Spy Ware

[StevePlym]

I seem to have got some spyware installed on my pc - istsvc.exe it seems to
be.

Ad-Aware entifies it d ells me it has removed it - but when the pc reboots
the program reappears.

I've tried removing regiretres that reference the software and removing the
line in startup that refers to it - using msconfig - but nothing seems to
shift it.

Does anyone have instructions about getting rid of this pest?

Thanks in advance.


Steve

 

[Guest]

Go here - http://www.neuber.com/taskmanager.

Had a mate who had the same issue and this resolved it, but it does have
mixed results apparently.

 

[Mike Hall]

Steve

If a spyware removal program claims to have removed an instance of spyware,
it is probably being truthful.. so why does it come back?

I will give you an example.. Messenger Plus is an add-on for Windows/MSN
Messenger.. if the program is installed with sponsor stuff accepted, you
will get SEARCHWEB2 appear.. using a spyware removal program, it appears to
go.. of course, when one reboots, Messenger Plus puts it all back.. the only
way around is to uninstall Messenger Plus ensuring that the sponsor software
is selected for removal too.. then reinstall Mess. Plus WITHOUT the sponsor
software.. problem solved..

You could well have an instance of this happening to you.. it will not be
the fault of Messenger Plus in this case, but could well be something that
you have installed recently..

You may want to download and run Spyware Blaster.. this program stops
spyware reinstalling itself..

http://www.javacoolsoftware.com/spywareblaster.html

Good luck

Mike Hall

 

[Guest]

Mike,
I had this happen to several Machines and what it usually is is a hidden
..dll that is respawning the the spy/adware. I had the best results running
the adware first, then running spybot search and destroy, use the imunize
option with spybot and make sure you download all available updates. And last
run a freeware program called HiJackthis. This program works best if you burn
it to a CD, then run it from there, that way it just blasts the HIjacks into
lala land and not to a file on your drive.
Here is a link or you can just go type it into google.
http://www.spychecker.com/download/download_hijackthis.html

 

[StevePlym]

Hi there guys! TGhanks for all your help.

Mike's suggestion of Spyware Blaster seems to have worked. I'll let you know
if the pesky software gets back.

Thanks again.


Steve

 

[StevePlym]

Bad news guys!

istsrvc.exe has got back into the system somehow.

Previously I ran AdAware which recommended rebooting before letting AdAware
delete the offending items.

I did that and it looked like SpyBlaster had stopped it coming back - but,
that happy state of affairs didn't last long.

Any more suggestions out there?


Steve

 

[Mike Hall]

Steve

You have a program or something that is re-installing it when run.. as I
have already said, SearchWeb2 sits underneath Messenger Plus.. you may well
find that your problem is similar..

Mike