiding somewhere with another name maybe........... still looking
for a resulution....

R.........

 

[David H. Lipman]

From: "Richard Hollister" <[email protected](donotspam)>

| Hi Dave, I got your message about not opening up another thread.
|
| I did as instructed and no matter what I use, I cannot get rid of this pest.
| I went into Norton with a search of ISTsvc and got about what you indicated.
| It will id the culprit and delete it, but it still comes back. This little
| bugger is hiding somewhere with another name maybe........... still looking
| for a resulution....
|
| R.........
|
| "David H. Lipman" wrote:
|
Richard:

The following is from a thread in; alt.privacy.spyware

From: "Dave" <[email protected]>

|> A nasty bit of spyware called ISTsvc has got itself onto my XP machine and
no matter what I do I can't seem to get rid of it.
Spybot S & D, Adaware and Hijack This seem to find it and get rid of it
but once you reboot and rescan it's back.
Deleting the folder and file at C:/Program Files/ISTsvc/ISTsvc.exe again
only works until a reboot.
I've deleted every registry entry I could find with that name in it yet
it keeps on coming back.
I've tried the Symantec tool for this and it says it can't even see it
on the machine.
Any help will be very much appreciated!

David H. Lipman wrote:

You have to perform the scans in Safe Mode and shutdown as many applications as
possible
prior to performing the scans.
Please read the following URL on Clean Booting XP
http://support.microsoft.com/kb/310353
Also try BHODemon -- http://www.definitivesolutions.com/bhodemon.htm


Hi David

Many thanks for that. BHODemon along with CounterSpy have done the
trick. No sign of ISTsvc now.

Your advice was much appreciated!

Thanks again
Dave

 

[Guest]

Ok Dave, it is looking better.
I ran the "Clean Boot" as you instructed, a bunch of times and when I start
turning on the "load startup items" it comes back. I turned everything on
but that, (after selectively turning each back on and when I turn the above
item back on.....wala here she comes again. Turning just the "load startup
items" back off I don't see the little guy pop up "YET".

What do you think????

R........

 

[David H. Lipman]

From: "Richard Hollister" <[email protected](donotspam)>

| Ok Dave, it is looking better.
| I ran the "Clean Boot" as you instructed, a bunch of times and when I start
| turning on the "load startup items" it comes back. I turned everything on
| but that, (after selectively turning each back on and when I turn the above
| item back on.....wala here she comes again. Turning just the "load startup
| items" back off I don't see the little guy pop up "YET".
|
| What do you think????
|
| R........
|
| "David H. Lipman" wrote: |

I don't think -- I'm not in front of the computer. ;-)

Did you see my other reply in this thread ?

 

[Guest]

I ran everything that I could. A - E plus some more. It did not id the
ISTsvc that was in c:\program files. It still comes up after I reboot out of
safe mode. I ran the combination of sysclean,stinger and ad-aware but it
still comes back.

R.....

 

[David H. Lipman]

From: "Richard Hollister" <[email protected](donotspam)>

| I ran everything that I could. A - E plus some more. It did not id the
| ISTsvc that was in c:\program files. It still comes up after I reboot out of
| safe mode. I ran the combination of sysclean,stinger and ad-aware but it
| still comes back.
|
| R.....
| | "David H. Lipman" wrote:

Then you did NOT read my other reply in this thread !

Please read EVERY reply I made in this thread.